last executing test programs: 2.903827193s ago: executing program 1 (id=2310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70000850000000100"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000095280500240012800c0001006d6163766c616e00140000010010000000080003000200000008000500", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x1, 0x4, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x10031, 0x700, 0x101, 0x4000}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@dev, @local, 0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xeb, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r14, 0x40047440, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0xd3, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x10001, 0xfffffff1, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@end, @end]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000bc0)={@private1, 0x0}, &(0x7f0000000c00)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000030c0)=ANY=[@ANYBLOB="e0080000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400c8d6000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffff7f080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRESOCT=r19, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="f00002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400c800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="eea6033e93a4eb3d4a63a6f83a9bac4d02c61eb0c1f54b", @ANYRES32=0x0, @ANYBLOB="e001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff0f000008000600", @ANYRES32=r10, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000001000008000100", @ANYRES32=r13, @ANYBLOB="fc0002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004008100000f00000000060000033761085ad00105040100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="6fcc6f8a", @ANYRES32=r18, @ANYBLOB="c00002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r19, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r20, @ANYBLOB="b40102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="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", @ANYRES32=r21, @ANYRESOCT=r12, @ANYRES32=r22, @ANYBLOB], 0x8e0}, 0x1, 0x0, 0x0, 0x4008052}, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) 2.719954483s ago: executing program 1 (id=2313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) syz_emit_ethernet(0x73, &(0x7f00000004c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @igmp={{0x16, 0x4, 0x3, 0x17, 0x65, 0x65, 0x0, 0xf9, 0x2, 0x0, @multicast1, @private=0xa010102, {[@generic={0x83, 0x10, "2fee97dd58aec56528e25d05b453"}, @noop, @rr={0x7, 0x7, 0xb0, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xf0, 0x1, 0x3, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x9}, {@rand_addr=0x64010101, 0xfffffff9}, {@empty, 0x4}, {@multicast2, 0x100}]}]}}, {0x17, 0x0, 0x0, @remote, "b8ee6da219"}}}}}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000005e40)={'vcan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x12, 0x7, 0x200}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x37, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x8800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd60fe8000000000000000000000000000aafe8000000000000000000000000000aa3200040000000000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000305ecff0000000000", @ANYRESDEC=r4, @ANYRES8=r7], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) 2.286200275s ago: executing program 1 (id=2322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x24, 0xd, 0x200, 0x0, 0x1000, 0x1ff}}, {0x4}}]}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r8, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r8, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) recvfrom$inet6(r3, 0x0, 0x0, 0x120, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.080648811s ago: executing program 0 (id=2323): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x3, 0x910b}, &(0x7f00000002c0)=0xc) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000300)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x21}, 0xc) syz_emit_ethernet(0x119, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x13, 0x4, 0x2, 0x24, 0x10b, 0x67, 0x0, 0x7, 0x33, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x77, 0x6e, 0x0, 0x2, [0x3, 0x80000000, 0xde9, 0x80000001, 0x80, 0x6bd7, 0xfffeffff]}, @end, @generic={0x7, 0xe, "19771134f9a98308169f248b"}, @generic={0x86, 0x6, "39d76614"}]}}, "852aff81f72a98207217a300646a9097a91b41b9b7cd29e45f20c52e12eb4945f4765eed71c3902f539f1897cd5c78e3fbb9d90d2635e4615f4b7b58af938cf8c320bbb5e03b6de1d427c785b83849771b01b93f552f6929b6d7e1a6f37d9c5ed3c1829669a96d1a9a21bb99ff6f43004cbf10913a0b4be1cc352d9408a7c458379296cb28d838e8c2fbfcef1915a97acee00f117f13d00b3288cd27071393b5d965452c694e20c208f31457ae587001ec89febc29e2c5934eda33bb36b951"}}}}, 0x0) 2.079977999s ago: executing program 0 (id=2326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = accept4(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000080)=0x80, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) accept4(r0, &(0x7f0000000100)=@phonet, &(0x7f0000000080)=0x80, 0x0) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) (async) 2.077771241s ago: executing program 0 (id=2328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) (async) getsockopt$bt_hci(r1, 0x84, 0x75, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.979957042s ago: executing program 0 (id=2332): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x20004051}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000004000380d5d5471441a24c0d362d5d0c0762de8545db1082f3626e63ab43a21cb0dc979b22cc0a7055992e0647919a93559b590cf09c3e729557fe945702142691bbb76100d00d853f1d8c4c0a5293abe4a37880fed824400b49c55ed1e71fec3f8803bbb2fc29c0a3195129b47634fbd039ffa40b71fe7b1fbfbe58f13f0de68501017e879b22c8ec9d614a14eb4cb91565ab67386d59313fa6fbfaee08fb69eb75196e036f95bf8fa03d7b3577cfa3d117cd"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001300)={{r2}, r5, 0xe, @unused=[0x400, 0x2, 0x1ff, 0x400], @subvolid=0x1}) r6 = socket$kcm(0x10, 0x400000002, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r6, @ANYRES16=r8, @ANYBLOB="040027bd7000fedbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000050083ba01000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x8080) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r10, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c00)=@newtaction={0x1348, 0x30, 0x800, 0x0, 0x0, {}, [{0x1334, 0x1, [@m_xt={0x1330, 0x8, 0x0, 0x0, {{0x7}, {0x12f8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7d, 0x6, {0x3, 'raw\x00', 0x7a, 0x5, "f2940bc6e27b046bc3b5c94eb756e7780a337854867b92f33bb4a014ceca59b17c68f7828309f7d38186922eae9e658f445ee41de5568901b6143fdf7aa083b44dd7cf53c3891bef7e34a543bf8c2de8470c8e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x40, 'filter\x00', 0x2, 0x2, "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"}}, @TCA_IPT_TARG={0xe6, 0x6, {0x4, 'mangle\x00', 0x4, 0x1, "454817f6b7f35fe6a157384aba4dcb5afafb86523ef67e751dd787c69b6083db130154ed56d6c3ca1f5069c6a499caf3f092f2db93032ac6693a3ffca10dd65b388dc4acb10c2830d49baac1aeaabe8d4b9e474d74ee8bfe81634cb33dcd367bfe677367fd25026fa2ff4ccfd741f685464bee4e805ad8a7bdc3fd402cfc06d0a4e43e3549536fbdb96fc2707fbee288bebd74de7842b23944509489313f6bbb3a81badbbc3e660c62bfee1ea54af3f28d1aa5a6eda4b911f30a051b"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0x124, 0x6, {0x9, 'mangle\x00', 0x13, 0x3, "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"}}]}, {0x14, 0x6, "990b372b0a04bb38fe683b0d007a0547"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1348}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="adaa000000000000711014000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.847111779s ago: executing program 0 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) socket$xdp(0x2c, 0x3, 0x0) 1.776335424s ago: executing program 0 (id=2337): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x48, 0x7, 0xc, 0x4, 0x4}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.438947035s ago: executing program 4 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000}, 0x50) r1 = socket(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0xb, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x34}}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0xa, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/58, 0x27, 0x3a, 0x1, 0x17}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 1.383694077s ago: executing program 3 (id=2343): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001380)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000000200)="cb0c55cf5b02", 0x6}], 0x2, 0x8) splice(r7, 0x0, r6, 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r10 = socket(0x1000000010, 0x80002, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r11, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@loopback, @multicast1, 0x0}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x7, 0x1, 0xe, 0x6, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x65, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0xea, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}]}, @generic={0x8e, 0x10, "f5f7149e51636f563026c4b33f5c"}, @timestamp_addr={0x44, 0x1c, 0x97, 0x1, 0x6, [{@private=0xa010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xb}, {@multicast2, 0x6}]}, @rr={0x7, 0xf, 0xd0, [@remote, @empty, @remote]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x2, 0x8f, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x8000, 0x20, 0xb6, 0x4}}) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r17) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r18, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={&(0x7f0000002c40)={0x1820, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x116c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "52744570f5338d9e5d270a431a5169dc77ad49441bb528e6721393d886eaca5a1aa0f312e86859f980db53baa2cf452dee3dca6432d9f14d5f329f32344a4b0e112f58d23110ab71be3b4a9936be814c217f975ff01104551aeca4d8b29c53a9b39ee362846e01df866951a8b267c0b39dc5771aff57e401eff9a890446118abdeac3df53e1cee9482bf01c93cc2e87b08026f047cec24511df487bb657abe853c88c69b801c0671f5758c4217b14b30c8141d59"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xda}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "2c10b9bfabecc3b3f531b4d08d511d7322604691377fa9eef3e144699b19b252aba5d2905cdb9864e274809a81a22b346fecb226ba4988c646584e0fcfb7558137f86e66991640c6565fddeb4da36b215e0787983560de9355ffc82b87717d81095d92acd79064e53552ccd6e721067589815f472124008199fe9aabee00ee1b4367f7083cf2d5838c740e065a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_EEE_MODES_OURS={0x464, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "b4c8d4f515c8ebce20cac47e2f287301a2d0bdd4eb6bfae2a14732585e02c9d87485f1eb269e38ec67a1395cbd2bbba24b42402e5b3b49cce7e0034e49e8b760d0f952cb710ffa04ad5daebf00f041d321485f3b7231ca4261860d1fa231ca9bde22e93c1d7a7fcf11fd1649d4f57b12e88700784eed5b8466682239dd65cc4c323ef6e521d35fc58334e0ffa59fc9d3d3a4d18db98d94d0cfc7a49bdb9ade216f3d741c7430f57cfecd4fff9ec3b60a71f2ec8532943eab12851d9c086936cc8c36066b135e941d2ea50180342a35f2495ec04439"}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ghash-generic\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'ghash-generic\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&$p+{}):\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[\xe9{##]%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hash\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x61, 0x2, 'hash\x00\x8cv\n_\x9d*\x8a\xdb0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x14, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008051}, 0x20000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.299296986s ago: executing program 4 (id=2345): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000000)={{r5}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[], 0x80}}, 0x0) 1.282606074s ago: executing program 3 (id=2346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="15c46307ea0e5154da553ebaa1487e957569b3e10742dfec3286b08c87cd35daf7159258563a9689a3c468a4bc839980673d9793f7adff291ce15f8d41338c655c07e38094cf7d858e6cea3db8b3fa5ec5ce0ae44f0951a939cca8bcc35595cee546291a0bde8d718c655b4ab3112cb6c90390e52b271caa9ebabef41368012790b7718856b258b880935502bce2afab2c2ccc56092155238b31ab0be7accda0988670bfe63371"], 0x30}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb49950000000042c90bc21470e441225642855b5f2faed4a18d67efd5f211c520e6de94410300"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0xfffffffd) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0xb15c}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r9 = socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) socket$qrtr(0x2a, 0x2, 0x0) r10 = socket(0x2b, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) 1.188059475s ago: executing program 2 (id=2347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x0, @private2, 0x40}], 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000003e0007012dbd7000fcdbdf25047c0006000600800a0000140015000f010000efffffffffffffff00"/56], 0x38}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x87, 0xfff, 0x8, {{0x15, 0x4, 0x2, 0x2b, 0x54, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, {[@cipso={0x86, 0x1f, 0x0, [{0x5, 0x9, "7cb637b9ec05ec"}, {0x5, 0x10, "3e44b155414135f89318219ce319"}]}, @rr={0x7, 0x1f, 0xe9, [@broadcast, @empty, @multicast1, @remote, @multicast1, @remote, @empty]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 984.131175ms ago: executing program 2 (id=2348): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380a00fb", @ANYRES16=r2, @ANYBLOB="010000000000000000000400000005000400e00000011400060076657468315f746f5f7465616d00000008000500e0000001"], 0x38}}, 0x0) 983.273843ms ago: executing program 3 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r3, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @null, @rose={'rose', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 978.414765ms ago: executing program 4 (id=2350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x2c}}, 0x20000000) r1 = socket$inet(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x5c}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x759768c7cdb2dfaa, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, &(0x7f0000000140)) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800800010010000000080003000000000008000400"], 0x58}}, 0x0) listen(r1, 0x8) r7 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x9}, 0x8) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f2, 0x10, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x4048040) 958.155416ms ago: executing program 1 (id=2351): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async) accept4(r1, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xb026e000) 856.204855ms ago: executing program 2 (id=2352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900010000000000fcffffffe000000200000000000000000000000000000000000000000000ffffffffffff000000000000ffff0a0000006c0000006ff98967f593bf324534f92416ab422dded8acd21d030d6708dcf3f2e3f6fc837a9d0581ed030f8959f853a48900b040eab32bd092c83e04d0852eaf5c638f747b65e87fb2a2d4f3f05df4e7da3920f893ec58e40f87678a14e630456f2b8837fa736a3f2861b2452075989cb799a74c859003d1f4250e0a50582187cca940595f236ca442e623a4630c80ffda611a82a08244e69b031e15ffe4f8c70560a8442136ee67ad83bd3df7e51b360a06a32ba3cc7f34e6409d657078884f8982bccc766f63595a581f7d7b25722c12abea9c780797cab09aaadc5779dd42a76fffb26a529a8ab954f8ce8fbfa75926c441476ef93fb5ceb94bf069f61a7d7dba7861efbd07f687846ce9b3f729648b1038e43344ceda7591230152e74200935714c29abeba0afb2a5cf044941f7606e9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000100000000000000000000100000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000344f0e1e6c32d929000000000000000000000a"], 0xb8}}, 0x0) 808.919995ms ago: executing program 2 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x34, r6, 0xad29e148408b79ad, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004010) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r4], 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3e, 0x1, 0xf, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, @private2, 0x1, 0x1, 0x0, 0x6}}) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x6, 0x3, 0x1, 0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x58}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x1, 0x1, 0x4, 0x9, {{0xf, 0x4, 0x2, 0x3a, 0x3c, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x24, 0x2a, 0x3, 0x3, [{@multicast2}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x8}, {@multicast2, 0x2}]}, @end, @generic={0x86, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 762.46404ms ago: executing program 4 (id=2354): r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) (async) recvmmsg$unix(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000100)=0x401, 0x4) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r7, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000d5708678be8886717e3bf4e88a0000001a000000000061102ccde088da26adf73b4c7510667ead25c537e89ecfc7ad38f2a8cc87fd5c328bcbd0b2e6880b114c5de58110880b8cadc779eb0bb24d71467e2d0849f3b586f3be2a8eb34fe92019fcaf678e830a1833333674de6fbd110a75526cd968cda22434657aed01106557d62fdd9af460471fc46d29cf44f6f4c70cc2c9bd01d46242cdaaab9b92bc0e423214de120416a5a88fe8f3b2861ebacdc7376bd3dea4e9e98c4de552c5f43bab212aec5381588c1e7bd2e85f1227b119006ae537480faec5b860ee39ae583f7ea8742bf1c7956627673a820e3ecd7054d049af669eb08eed8bb9c0762fd9eaa9916c55f7182f876473c28d288b1d183e6c844481d3d0df428a407016b4b5b80e0043fac593cb54f4bb344b78e2eb68ec4406621e0299c4398b69f16b4328f372e74ca25f1be4a7d6087a6f4e485a58"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd4f}, 0x90) 711.971548ms ago: executing program 1 (id=2355): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0x13, 0xb4b2}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}]}]}}, &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r4, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x1b, r5}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e904a20000000180c2000000080045ebff23"], 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) 670.399572ms ago: executing program 3 (id=2356): r0 = socket(0x10, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x9, 0x2) close(r1) 353.481038ms ago: executing program 4 (id=2357): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="b5590be9f7b7f3244954dc1c4230b5e98945713f024bfff823b6dd7485e97e5db1c6918ebfab87f4afa21b29edff60bf700a7f5a8c3dd6f76385f3bd222f2ad57bb66ff614bfd399d4975a191fa738e197967bfefe3cda70d41a18d64044e199e1db8e7917d76550191e4da5f8c2f9330f3919ccb11d8e15430776acd182754bb16b1c86dc066da1d38ceb4f2035edc1f0dd5835d748944ce21f80ceb828fc728261be3e1f7773c3f85151000c25065c894b69760969e56b1962992b95c22b95b4f33a6c420fc3b00f90f586550621a4e5febab342cedee046e3cac2ade1242ba875f3330ff629f7b4d297d5d6a6bf2c518bd3ff119afef5c7104fd650336c890c2889dbb40942af46bef457e23c0076d07d15e228a67390289133e212cb7566944042d42e0999fc5aa3b5982396968935513482adee78936a891cc137b97d5ef67d53483aa001c1aab731ce0211f4370c4398eafe3e1cab840eab8d9b8317fb339103d5d074b4bd09017c4c9f537cca08889e395724a1cbf6e45f2c041bf351b0dc1b7ab40f36576555080a53b447126910fe8e9e31db979b2f17f5816045f3765bd1a48393a39bcea86517577ce71dad3d8cdbf3ed15d640655dca90f202f61fb63091be03fc35c0b88a781dd60b3d11e7bfcd88893b5271f9c8606f1ed97eae80314d6291434513cb170531db39b3444bb9f961e097983add21a3ab439fe1870489e482140a5c6227b49b9b95c23a95cd1359186e8f82587b4c7a2121daca9de389ac987330743b83a017951aafa55cbbf0bdd852474b58b49ada9d1ab7f20220a1a9fd8e700b43e603f375270e8e721610e676d08301971a720b90bfc9a991182d90a2f16266ff602aeebe516da141a4d00520d06cd873e77502351eb02d9099175de5df19516d110e4d2b64da635c2f37a7b78a0799dc58132b397e89c3c9d807134d72cbaf2ef549379cba42dd8af159d0e05d0378b6e77ea55c3815c8f83cb7a3b2583e2ff58d0a568d892511303882e1af4c193f3d36645cfb9222bda82e6d9bd4f52a0ede5c48e8965de0ca5b07b60895f7de26659399d02d2e4ebb140389d871d5a48fea8bde2dc9b29f282df17b934e677f23bffc53495dc72b772ecf395569dc1f9e134e01a28143c6bfc95897cc7b7654765806464df9b946581b4fef00b3014afb1df08a71815d47097ed520b343fc83381b92bc5427e1b11bb7fcf2c4efb97fcac08c72554790359a26a6fa553716818bf833433cb933b701e28479ff0eb9ccc77c297f9899cba7e67fc51cc44c5d7284da8ad24506a9c3d1e0b0787248b94bb2500e27163c2db5960662c305516a1d4fbdd983e5bab3b5756f8dc72a44951b0d7932331df8d8031e5197760ec85423341454b90f7180dbd6ed4bb337f1e5a47e954541b81043a58bcea7bc0ccdaf8dc63ef651ca49db5057252dab399b3992accecbabf04c154bfbf9a1df7dc687abe5f447566e1fcba9bfdf5d8339974a9d3fdb4a74702069053d5eed9dc1dfa42e9097dbae70c15ac17440faa6f95ebfbc6742700b7828336d8aa3d44950e14b9985d93f9435b4203fce0d07baa3c74e58e65fcf2e58eae91c47e8ca560a337e3bd7450c069376215ad37db05393c9678abd0f984bd85769d914bdd34251515505257b16041db350beaa07206f1a52bd68b56ade7d486d153735e7f096ee42cbbbe3cdc319b7d506d747ae34f265f7b4d01db0e8c841362755f71a4093e7fbb16d8ff4ee35693ca90594b768f55bede1a5914522a1e5734ce3380524f36bc1f97f81d7a9717a369a066e64d5bb0a7e985ebbbc872dee848bb9db487ffd8c979fb149934c70072962de4338b04491d604b6a072ff9de3f845ddd9f8623f3286b089da763fa670034226ae6ccb8972b70ab30ceddfc445cda1251c7cf6033cf13ce521fadb4138a676ee828e2dadbb2586da8410b76c5de854496cc0889b080a467118e2b2188b1f15604a162220bfe7521d4f2647ae87d63de0242c147ccf091ddee2c356e544929dc1f563acd3f5529c5122150687857afa593c7f28d3b316d6f583482732a52a1f30ee32dab586a8c1967b703f1960470ba0fdeda9892a7b7840c950f3258175ee29377c933fa1a0c878e9b87487ce35e3908559d42c42b96066801c1868a88e361dc4e87e963b250dacd08ffebfaea8ec300dd027db0c749be81c953f6de8a23a01286910a94221b2ad2a7cc76a69df2c802fdbaebf0de6fa39caf52c0e0f63d31bca24ab9930182b2f1f20b7f7b7b4a8cef45529d7572144d0f1033fa90e201ef84a4928309f7584e8b3eda6cb8d4df272e7236daa7342d16bcecb66268c29911428c943c23253a7854c62572339f42553bf38b4e4ff6415e3b42bd5b76fe298b2211ed20eda8ec6842053cecf0e77002865c9adfdb541ec212a62a93c3ca6bac967443acb9a016ebc5553767f1d8e466619b988e5e905e499db8777d39082a2df1ead413c529106354f619bcc7ceb4e02e60bbee591f7a5edf4ffbc913a1ff38e98a5c8ee7fff2115d05f9a61d5bdc56c05b47f6dd807e0f17994a9b695b47f33df41c38dd2c145b899045d81a310f7311b68fcf7a5f38f41a119b130a613e5c03897d00aadef8b8b7fed9712825c470b21ef17165b2a97ac06c891322e51bb1732ca103356f07f008c79302d2e9adaf941c947b4c73e27cd7c005dadf4f02c36ab9868ff8177f972decd694a1ed1066a0c8b087649e2dc81fc8c09c7267c1bd3bf8ac2269b0a1722d094f01a851107b42e17220fff1673e87ffb940775856682b6937768233b1b7032e2ce072491ef2789efdf42d6e172869e076b019f32ef917d3bd948cc3b2233bf2236ffaacd63c60b332a1046706fe9f9a647e05f1aad446693deb4382d48c803fa87420c34782f0ec0797c0455f4a55ef8923f8bf4edb49fdf6a06159a9d5b61b9ad0afda0557d2188cbed094a010e098d29dff692392faeafa79d976d6c78fa16a080658aa36b1a0cc412c30d550ca8975540a0b87a0bf4a086533b69d6683b05873fda1b82c8e85aa51da8f1d89c95cce619cf689b026251738ad679eb5249436bc78d21705b115a5776e57bb0c4680bdc79aef2edd18fb824398e7411fca1b384c07ccf4b1028e9621948e0da09250f3efe3ba30a52fe5647c18483ff27d525c7225568f84da6243eeaaaf5a7e93c99085a31b6a518f0cdb211957d67bfe9f62ba5f6c486aec9311fd9ace11fd65f94daa6e1427f84e5de42049f0cf48f3cc87556585f42130e139194f5254f732aad36c3e8c7fedf73488b147d731149f8d477afcdd15a066d27c5530bf93378e3d88c3d8ca07f742b63c51d7f0f805170a459a6ca4594203a6c9439953d5b6178b7a8db9f58183b11e3fa4311e523266b42f92bfd66257fc0740d5f5a1c5a50fce4bb1df35a4e610aabe777deeeaa72a0f34d8a29c79ab76b5f48187e65bb8d6bfa7312da73e1a9f3e164046571072fb1001d5ed5f5fe0fc1a7cf8064262018c433e5b31237e67dda391cb809c8e06782563d6c98159d4c1c460b0e00ab517b2732d3bc12819ea4e50f23bf62a46886b7a6e3272c3821b2a4f943fbf472ff634cf3bd5122119746398b58bbe3c403ef6b4fae5fb8e9f7ae9c07ed421b12f4738bd1cfebdbbee2f9a6857bb4d010968155f9b55b54d8ee87cf528b62f5f0fab05164d617e2bd63d842476f918f2d2df39b1ad7360af0678ba855730b8eeef97af7b785b9c07789fab41920cc66dd065e5cfff9b40f178727fc8a5fff99068b811efd818420eb1bc45f2a7a22f9f877bc09a9efb9bd49d770ead599f0c2e0fdb4ffcad3441c62f6486613fde086ebdeb5a40c7ad89c7edefbb5b8f42812ba7dafc70740be174f01f2af47fa0be93b8e5c1d4c72c0ce9500cfd88057c5aae1647634696f0cd43418009d90d0e288ecfe9abe93fa61dd83ddaffe3d85083b1268d091941f911a1a0ab06ac833d16f066ea116d0b33a216d21c02f9ba5a19bbece29ffa94ee903c23cf505e4c972c61a3ac99952f32453d40c881ee56f26a978fad21a5e53e611f9f1de54816420df5cafe3a67c0accdb686b2d0961211c73ae048c8775c0b9798a744c6aeb5a1317827e36426c0ddd18038a970e45ae15f1b551300b93c3e27c0df7fa6f889fdc72ab50835696ac4e567bf289ec247d851c2c715b9495e77b5a3dbd03d3aff3180043316d5959709d89b18331b4fb4c921ee14c576d4ce71930b5baf0deb0fc060d35e1e9f1c1323d243ccfc166bda65527438b8b41d969661a1df70a7abff735b35554056a82f498d46eeb835fe6a84f474379699531a5d5d5be2cd0916342ea79424219d1aef2f5871829cb58394898f8901f33d4fc83c67108ebfcfa4c54ae697c2651803c15e6ffa00e583c11f2c91e179562fc6c0e05a6f178f29841a5d1ca12feb279fe86801f32ac95d8977d5993dfc0fbd664ce2cde73afa4b9621d05e1779e6fdc36d579a370381154572d75260cf60a071158e99cfafd311c8af97e268737a729c1ee18bb6a95c64dfaea95cc6c5ba2e82dad8e0cb95334d05cb60db3491f0c756cccf26bc1c9665947bb8107f9bd2825de12311513ac374bd4c7b370243fa8576601f731b8dcb77a3db0950d98b600e67245532940012eece1e09f4d9f009435309227b0f28de1e014afba15b10953cf3dc610fbcbb652965cc72f3a26f91e7510094253b3bae289868b54a5f7f10a20116c0945890bd913534432d386ec3c8047bc525c71d7c37c5111ff90cdf25abaef49ea1a17a1ace80df37bb51cb253f5f6ceec8983a1762f1d4ae0e432e28f46998fa09a29e3165e0c69ed600281d7cc8a9ef09a0033de405e03b8c3afa09e192a1fd83bdf663ef51dc9f49060d5905dfa36abbda8831b168cb1a3f6205a51057da70011ac49ea48b21bcaf27c4f021ff2fa88f777e65d96f27829bbb8d5a7823626457ce00e3351b35ad2048630ff9533bb2b34a0aaba7cf9eab969c1554b3c1a497d0528b34c3f1a1a22405d1c0d9693c19bce1bc9ed536a66fcccbefa942a1cacec656ef56191d32db0fd471e62ac40db50c27ffc6a4de3eee510867d666a5d2a3af70ea49993858c998987e0e3cb534f9146144a7296b9a96c755f122e15e9aed76f537c51837487c554e4d25ddcae881d58069a0093915c3bbe2f8647849acca3aab55432da7107c422274cb43e398e17b8c4f43c50a6a4617d7f3656d3505110f885fc2d2b950c6c34ea0120da2f111e794a38a24fe8e6e70c25c2d2fc6c00dc9c369b1b5dbb5d7bb5f4d3d34f8bfdc633be412182c50caea9b2782666ed1fd8fba61c9fc0b3f75aa05a28b2dd57afc9b6b5f1628a7f2980dffa903711ed1c582532d1c74576771040a0687f0c2b3204e79aef004629afe78e9cff053a4322cd5521509a4a0a771a45eccb7001f70e17ad2ed44ea84c5535aabb704341bf71f0646fb6483f14965f0a502fd4cd6c545bf2d4c51ed6431a9a324087c75511a678d2484337537659f60b75f4475ea8115ec9fd355c66322e9d765e38a29aa3bf84e80f58315d5ac09661b74dfc588edc20576598ddb865c5adbc14326dc5ab43d3a0c39d078f95d878e86abbb69d90a2ad81cf49787f3c949d3a2744bb1024192c361af620af42639c04be79b7c9cb588a603dadca39a79c42ae9884196cdf2b97ef17d49f2eebb26cb12a8944b105ddb9d82f855dfec36cbb0a40f841dcfd2feba91cf3e6805473b9e1b58aee324799da01a94de853f61a6e319bf16efcb42b44b0308437b3", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}, 0x1, 0x40030000000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r7, &(0x7f0000000500)="5b2e217fb359199dea73e756913387736ecf4e6edde0fe050ce3ad36cc1c19014b53130c6f34695ca9189de59483df3c271562004a4f21ede1637adb812d36d22d4cfd13d1b21c39e9f1492a5f057fd2e42c18c89613d04ce0834c0f944e6880b237fe31249b38f5d73a7a396973773703908089c5265d9123eeee69f0e2af9cd8840b24d4b364a095304d1085777b64f56f1f73b9b1d5b92429140f6c812863069c1474569baeebea63b535f6af9548ac6728f7cbe5c84ed11819ea9beb482c67ca4061136bc9eb43c6d373617068eee0ac0648fe89c83d152813c4815143e42cdd842c54", &(0x7f0000002a00)=""/4096, 0x4}, 0x20) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socketpair(0x10, 0x6, 0x6, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000680)={r2}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x168, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nicvf0\x00'}}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x840}, 0x200c010) 266.305584ms ago: executing program 3 (id=2358): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0x38, 0x0, &(0x7f0000000240)) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x80000001, @loopback}}, 0x0, 0x0, 0x1c, 0x0, "0e3ec56badd019da7e6b394e1baad25afa84a1bfcd641002be74c4c64d704a621f232ad4df60b867285e4997381c5e82a43154f38bc0e11a1669038e0509284fc54582306e27e57d597873b4e3b5a630"}, 0xd8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) 264.758778ms ago: executing program 2 (id=2359): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x2, 0x8, 0x7, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7, 0x10, 0x5, 0xa}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 172.4193ms ago: executing program 3 (id=2360): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x17}]}}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) connect$can_j1939(r4, &(0x7f0000000040)={0x1d, r6, 0x0, {0x0, 0x1}, 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x10, 0x80, 0x2, 0x81, {{0x10, 0x4, 0x3, 0x39, 0x40, 0x64, 0x0, 0x36, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa8, 0x1, 0x9, [{@multicast1, 0x8}, {@private=0xa010102, 0x6}, {@multicast1, 0xb}]}, @timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0x9, [{@broadcast, 0x3}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) syz_emit_ethernet(0x11b1, &(0x7f0000002200)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x117b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, [{0x4}, {0x2, 0x0, "71c6428a"}, {0x1f, 0x5, "b955a4445bf99dbcd3c8acc6da6a698bf860122774502eedb7a8f7490caafef051cc8bfd225d29d341"}, {0x4, 0xf, "da6949f322f94a94d3ec237ddb5f7c073d45abefd39a39e0debf83f024e5f2472214a3544bd4866645dfc3d3c3eaab034b3f3b83c4d1eab14332b216229c1e4e453a00b5c3f7e63541aeb34e6276759c118ebdb3c62c48107d4d0cfc8f075fe913ee56344a517c06541a609c625796e553673baf65694cc20e86"}, {0x19, 0x17, "b430c18aab0c33ecb3041b4e80dce7c72fcd87b47f0417693d107f61d613f5d487166128e1ab0d2b3dd4aa3f158237727b3949209a6265794c252333b169633ac370f4e5ca2fa63d01fabba61cf8d98ef4c7e09007065ce7a57a60ea608995f7c1bb73bac52e12524e331cb516d84b1d7d36ed892e4f7fe0d0226c3bd21eaf4640339d10f559da023971a0d0202cb4c09be54497651acf8887a0906f7496ac77c79f7b6d5eeb5e163e43af7ddf9efd7edc758d500b3aeb04"}, {0x1, 0x200, "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"}]}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="7935a408c1d35e782b94c7eda775e1675f29644fb88695646a5563a3501c77675b2ff7ad0cac3d20c2a6bdbe81e6fab3d50632b18e1ccf043039ea36899dd7dda0c2fce052a4a73b2b47b56b4011c29f5f47fea52ce6a86f7fbd71dbd48fb60a9ed049e451e355dbbe95420e998a85f7f66a47d5e07bef726cccbeaec7993fd63880732cd491a6f376e92931d2cc93eeda3ec1f0b4fda89aea8e9bada79a2a70e28904ac7a0b5066ac9ee63a9f83c4dc744f2a18502267ff8e5cb7741f96c79a647c1b3f350a57ed651d7a70836b13a7686e7087", 0xd4}, {&(0x7f0000000300)="a1db33a957122e4384c8844500b96adffe15eb7a93758d25746f0f072546fe438378c6607de2aa8aa24c6342490d3bed2c3784379a479f2277fea4f0fd619a648239daaf51f12fa5597bf94278d4dfc2a60054acdf0e15", 0x57}, {&(0x7f0000000540)="3d3b45e2c2de49ff82d192322723586a7a876b88bceb9ac366d30436b2c04d3df3cf80d47ebb46922d5cd17821c1e2a2b74f7ef368c7b23c53b18b4f3ae6f79a83264901f71caf92b96421eab759b07748ec6a1170b214abf5281b270b8fa134b492dad5a29c41434b446a5cb8a4", 0x6e}, {&(0x7f00000005c0)="45df991b0d200bda4d71f7d53ef3cda34cf6bb4dfac06135c16e18c4dd5e65f0faef79188c945379adb6ef177e27831c371857fcdbe261cb4f9195e4674d7fa2e4b5d13f7fbb577551b06a620999782ee471b6d6990d0999fab51c014a33", 0x5e}, {&(0x7f0000000640)="d0e02285469cd6b4ef9eaa7a46b784b5a0ac5dda1d09544d7e9d9bc944a69a8057f7a35fcc0b6ce4b8f2bde52e0862bc0bbd1279d23932b6baeb09defdf469c061a58f768fd4cc6fd27cb1cdfc5a18495bf8272fb778cb21ada097873a83e2fb905432f7e6da591b04465989210c0707080589cd3207a0f602a8c7a14226913133f63e17df564f78e507e46a2fb7a9fa7b86e175", 0x94}], 0x5}, 0x4000001) 119.127486ms ago: executing program 4 (id=2361): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x8, 0xffffffff, 0x3}, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRESDEC=r2, @ANYBLOB="e1daf9dffedc1ae557328b066ae7ef0e688957caef5e689d2fba2146a4da6ac7c291527091b7994728cb695f7458cb05f4848895c4db8455f07f979fd2e0304fc2761dcbe0c0a80b4353566b25dde4a2bfb3adcf417086bba698ef69a2527f2f3f80ef799e299377983c31f608f2e8f2b62bb989bd19d920a7f062330b444111d0ba93062e014331310737f37d3394a1be1f78b88a58b509898ffeb8d5cc24b6e459953d271021a7bf5ef664b8ba15f7c203364a31105ff4cf5c83a841ad49981bf0e676941cdd7fb53dc8e6c96106127e660e85c7db22ade94c2cf984acd59ff4c4301c4593711e5fcb06eb8df4a87ee6", @ANYRESDEC=r3], 0x1c}], 0x1, 0x0, 0xffffffffffffff85}, 0x4008080) 0s ago: executing program 2 (id=2362): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r1, 0x1ff, 0xc79, &(0x7f0000000040)="e54c9fdbeab46f3584650fff5e140b8e3afe0a58aa8595272e1bb9e40e446504217ad1f37aad156323fb7b2e08", 0x2d) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x7, 0xfffffffffffffffe}, {0x7, 0x4, 0x4}, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x10003507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) kernel console output (not intermixed with test programs): ][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.603488][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.614598][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.696711][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.708878][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.743073][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.754319][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.838706][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.855103][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.881896][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.914974][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.925857][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.933099][ T5842] Bluetooth: hci1: command tx timeout [ 90.937504][ T5847] Bluetooth: hci3: command tx timeout [ 90.938569][ T5842] Bluetooth: hci0: command tx timeout [ 90.945144][ T5159] Bluetooth: hci2: command tx timeout [ 90.950693][ T5842] Bluetooth: hci4: command tx timeout [ 91.005463][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.035667][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.044995][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.052241][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.081750][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.088955][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.126582][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.185981][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.217703][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.224821][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.239472][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.267368][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.304121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.311562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.323862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.331006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.341594][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.348702][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.391358][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.424440][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.431635][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.467235][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.512472][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.519668][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.584306][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.594811][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.612875][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.714151][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.721851][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.734272][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.741722][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.896898][ T44] cfg80211: failed to load regulatory.db [ 91.911494][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.106181][ T5846] veth0_vlan: entered promiscuous mode [ 92.152405][ T5846] veth1_vlan: entered promiscuous mode [ 92.232844][ T5846] veth0_macvtap: entered promiscuous mode [ 92.251266][ T5846] veth1_macvtap: entered promiscuous mode [ 92.275816][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.349414][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.383320][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.405631][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.441860][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.481626][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492165][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.505914][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.524661][ T5839] veth0_vlan: entered promiscuous mode [ 92.536864][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.552677][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.601529][ T5839] veth1_vlan: entered promiscuous mode [ 92.656106][ T5852] veth0_vlan: entered promiscuous mode [ 92.692608][ T5848] veth0_vlan: entered promiscuous mode [ 92.706814][ T5852] veth1_vlan: entered promiscuous mode [ 92.735529][ T5848] veth1_vlan: entered promiscuous mode [ 92.757982][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.784569][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.865087][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.881767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.886055][ T5839] veth0_macvtap: entered promiscuous mode [ 92.922289][ T5839] veth1_macvtap: entered promiscuous mode [ 92.951812][ T5852] veth0_macvtap: entered promiscuous mode [ 92.984943][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.993648][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.005110][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.022510][ T5856] Bluetooth: hci3: command tx timeout [ 93.022722][ T5159] Bluetooth: hci0: command tx timeout [ 93.027923][ T5856] Bluetooth: hci1: command tx timeout [ 93.033361][ T5847] Bluetooth: hci4: command tx timeout [ 93.048173][ T5842] Bluetooth: hci2: command tx timeout [ 93.059094][ T5852] veth1_macvtap: entered promiscuous mode [ 93.091163][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.142166][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.156269][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.178121][ T5848] veth0_macvtap: entered promiscuous mode [ 93.203336][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254457][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.267160][ T5848] veth1_macvtap: entered promiscuous mode [ 93.382705][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.390455][ T5963] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.400360][ T5843] veth0_vlan: entered promiscuous mode [ 93.432605][ T5843] veth1_vlan: entered promiscuous mode [ 93.466937][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.475850][ T3537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.487168][ T3537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.504647][ T5963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.517208][ T5963] netlink: 'syz.3.7': attribute type 7 has an invalid length. [ 93.527269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.540396][ T5963] netlink: 'syz.3.7': attribute type 8 has an invalid length. [ 93.547364][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.547954][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.580442][ T3537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.596566][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.612936][ T5843] veth0_macvtap: entered promiscuous mode [ 93.623444][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.646876][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.686141][ T3537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.721069][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734331][ T5843] veth1_macvtap: entered promiscuous mode [ 93.776718][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.811410][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.872019][ T5970] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.895703][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.913549][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.923013][ T5970] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.986205][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.015751][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.041271][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.124417][ T3537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.190435][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 94.204450][ T3537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218687][ T3537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.329190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.332050][ T3537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.349695][ T5978] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.354469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.489929][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.497787][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.597073][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.605569][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.632599][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.736483][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.756565][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.796692][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.827602][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.837060][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.844534][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.030762][ T5999] netlink: 'syz.3.15': attribute type 6 has an invalid length. [ 95.090348][ T5856] Bluetooth: hci1: command tx timeout [ 95.095799][ T5856] Bluetooth: hci2: command tx timeout [ 95.101763][ T5842] Bluetooth: hci0: command tx timeout [ 95.101819][ T5159] Bluetooth: hci4: command tx timeout [ 95.107171][ T5842] Bluetooth: hci3: command tx timeout [ 95.176868][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 95.328939][ T6007] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 95.339470][ T6007] gretap1: entered promiscuous mode [ 95.350002][ T6007] gretap1: entered allmulticast mode [ 95.818958][ T6039] pim6reg527: entered allmulticast mode [ 95.858245][ T6037] tipc: Started in network mode [ 95.884855][ T6037] tipc: Node identity 2623eb43637d, cluster identity 4711 [ 95.917498][ T6037] tipc: Enabled bearer , priority 0 [ 95.958743][ T6040] syzkaller0: entered promiscuous mode [ 95.989938][ T6040] syzkaller0: entered allmulticast mode [ 96.122731][ T6037] tipc: Resetting bearer [ 96.396871][ T6036] tipc: Resetting bearer [ 96.414818][ T6036] tipc: Disabling bearer [ 96.504085][ T6064] macvlan2: entered promiscuous mode [ 96.558612][ T6064] ksmbd: Daemon and kernel module version mismatch. ksmbd: 17, kernel module: 1. User-space ksmbd should terminate. [ 97.051315][ T6076] tipc: Started in network mode [ 97.056233][ T6076] tipc: Node identity 96ad4be059b4, cluster identity 4711 [ 97.064866][ T6076] tipc: Enabled bearer , priority 0 [ 97.077293][ T6076] syzkaller0: entered promiscuous mode [ 97.082908][ T6076] syzkaller0: entered allmulticast mode [ 97.095096][ T6076] tipc: Resetting bearer [ 97.123982][ T6075] tipc: Resetting bearer [ 97.210450][ T6075] tipc: Disabling bearer [ 97.403247][ T6106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 97.509237][ T6113] netlink: 'syz.1.45': attribute type 39 has an invalid length. [ 97.890757][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.915011][ T6134] Bluetooth: MGMT ver 1.23 [ 97.939760][ T6130] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.035435][ T6129] netlink: 'syz.2.52': attribute type 12 has an invalid length. [ 98.046746][ T6129] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 98.065952][ T6129] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 98.124415][ T6139] netlink: 'syz.4.54': attribute type 11 has an invalid length. [ 98.365362][ T6152] veth1_to_team: mtu greater than device maximum [ 98.407760][ T6158] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 98.443419][ T6158] __nla_validate_parse: 18 callbacks suppressed [ 98.443435][ T6158] netlink: 236 bytes leftover after parsing attributes in process `syz.4.58'. [ 98.542151][ T6158] warning: `syz.4.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.698124][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 98.699368][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 98.755029][ T6176] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 99.048836][ T6187] Zero length message leads to an empty skb [ 99.233868][ T6194] netlink: 'syz.2.65': attribute type 6 has an invalid length. [ 99.250822][ T6198] netlink: 'syz.2.65': attribute type 6 has an invalid length. [ 99.578172][ T6209] netlink: 'syz.1.70': attribute type 33 has an invalid length. [ 99.809462][ T6221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.74'. [ 99.879790][ T6219] GUP no longer grows the stack in syz.2.73 (6219): 200000002000-20000000a000 (200000001000) [ 99.890613][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.2.73 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 99.890643][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.890662][ T6219] Call Trace: [ 99.890671][ T6219] [ 99.890683][ T6219] dump_stack_lvl+0x189/0x250 [ 99.890720][ T6219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.890742][ T6219] ? __pfx__printk+0x10/0x10 [ 99.890763][ T6219] ? find_vma+0xe7/0x160 [ 99.890806][ T6219] __get_user_pages+0x2a60/0x30b0 [ 99.890869][ T6219] ? __pfx___get_user_pages+0x10/0x10 [ 99.890906][ T6219] __gup_longterm_locked+0xd66/0x15b0 [ 99.890940][ T6219] ? try_grab_folio_fast+0x35b/0x4f0 [ 99.890976][ T6219] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 99.891012][ T6219] gup_fast_fallback+0x1cd4/0x2260 [ 99.891078][ T6219] ? __pfx_gup_fast_fallback+0x10/0x10 [ 99.891109][ T6219] ? stack_depot_save_flags+0x429/0x900 [ 99.891138][ T6219] ? pin_user_pages_fast+0x4d/0xb0 [ 99.891167][ T6219] iov_iter_extract_pages+0x35a/0x5e0 [ 99.891205][ T6219] extract_iter_to_sg+0xe46/0x24e0 [ 99.891247][ T6219] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 99.891290][ T6219] ? __asan_memset+0x22/0x50 [ 99.891318][ T6219] af_alg_get_rsgl+0x436/0x810 [ 99.891368][ T6219] aead_recvmsg+0x4cc/0x13f0 [ 99.891400][ T6219] ? irqentry_exit+0x74/0x90 [ 99.891438][ T6219] ? __pfx_aead_recvmsg+0x10/0x10 [ 99.891463][ T6219] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 99.891494][ T6219] ? __pfx_aead_recvmsg+0x10/0x10 [ 99.891516][ T6219] sock_recvmsg_nosec+0x183/0x1c0 [ 99.891547][ T6219] ____sys_recvmsg+0x3aa/0x460 [ 99.891579][ T6219] ? __pfx_____sys_recvmsg+0x10/0x10 [ 99.891618][ T6219] ? import_iovec+0x74/0xa0 [ 99.891649][ T6219] ___sys_recvmsg+0x1b5/0x510 [ 99.891677][ T6219] ? __pfx____sys_recvmsg+0x10/0x10 [ 99.891734][ T6219] ? __might_fault+0xb0/0x130 [ 99.891768][ T6219] do_recvmmsg+0x307/0x770 [ 99.891799][ T6219] ? __pfx_do_recvmmsg+0x10/0x10 [ 99.891818][ T6219] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 99.891862][ T6219] ? __pfx_do_futex+0x10/0x10 [ 99.891904][ T6219] __x64_sys_recvmmsg+0x190/0x240 [ 99.891929][ T6219] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 99.891949][ T6219] ? rcu_is_watching+0x15/0xb0 [ 99.891986][ T6219] ? do_syscall_64+0xbe/0x3b0 [ 99.892020][ T6219] do_syscall_64+0xfa/0x3b0 [ 99.892047][ T6219] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.892073][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.892093][ T6219] ? clear_bhb_loop+0x60/0xb0 [ 99.892117][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.892154][ T6219] RIP: 0033:0x7f19de38eb69 [ 99.892180][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.892198][ T6219] RSP: 002b:00007f19df209038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 99.892221][ T6219] RAX: ffffffffffffffda RBX: 00007f19de5b5fa0 RCX: 00007f19de38eb69 [ 99.892237][ T6219] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c [ 99.892250][ T6219] RBP: 00007f19de411df1 R08: 0000000000000000 R09: 0000000000000000 [ 99.892263][ T6219] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 99.892275][ T6219] R13: 0000000000000000 R14: 00007f19de5b5fa0 R15: 00007ffd99d73af8 [ 99.892310][ T6219] [ 99.931753][ T6224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 100.719711][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.823169][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.966864][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.146086][ T6272] veth1_macvtap: left promiscuous mode [ 101.183368][ T6272] macsec0: entered allmulticast mode [ 101.354272][ T3537] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 101.484083][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.537058][ T6294] bond1: entered promiscuous mode [ 101.542617][ T6294] bond1: entered allmulticast mode [ 101.548280][ T6294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.645489][ T6294] bond1 (unregistering): Released all slaves [ 102.171113][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 102.214955][ T6308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'. [ 102.709268][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 103.036422][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 103.050297][ T6347] smc: net device erspan0 applied user defined pnetid SYZ0 [ 103.210265][ T6359] tipc: Started in network mode [ 103.215204][ T6359] tipc: Node identity 0ec4b5e9dde3, cluster identity 4711 [ 103.309202][ T6359] tipc: Enabled bearer , priority 0 [ 103.340073][ T6359] tipc: Resetting bearer [ 103.635303][ T6350] tipc: Disabling bearer [ 103.651003][ T6379] __nla_validate_parse: 1 callbacks suppressed [ 103.651021][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 103.688151][ T6379] netlink: 'syz.4.116': attribute type 8 has an invalid length. [ 103.729242][ T6381] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.789449][ T6381] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 103.813957][ T6381] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 103.828907][ T6390] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 104.003829][ T6396] raw_sendmsg: syz.2.120 forgot to set AF_INET. Fix it! [ 104.306606][ T6405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.420768][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'. [ 104.576788][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.130'. [ 104.696539][ T6431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.129'. [ 104.815047][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.133'. [ 104.828017][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.836350][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.887797][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.004292][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 105.740587][ T6474] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 106.036501][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 106.064549][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 106.087068][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 106.133780][ T6492] sctp: [Deprecated]: syz.3.149 (pid 6492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.133780][ T6492] Use struct sctp_sack_info instead [ 107.056053][ T6536] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 107.076339][ T6536] bridge0: port 3(team0) entered blocking state [ 107.088186][ T6536] bridge0: port 3(team0) entered disabled state [ 107.095106][ T6536] team0: entered allmulticast mode [ 107.103873][ T6536] team_slave_0: entered allmulticast mode [ 107.110833][ T6536] team_slave_1: entered allmulticast mode [ 107.120566][ T6536] team0: entered promiscuous mode [ 107.125772][ T6536] team_slave_0: entered promiscuous mode [ 107.131981][ T6536] team_slave_1: entered promiscuous mode [ 107.152544][ T6536] bridge0: port 3(team0) entered blocking state [ 107.159165][ T6536] bridge0: port 3(team0) entered forwarding state [ 107.381840][ T6546] syz.0.166 (6546) used greatest stack depth: 17384 bytes left [ 107.984304][ T6583] netlink: 'syz.3.179': attribute type 21 has an invalid length. [ 108.010893][ T6583] netlink: 'syz.3.179': attribute type 6 has an invalid length. [ 108.060689][ T6584] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 108.072881][ T6584] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 108.108888][ T6587] bridge0: port 3(team0) entered disabled state [ 108.115429][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.123661][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.254976][ T6598] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 108.355733][ T6593] batman_adv: batadv0: Adding interface: wlan1 [ 108.379787][ T6593] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.427928][ T6593] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 108.957361][ T6638] __nla_validate_parse: 13 callbacks suppressed [ 108.957378][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 109.076036][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 109.327004][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.334879][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.390932][ T9] IPVS: starting estimator thread 0... [ 109.509754][ T6645] IPVS: using max 28 ests per chain, 67200 per kthread [ 110.030526][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.097469][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.731074][ T6637] macvlan2: left promiscuous mode [ 110.777827][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.835050][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.878978][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.923235][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.292176][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 111.334638][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 111.533074][ T6687] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 111.589696][ T6687] netlink: 236 bytes leftover after parsing attributes in process `syz.0.208'. [ 111.719156][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 112.025894][ T6702] netlink: 57 bytes leftover after parsing attributes in process `syz.2.214'. [ 112.271781][ T6719] tipc: Started in network mode [ 112.297174][ T6719] tipc: Node identity e6ab15bc26b3, cluster identity 4711 [ 112.325004][ T6719] tipc: Enabled bearer , priority 0 [ 112.374306][ T6725] syzkaller0: entered promiscuous mode [ 112.410331][ T6725] syzkaller0: entered allmulticast mode [ 112.520839][ T6718] tipc: Resetting bearer [ 112.563266][ T6735] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 112.576118][ T6718] tipc: Disabling bearer [ 112.604506][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 112.673965][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.746649][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'. [ 112.835476][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 113.225418][ T6777] netlink: 'syz.0.235': attribute type 21 has an invalid length. [ 113.388872][ T6786] netlink: 'syz.3.238': attribute type 2 has an invalid length. [ 113.439247][ T6788] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.515348][ T6788] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 113.611272][ T6796] netlink: 'syz.2.241': attribute type 12 has an invalid length. [ 113.619303][ T6796] netlink: 'syz.2.241': attribute type 29 has an invalid length. [ 132.853807][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860479][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.358360][ T6853] __nla_validate_parse: 17 callbacks suppressed [ 138.358380][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 138.399609][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 138.442722][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.249'. [ 138.540240][ T6868] syzkaller1: entered promiscuous mode [ 138.555647][ T6871] netlink: 44 bytes leftover after parsing attributes in process `syz.0.253'. [ 138.576155][ T6868] syzkaller1: entered allmulticast mode [ 138.598517][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.252'. [ 138.615382][ T6871] netlink: 43 bytes leftover after parsing attributes in process `syz.0.253'. [ 138.628604][ T6871] netlink: 'syz.0.253': attribute type 5 has an invalid length. [ 138.733422][ T6871] netlink: 43 bytes leftover after parsing attributes in process `syz.0.253'. [ 138.745622][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.253'. [ 138.755730][ T6870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.253'. [ 138.776644][ T6870] netlink: 'syz.0.253': attribute type 5 has an invalid length. [ 138.788069][ T6870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.253'. [ 139.688310][ T6907] sctp: [Deprecated]: syz.3.261 (pid 6907) Use of int in maxseg socket option. [ 139.688310][ T6907] Use struct sctp_assoc_value instead [ 139.876701][ T6918] sctp: [Deprecated]: syz.2.263 (pid 6918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.876701][ T6918] Use struct sctp_sack_info instead [ 139.934116][ T6924] delete_channel: no stack [ 140.018948][ T6931] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.135705][ T5856] Bluetooth: hci4: link tx timeout [ 140.142432][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.297718][ T6944] openvswitch: netlink: EtherType 257 is less than min 600 [ 142.053469][ T7039] dvmrp0: entered allmulticast mode [ 142.213665][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 142.326107][ T7063] trusted_key: syz.1.311 sent an empty control message without MSG_MORE. [ 142.549329][ T7075] can: request_module (can-proto-0) failed. [ 142.704013][ T7084] 8021q: VLANs not supported on ip6_vti0 [ 142.793377][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.799603][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.806853][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.818041][ T7092] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.832534][ T7092] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.848620][ T7095] sctp: [Deprecated]: syz.0.319 (pid 7095) Use of int in maxseg socket option. [ 142.848620][ T7095] Use struct sctp_assoc_value instead [ 142.864882][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.880640][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.887783][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.895700][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 142.902909][ T7092] hsr0 speed is unknown, defaulting to 1000 [ 143.442239][ T7121] veth1_macvtap: left promiscuous mode [ 143.498555][ T7121] macsec0: entered promiscuous mode [ 143.549615][ T7121] macsec0: entered allmulticast mode [ 143.602245][ T7118] veth1_macvtap: entered promiscuous mode [ 143.617641][ T7118] veth1_macvtap: entered allmulticast mode [ 143.628487][ T7128] __nla_validate_parse: 16 callbacks suppressed [ 143.628506][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 143.643260][ T7118] macsec0: left promiscuous mode [ 143.654321][ T7118] macsec0: left allmulticast mode [ 143.672723][ T7118] veth1_macvtap: left allmulticast mode [ 143.799313][ T7128] IPVS: length: 88 != 24 [ 144.110719][ T7162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.414929][ T7175] netlink: 'syz.2.342': attribute type 24 has an invalid length. [ 144.437814][ T10] hid-generic 0005:0458:0009.0001: item fetching failed at offset 0/1 [ 144.453024][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.341'. [ 144.456636][ T10] hid-generic 0005:0458:0009.0001: probe with driver hid-generic failed with error -22 [ 144.630814][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 144.696322][ T7192] ip6gre1: entered allmulticast mode [ 144.756972][ T7192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.997054][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 145.110071][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 145.416420][ T7226] tipc: Started in network mode [ 145.433274][ T7226] tipc: Node identity 825049a947e4, cluster identity 4711 [ 145.477179][ T7226] tipc: Enabled bearer , priority 0 [ 145.520864][ T7229] syzkaller0: entered promiscuous mode [ 145.550140][ T7229] syzkaller0: entered allmulticast mode [ 145.623249][ T7226] tipc: Resetting bearer [ 145.677893][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.355'. [ 145.732942][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 145.742640][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 145.767031][ T7239] netlink: 'syz.0.356': attribute type 14 has an invalid length. [ 145.776429][ T7239] netlink: 'syz.0.356': attribute type 13 has an invalid length. [ 145.969774][ T7245] bond1: entered promiscuous mode [ 145.975130][ T7245] bond1: entered allmulticast mode [ 145.981558][ T7245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.994736][ T7245] netlink: 56 bytes leftover after parsing attributes in process `syz.2.358'. [ 146.010202][ T7245] openvswitch: netlink: IP tunnel TTL not specified. [ 146.164449][ T7219] tipc: Resetting bearer [ 146.183658][ T7219] tipc: Disabling bearer [ 146.334171][ T7263] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.364'. [ 146.420130][ T7263] sctp: [Deprecated]: syz.1.364 (pid 7263) Use of int in max_burst socket option deprecated. [ 146.420130][ T7263] Use struct sctp_assoc_value instead [ 146.906553][ T7298] ip6gre2: entered allmulticast mode [ 147.547089][ T7327] netlink: 'syz.2.380': attribute type 11 has an invalid length. [ 147.988793][ T7341] netlink: 'syz.2.383': attribute type 32 has an invalid length. [ 148.624232][ T30] audit: type=1107 audit(1754167857.765:2): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y [ 148.624232][ T30] +4-*瞳 kuU兯/x `麜;' [ 148.652243][ T7379] __nla_validate_parse: 8 callbacks suppressed [ 148.652260][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.712965][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.797828][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.846770][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.927542][ T7390] tipc: Enabled bearer , priority 0 [ 148.935588][ T7390] syzkaller0: entered promiscuous mode [ 148.941621][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.950571][ T7390] syzkaller0: entered allmulticast mode [ 148.969623][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 148.970561][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 148.994589][ T7391] tipc: Resetting bearer [ 149.114454][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 149.174458][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 149.238483][ T7390] tipc: Resetting bearer [ 149.255859][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 149.401933][ T7390] tipc: Disabling bearer [ 149.537912][ T7423] tc_dump_action: action bad kind [ 151.716456][ T7548] : renamed from hsr0 (while UP) [ 152.040095][ T7554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.069904][ T7554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.091761][ T7554] bond0 (unregistering): Released all slaves [ 152.102144][ T7565] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.126526][ T7558] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 152.363072][ T7574] veth0: entered promiscuous mode [ 152.676631][ T7594] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 152.828497][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 152.840574][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 152.862021][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 153.040497][ T7615] unknown channel width for channel at 909000KHz? [ 153.310831][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 153.317985][ T7608] infiniband syz2: set active [ 153.329049][ T7608] infiniband syz2: added vxcan1 [ 153.604958][ T7608] RDS/IB: syz2: added [ 153.630836][ T7608] smc: adding ib device syz2 with port count 1 [ 153.637237][ T7608] smc: ib device syz2 port 1 has pnetid [ 153.695186][ T5916] vxcan1 speed is unknown, defaulting to 1000 [ 153.703286][ T7639] __nla_validate_parse: 34 callbacks suppressed [ 153.703319][ T7639] netlink: 92 bytes leftover after parsing attributes in process `syz.0.465'. [ 153.705538][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 153.802691][ T7645] netlink: 184 bytes leftover after parsing attributes in process `syz.1.468'. [ 153.803935][ T7644] netlink: 184 bytes leftover after parsing attributes in process `syz.1.468'. [ 154.137217][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'. [ 154.417486][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 154.611217][ T7679] netlink: 268 bytes leftover after parsing attributes in process `syz.3.480'. [ 154.680819][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 154.691078][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 154.784355][ T7686] tipc: Enabled bearer , priority 10 [ 154.835468][ T7686] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 154.842524][ T7688] netlink: 156 bytes leftover after parsing attributes in process `syz.3.482'. [ 155.145748][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 155.185515][ T7703] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 155.244751][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 155.274577][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 155.283652][ T7705] netlink: 'syz.3.488': attribute type 30 has an invalid length. [ 155.524736][ T7723] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 155.608899][ T7723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.637417][ T7716] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 155.676998][ T7723] bond1: (slave gretap2): making interface the new active one [ 155.701181][ T7723] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 155.757253][ T7729] vlan2: entered promiscuous mode [ 155.790634][ T7729] bond1: entered promiscuous mode [ 155.805986][ T7729] gretap2: entered promiscuous mode [ 155.819891][ T7729] vlan2: entered allmulticast mode [ 155.838011][ T7729] bond1: entered allmulticast mode [ 155.858273][ T7729] gretap2: entered allmulticast mode [ 155.885144][ T7730] vlan2: entered promiscuous mode [ 155.900411][ T5930] tipc: Node number set to 1163848515 [ 155.906584][ T7730] bridge0: entered promiscuous mode [ 155.963138][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 155.981032][ T7720]  speed is unknown, defaulting to 1000 [ 156.093177][ T7739]  speed is unknown, defaulting to 1000 [ 156.194920][ T7748] netlink: 'syz.3.499': attribute type 1 has an invalid length. [ 156.517789][ T7720] vxcan1 speed is unknown, defaulting to 1000 [ 156.857333][ T7739] vxcan1 speed is unknown, defaulting to 1000 [ 157.106137][ T7772] openvswitch: netlink: IP tunnel TTL not specified. [ 157.264431][ T7608] vxcan1 speed is unknown, defaulting to 1000 [ 157.558403][ T7790] syzkaller1: entered promiscuous mode [ 157.567532][ T7790] syzkaller1: entered allmulticast mode [ 157.986725][ T7802] team0: left allmulticast mode [ 157.996816][ T7802] team_slave_0: left allmulticast mode [ 158.048360][ T7802] team_slave_1: left allmulticast mode [ 158.071472][ T7802] team0: left promiscuous mode [ 158.079009][ T7802] team_slave_0: left promiscuous mode [ 158.093106][ T7802] team_slave_1: left promiscuous mode [ 158.099098][ T7802] bridge0: port 3(team0) entered disabled state [ 158.173265][ T7802] bridge_slave_0: left allmulticast mode [ 158.184691][ T7802] bridge_slave_0: left promiscuous mode [ 158.208357][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.246102][ T7802] bridge_slave_1: left allmulticast mode [ 158.253911][ T7802] bridge_slave_1: left promiscuous mode [ 158.262591][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.289189][ T7802] bond0: (slave bond_slave_0): Releasing backup interface [ 158.308596][ T7802] bond0: (slave bond_slave_1): Releasing backup interface [ 158.330662][ T7802] team0: Port device team_slave_0 removed [ 158.346476][ T7802] team0: Port device team_slave_1 removed [ 158.354123][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.362766][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.377280][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.386638][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.425747][ T7809] vlan0: entered promiscuous mode [ 158.445879][ T7809] team0: Port device vlan0 added [ 158.452913][ T5930] vxcan1 speed is unknown, defaulting to 1000 [ 158.948040][ T7839] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 159.035274][ T7839] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 159.046397][ T7844] __nla_validate_parse: 3 callbacks suppressed [ 159.046414][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 159.221501][ T7854] netlink: 156 bytes leftover after parsing attributes in process `syz.4.532'. [ 159.336376][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 159.364260][ T7860] veth3: entered allmulticast mode [ 159.597818][ T7874] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 159.612634][ T7874] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 159.899487][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.542'. [ 160.011543][ T7891]  speed is unknown, defaulting to 1000 [ 160.039026][ T7891] vxcan1 speed is unknown, defaulting to 1000 [ 160.041976][ T7895]  speed is unknown, defaulting to 1000 [ 160.102188][ T7903] tipc: Enabled bearer , priority 0 [ 160.114691][ T7903] D: renamed from syzkaller0 [ 160.121675][ T7903] tipc: Disabling bearer [ 160.373768][ T7895] vxcan1 speed is unknown, defaulting to 1000 [ 160.560414][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 160.596877][ T7918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.551'. [ 160.734529][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'. [ 161.031248][ T7937] netlink: 784 bytes leftover after parsing attributes in process `syz.2.557'. [ 161.235849][ T7941] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 161.296484][ T7941] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.308130][ T7944] "syz.0.561" (7944) uses obsolete ecb(arc4) skcipher [ 161.407409][ T7953] netlink: set zone limit has 8 unknown bytes [ 161.546054][ T7960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.589416][ T7962] netlink: set zone limit has 8 unknown bytes [ 161.890157][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 162.173932][ T7986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 162.358450][ T7998] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.416741][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.668663][ T8019] openvswitch: netlink: Flow key attr not present in new flow. [ 162.839475][ T8030] openvswitch: netlink: Flow key attr not present in new flow. [ 163.384860][ T8064] pimreg: entered allmulticast mode [ 163.522222][ T8068] netlink: 'syz.3.596': attribute type 23 has an invalid length. [ 164.015806][ T8095] netlink: 'syz.0.603': attribute type 178 has an invalid length. [ 164.040750][ T8095] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 164.984950][ T8150] __nla_validate_parse: 4 callbacks suppressed [ 164.984973][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 165.025893][ T8150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 165.089778][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 165.409600][ T8166] netlink: 'syz.2.616': attribute type 24 has an invalid length. [ 165.773336][ T8194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.924837][ T8204] netlink: 'syz.1.629': attribute type 83 has an invalid length. [ 166.067715][ T8212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.110743][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 166.122695][ T8216] syzkaller0: entered promiscuous mode [ 166.128200][ T8216] syzkaller0: entered allmulticast mode [ 166.137563][ T8215] tipc: Enabled bearer , priority 0 [ 166.155939][ T8215] tipc: Enabling of bearer rejected, already enabled [ 166.166580][ T8215] tipc: Enabling of bearer rejected, already enabled [ 166.246167][ T8215] tipc: Resetting bearer [ 166.279646][ T8215] tipc: Disabling bearer [ 166.553003][ T8240] netlink: 'syz.2.642': attribute type 21 has an invalid length. [ 166.840621][ T8256] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 166.866532][ T8256] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 166.893343][ T8256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.648'. [ 167.132751][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 167.354326][ T8277] netlink: 72 bytes leftover after parsing attributes in process `syz.1.655'. [ 168.140759][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 168.156092][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 168.163864][ T8326] netlink: 'syz.4.665': attribute type 21 has an invalid length. [ 168.183929][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 168.203820][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 168.346566][ T8338] syz.3.669 uses old SIOCAX25GETINFO [ 169.009232][ T8365] ip6gre2: entered allmulticast mode [ 169.139228][ T8368] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 169.168338][ T8371] netlink: 'syz.3.679': attribute type 2 has an invalid length. [ 169.290827][ T8379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.322865][ T8411] __nla_validate_parse: 4 callbacks suppressed [ 170.322881][ T8411] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.696'. [ 170.372472][ T8411] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.696'. [ 170.414017][ T8411] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.696'. [ 170.426166][ T8411] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.696'. [ 170.564208][ T8424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.574549][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 170.598898][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 170.609815][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 170.686598][ T8428] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 170.717968][ T8433] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.703'. [ 170.727985][ T8433] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.703'. [ 170.781182][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 170.844828][ T8440] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 170.966515][ T8446] sctp: [Deprecated]: syz.3.705 (pid 8446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.966515][ T8446] Use struct sctp_sack_info instead [ 171.529154][ T8478] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 171.677799][ T8486] veth0_to_batadv: entered allmulticast mode [ 171.815307][ T8492] netlink: 'syz.2.722': attribute type 1 has an invalid length. [ 171.850185][ T8492] bond2: (slave bridge2): making interface the new active one [ 171.858690][ T8492] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 171.945492][ T8496] bond3: entered promiscuous mode [ 171.950650][ T8496] bond3: entered allmulticast mode [ 171.956682][ T8496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.032344][ T8496] bond3 (unregistering): Released all slaves [ 172.203600][ T8503] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 172.216726][ T8503] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 172.362264][ T8503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.418991][ T8515] netlink: 'syz.4.728': attribute type 13 has an invalid length. [ 172.560898][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.568270][ T8515] bridge0: port 2(bridge_slave_1) entered listening state [ 172.576416][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.583625][ T8515] bridge0: port 1(bridge_slave_0) entered listening state [ 172.602138][ T8515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.662888][ T8519] team0: Port device vlan0 removed [ 172.704337][ T8519] bond2: (slave bridge2): Releasing active interface [ 172.869072][ T1163] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.886756][ T1163] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.935099][ T1163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.947610][ T1163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.045233][ T8536] tipc: Enabled bearer , priority 0 [ 173.052802][ T8536] syzkaller0: entered promiscuous mode [ 173.058392][ T8536] syzkaller0: entered allmulticast mode [ 173.087261][ T8536] tipc: Resetting bearer [ 173.102849][ T8535] tipc: Resetting bearer [ 173.124630][ T8535] tipc: Disabling bearer [ 173.373812][ T8556] openvswitch: netlink: Unknown nsh attribute 0 [ 173.397174][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.490133][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 173.613504][ T8570] netlink: zone id is out of range [ 173.624169][ T8570] netlink: zone id is out of range [ 174.536424][ T8630] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 174.563728][ T8630] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 174.849233][ T8651] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 175.096547][ T8662] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 175.508513][ T8692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 175.522209][ T8692] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.524509][ T8686] __nla_validate_parse: 26 callbacks suppressed [ 175.524524][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 175.536759][ T8692] gretap2: entered promiscuous mode [ 175.552000][ T8692] gretap2: entered allmulticast mode [ 175.717821][ T8705] Bluetooth: MGMT ver 1.23 [ 175.806983][ T8712] net_ratelimit: 20 callbacks suppressed [ 175.806999][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.840719][ T8715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.989353][ T8725] netlink: 104 bytes leftover after parsing attributes in process `syz.0.789'. [ 176.019023][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 176.104594][ T8728]  speed is unknown, defaulting to 1000 [ 176.113606][ T8728] vxcan1 speed is unknown, defaulting to 1000 [ 176.421951][ T8740] tipc: Enabled bearer , priority 0 [ 176.437438][ T8740] syzkaller0: entered promiscuous mode [ 176.443208][ T8740] syzkaller0: entered allmulticast mode [ 176.505830][ T8740] tipc: Resetting bearer [ 176.546204][ T8739] tipc: Resetting bearer [ 176.600265][ T8739] tipc: Disabling bearer [ 176.828991][ T8752] netlink: 100 bytes leftover after parsing attributes in process `syz.2.799'. [ 176.943445][ T8759] netlink: 165 bytes leftover after parsing attributes in process `syz.0.802'. [ 177.145012][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 177.278797][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 177.306610][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 177.533049][ T8790] netlink: 156 bytes leftover after parsing attributes in process `syz.1.810'. [ 177.628523][ T8792] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 177.698849][ T8796] siw: device registration error -23 [ 177.771996][ T8800] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 177.835811][ T8799] tipc: Enabled bearer , priority 0 [ 177.844820][ T8799] syzkaller0: entered promiscuous mode [ 177.859236][ T8799] syzkaller0: entered allmulticast mode [ 177.935916][ T8811] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 177.961859][ T8799] tipc: Resetting bearer [ 178.103471][ T8811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.112697][ T8811] bond2: (slave bond3): making interface the new active one [ 178.120979][ T8811] bond2: (slave bond3): Enslaving as an active interface with an up link [ 178.126111][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.818'. [ 178.139951][ T8797] tipc: Resetting bearer [ 178.152203][ T8797] tipc: Disabling bearer [ 178.169132][ T8821] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 178.188780][ T8824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.196966][ T8822] 8021q: VLANs not supported on ip6tnl0 [ 178.710113][ T8858] team0: mtu less than device minimum [ 178.977460][ T8868] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 179.226202][ T8882] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 179.287872][ T8882] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 179.451785][ T8899] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 179.684082][ T8905] bond0: (slave bridge3): making interface the new active one [ 179.704706][ T8905] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 179.890985][ T8926] netlink: 'syz.3.845': attribute type 8 has an invalid length. [ 180.489789][ T8967] batadv_slave_1: entered promiscuous mode [ 180.664873][ T8967] batadv_slave_1: left promiscuous mode [ 180.668937][ T8984] netlink: 'syz.0.859': attribute type 29 has an invalid length. [ 180.747065][ T8987] __nla_validate_parse: 20 callbacks suppressed [ 180.747084][ T8987] netlink: 19 bytes leftover after parsing attributes in process `syz.1.863'. [ 180.880547][ T8999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.865'. [ 180.951523][ T9001] tipc: Enabling not permitted [ 180.957141][ T9001] tipc: Enabling of bearer rejected, failed to enable media [ 180.988198][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 181.007312][ T9004] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 181.016051][ T9004] batman_adv: batadv0: Removing interface: wlan1 [ 181.037874][ T9004] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.059974][ T9008] netlink: 'syz.0.868': attribute type 10 has an invalid length. [ 181.106399][ T9010] v: renamed from dummy0 (while UP) [ 181.189124][ T9013] netlink: 'syz.4.870': attribute type 7 has an invalid length. [ 181.206232][ T9013] netlink: 140 bytes leftover after parsing attributes in process `syz.4.870'. [ 181.476088][ T9030] netlink: 156 bytes leftover after parsing attributes in process `syz.2.876'. [ 181.547639][ T9038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.550051][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 181.554924][ T9038] IPv6: NLM_F_CREATE should be set when creating new route [ 181.571174][ T9038] IPv6: NLM_F_CREATE should be set when creating new route [ 181.578417][ T9038] IPv6: NLM_F_CREATE should be set when creating new route [ 181.606986][ T9038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.718997][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 181.757571][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'. [ 181.867202][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 181.957311][ T9060]  speed is unknown, defaulting to 1000 [ 181.982881][ T9065] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 182.056014][ T9060] vxcan1 speed is unknown, defaulting to 1000 [ 182.865963][ T9108] validate_nla: 4 callbacks suppressed [ 182.865982][ T9108] netlink: 'syz.4.898': attribute type 4 has an invalid length. [ 182.977259][ T9106] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 183.442244][ T9129] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 183.449001][ T9129] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.539109][ T9124] bond5: entered allmulticast mode [ 183.561624][ T9124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.573439][ T9124] bridge0: port 3(bond5) entered blocking state [ 183.581427][ T9124] bridge0: port 3(bond5) entered disabled state [ 183.593452][ T9124] bond5: entered promiscuous mode [ 183.612556][ T9124] bridge0: port 3(bond5) entered blocking state [ 183.619157][ T9124] bridge0: port 3(bond5) entered forwarding state [ 183.672237][ T7514] bridge0: port 3(bond5) entered disabled state [ 183.802575][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.910'. [ 184.392241][ T9172] netlink: 'syz.4.916': attribute type 33 has an invalid length. [ 185.194213][ T9194] tipc: Enabled bearer , priority 0 [ 185.221495][ T9194] tipc: Resetting bearer [ 185.233394][ T9193] tipc: Disabling bearer [ 185.342345][ T9210] tipc: Invalid UDP bearer configuration [ 185.342397][ T9210] tipc: Enabling of bearer rejected, failed to enable media [ 185.596348][ T9228] sctp: [Deprecated]: syz.4.938 (pid 9228) Use of int in maxseg socket option. [ 185.596348][ T9228] Use struct sctp_assoc_value instead [ 185.689136][ T9230] nbd: must specify a device to reconfigure [ 186.337716][ T9258] netlink: 'syz.4.949': attribute type 11 has an invalid length. [ 187.445996][ T9306]  speed is unknown, defaulting to 1000 [ 187.515468][ T9306] vxcan1 speed is unknown, defaulting to 1000 [ 187.542997][ T9314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.593991][ T9314] __nla_validate_parse: 2 callbacks suppressed [ 187.594009][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 187.721916][ T9319] tipc: Enabled bearer , priority 0 [ 187.752972][ T9319] syzkaller0: entered promiscuous mode [ 187.769738][ T9319] syzkaller0: entered allmulticast mode [ 187.790938][ T9319] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20001 [ 187.812459][ T9319] tipc: Resetting bearer [ 187.838006][ T9318] tipc: Resetting bearer [ 187.881533][ T9318] tipc: Disabling bearer [ 187.890194][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 187.898741][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 187.935013][ T9327] netlink: 'syz.0.966': attribute type 12 has an invalid length. [ 187.952011][ T9327] netlink: 'syz.0.966': attribute type 29 has an invalid length. [ 187.968912][ T9327] netlink: 148 bytes leftover after parsing attributes in process `syz.0.966'. [ 188.081213][ T9332] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 188.089073][ T9] IPVS: starting estimator thread 0... [ 188.134739][ T9333] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 188.166826][ T9338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.215103][ T9342] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 188.289967][ T9335] IPVS: using max 29 ests per chain, 69600 per kthread [ 188.345087][ T9342] bond3: entered promiscuous mode [ 188.350879][ T9342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.434797][ T9350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.458262][ T9350] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 188.471225][ T9350] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 188.495689][ T9350] bond3: (slave wireguard0): making interface the new active one [ 188.503951][ T9350] wireguard0: entered promiscuous mode [ 188.517667][ T9350] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 188.574650][ T9348] veth0_to_bridge: entered promiscuous mode [ 188.869009][ T9379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.883113][ T9379] bond0: (slave bond2): Enslaving as an active interface with a down link [ 188.893732][ T9302] veth0_to_bridge: left promiscuous mode [ 188.947244][ T9384] team0: Device vti0 is of different type [ 189.451696][ T9406] team0: Device vti0 is of different type [ 189.635191][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 190.057579][ T9435] netlink: 64 bytes leftover after parsing attributes in process `syz.0.995'. [ 190.183008][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.998'. [ 190.196621][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 190.643541][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 190.809066][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 190.845101][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 190.935976][ T9484] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1014'. [ 191.156283][ T9495] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 191.738438][ T9531] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.769077][ T9531] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 191.790358][ T9531] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 192.074774][ T9549] : entered promiscuous mode [ 192.556834][ T9587] openvswitch: netlink: Missing key (keys=40, expected=80) [ 192.709064][ T9595] __nla_validate_parse: 12 callbacks suppressed [ 192.709084][ T9595] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1047'. [ 192.739159][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'. [ 192.777147][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 192.786531][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 192.864533][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'. [ 192.917480][ T9602] netlink: 'syz.0.1051': attribute type 5 has an invalid length. [ 192.978539][ T9605] netlink: 'syz.0.1052': attribute type 9 has an invalid length. [ 193.201402][ T9615] tipc: Resetting bearer [ 193.294251][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.302155][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.414478][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.427514][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.534206][ T9629] netlink: 'syz.1.1061': attribute type 2 has an invalid length. [ 193.573789][ T9615] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 193.581722][ T9629] netlink: 'syz.1.1061': attribute type 8 has an invalid length. [ 193.596266][ T9615] ip6gre2: left allmulticast mode [ 193.619152][ T9615] gretap2: left promiscuous mode [ 193.624338][ T9615] gretap2: left allmulticast mode [ 193.632045][ T9629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1061'. [ 193.648962][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1059'. [ 193.689934][ T1141] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.712335][ T1141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.722682][ T1141] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.758584][ T1141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.799779][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.828423][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.864882][ T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.884577][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.896112][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1062'. [ 193.934144][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 194.052777][ T5916] IPVS: starting estimator thread 0... [ 194.065416][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.189727][ T9654] IPVS: using max 28 ests per chain, 67200 per kthread [ 194.206007][ T9662] bridge0: port 3(syz_tun) entered blocking state [ 194.250798][ T9662] bridge0: port 3(syz_tun) entered disabled state [ 194.297489][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299960][ T9662] syz_tun: entered allmulticast mode [ 194.308531][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389035][ T9662] syz_tun: entered promiscuous mode [ 194.507855][ T9662] bridge0: port 3(syz_tun) entered blocking state [ 194.514738][ T9662] bridge0: port 3(syz_tun) entered listening state [ 194.601700][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'. [ 194.882119][ T1163] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.935203][ T1163] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.975054][ T1163] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.997193][ T9707] netlink: 'syz.4.1080': attribute type 11 has an invalid length. [ 195.049667][ T1163] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.278512][ T9722] netlink: 'syz.4.1084': attribute type 12 has an invalid length. [ 195.308799][ T9722] netlink: 'syz.4.1084': attribute type 29 has an invalid length. [ 195.342751][ T9722] netlink: 'syz.4.1084': attribute type 2 has an invalid length. [ 195.387738][ T9722] netlink: 'syz.4.1084': attribute type 2 has an invalid length. [ 195.411621][ T9722] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 195.445608][ T9722] netlink: 'syz.4.1084': attribute type 37 has an invalid length. [ 195.768602][ T9741] bond4: entered promiscuous mode [ 195.825391][ T9741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.897096][ T9746] batman_adv: batadv0: Adding interface: team0 [ 195.914762][ T9746] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.950005][ T9746] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 196.054842][ T9747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.111206][ T9747] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 196.174619][ T9747] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 196.332376][ T9747] bond4: (slave wireguard0): making interface the new active one [ 196.355082][ T9747] wireguard0: entered promiscuous mode [ 196.377434][ T9747] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 197.522864][ T9837]  speed is unknown, defaulting to 1000 [ 197.541326][ T9837] vxcan1 speed is unknown, defaulting to 1000 [ 197.750320][ T9851] __nla_validate_parse: 12 callbacks suppressed [ 197.750337][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 197.815482][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 197.922503][ T9856] batadv_slave_1: entered promiscuous mode [ 197.957198][ T9856] batadv_slave_1: left promiscuous mode [ 198.390069][ T9884] validate_nla: 6 callbacks suppressed [ 198.390087][ T9884] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 198.407455][ T9884] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 198.501825][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 198.511237][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 198.572386][ T9884] tipc: Enabled bearer , priority 12 [ 198.587739][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1131'. [ 198.615821][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1131'. [ 198.769174][ T9910] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 198.978401][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 199.116544][ T9927] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1140'. [ 199.373118][ T9940] netlink: 'syz.3.1145': attribute type 64 has an invalid length. [ 199.408288][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 199.562304][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 199.594877][ T9948] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 199.626781][ T9948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.635930][ T9949] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 199.666918][ T9952] team0: Device gtp0 is of different type [ 199.678036][ T9957] openvswitch: netlink: Missing valid actions attribute. [ 199.689585][ T5902] tipc: Node number set to 3542595049 [ 199.698371][ T9957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.057451][ T9976] dvmrp1: entered allmulticast mode [ 200.150800][ T9980] netlink: 'syz.4.1160': attribute type 1 has an invalid length. [ 200.169019][ T9985] tc_dump_action: action bad kind [ 200.326278][ T9996] syz_tun: left allmulticast mode [ 200.341447][ T9996] syz_tun: left promiscuous mode [ 200.347022][ T9996] bridge0: port 3(syz_tun) entered disabled state [ 200.412634][ T9996] bridge_slave_0: left allmulticast mode [ 200.442572][ T9996] bridge_slave_0: left promiscuous mode [ 200.458548][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.505454][ T9996] bridge_slave_1: left allmulticast mode [ 200.512312][ T9996] bridge_slave_1: left promiscuous mode [ 200.518659][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.535573][ T9996] bond0: (slave bond_slave_0): Releasing backup interface [ 200.564463][ T9996] bond0: (slave bond_slave_1): Releasing backup interface [ 200.595635][ T9996] team0: Port device team_slave_0 removed [ 200.632018][ T9996] team0: Port device team_slave_1 removed [ 200.638786][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.647987][ T9996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.657752][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.665423][ T9996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.681495][ T9996] bond0: (slave wlan1): Releasing backup interface [ 200.692821][ T9996] bond1: (slave gretap2): Releasing active interface [ 200.699707][ T9996] gretap2: left promiscuous mode [ 200.704837][ T9996] gretap2: left allmulticast mode [ 200.719173][ T9996] bond4: (slave wireguard0): Releasing backup interface [ 200.726562][ T9996] wireguard0: left promiscuous mode [ 200.779448][T10014] xfrm1: entered promiscuous mode [ 200.793416][T10014] xfrm1: entered allmulticast mode [ 201.014398][T10030] netlink: 'syz.1.1175': attribute type 3 has an invalid length. [ 201.191077][T10045] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 201.475556][T10063] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 201.496618][T10063] v: entered promiscuous mode [ 201.516241][T10063] bridge0: port 4(v) entered blocking state [ 201.526605][T10063] bridge0: port 4(v) entered disabled state [ 201.540581][T10063] v: entered allmulticast mode [ 201.562638][T10063] bridge0: port 4(v) entered blocking state [ 201.568693][T10063] bridge0: port 4(v) entered forwarding state [ 201.680849][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.684716][T10125] syzkaller1: entered promiscuous mode [ 202.687544][T10136] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 202.699822][T10125] syzkaller1: entered allmulticast mode [ 202.726374][T10136] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 202.790474][T10144] __nla_validate_parse: 17 callbacks suppressed [ 202.790490][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 202.884432][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 202.905982][T10149] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 203.019027][T10153] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 203.043256][T10153] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 203.442747][T10178] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 203.482660][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1221'. [ 203.692811][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1226'. [ 203.703738][T10194] validate_nla: 2 callbacks suppressed [ 203.703753][T10194] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 203.725615][T10196] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 203.740434][T10196] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1227'. [ 203.757205][T10194] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1227'. [ 203.782300][T10196] wlan1: mtu less than device minimum [ 203.789288][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 203.803936][T10194] wlan1: mtu less than device minimum [ 203.852508][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1229'. [ 203.882184][T10202] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1229'. [ 203.950285][T10202] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1229'. [ 204.045573][T10207] tipc: Enabled bearer , priority 0 [ 204.073513][T10207] syzkaller0: entered promiscuous mode [ 204.079037][T10207] syzkaller0: entered allmulticast mode [ 204.196317][T10231] Driver unsupported XDP return value 0 on prog (id 228) dev N/A, expect packet loss! [ 204.207608][T10207] tipc: Resetting bearer [ 204.283458][T10204] tipc: Resetting bearer [ 204.325721][T10204] tipc: Disabling bearer [ 204.573791][T10259] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 204.775839][T10231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.854400][T10277] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 204.954362][T10285] pim6reg: entered allmulticast mode [ 205.029424][T10288] tipc: Enabled bearer , priority 0 [ 205.096588][T10288] syzkaller0: entered promiscuous mode [ 205.106065][T10288] syzkaller0: entered allmulticast mode [ 205.113313][T10288] tipc: Resetting bearer [ 205.142367][T10287] tipc: Resetting bearer [ 205.537713][T10314] netlink: 'syz.0.1249': attribute type 21 has an invalid length. [ 206.131629][ T9] tipc: Node number set to 3316926889 [ 206.302491][T10287] tipc: Disabling bearer [ 206.337769][T10314] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 206.493281][T10324] netlink: 'syz.0.1256': attribute type 7 has an invalid length. [ 206.538139][T10324] netlink: 'syz.0.1256': attribute type 64 has an invalid length. [ 206.727425][T10337] netlink: 'syz.0.1261': attribute type 12 has an invalid length. [ 206.774689][T10337] netlink: 'syz.0.1261': attribute type 11 has an invalid length. [ 206.815567][T10346] IPVS: Error connecting to the multicast addr [ 207.385773][T10379] netlink: 'syz.0.1277': attribute type 8 has an invalid length. [ 207.401622][T10375] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 207.805366][T10404] __nla_validate_parse: 17 callbacks suppressed [ 207.805384][T10404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1286'. [ 207.835412][T10409] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1288'. [ 207.972079][T10415] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 207.996365][T10415] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 208.020037][T10415] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 208.140462][T10424] : entered promiscuous mode [ 208.246181][T10440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1294'. [ 208.549403][T10449] syzkaller1: entered promiscuous mode [ 208.559272][T10455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 208.582539][T10449] syzkaller1: entered allmulticast mode [ 208.674097][T10466] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 208.734626][T10468] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1303'. [ 208.746536][T10466] team0: Port device dummy0 added [ 208.775549][T10470] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 208.825361][T10470] team0: Port device dummy0 removed [ 208.835698][T10470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 208.933369][T10471] netlink: 'syz.4.1304': attribute type 83 has an invalid length. [ 209.141833][T10490] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 209.345396][T10494] bond4: (slave gretap1): making interface the new active one [ 209.354473][T10494] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 209.365346][T10497] smc: net device bond0 applied user defined pnetid SYZ0 [ 209.395465][T10497] smc: net device erspan0 erased user defined pnetid SYZ0 [ 209.430145][T10497] smc: net device bond0 erased user defined pnetid SYZ0 [ 209.752072][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 209.944658][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'. [ 209.987363][T10539] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1321'. [ 210.306284][T10555] netlink: 'syz.2.1325': attribute type 21 has an invalid length. [ 210.333698][T10556] sctp: [Deprecated]: syz.1.1326 (pid 10556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.333698][T10556] Use struct sctp_sack_info instead [ 210.364030][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 210.413379][T10556] sctp: [Deprecated]: syz.1.1326 (pid 10556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.413379][T10556] Use struct sctp_sack_info instead [ 210.445490][T10561] dvmrp0: left allmulticast mode [ 210.863172][T10579] netlink: 'syz.2.1334': attribute type 13 has an invalid length. [ 210.957999][T10587] netlink: 'syz.0.1336': attribute type 11 has an invalid length. [ 211.006331][T10587] netlink: 'syz.0.1336': attribute type 11 has an invalid length. [ 211.070352][T10587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1336'. [ 211.135783][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1338'. [ 211.434136][T10618] pimreg: entered allmulticast mode [ 211.730102][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.736381][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 211.743450][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.344198][ T36] tipc: Subscription rejected, illegal request [ 212.363531][T10671] netlink: 'syz.0.1361': attribute type 32 has an invalid length. [ 212.384299][T10671] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 212.626614][T10688] netlink: 'syz.1.1367': attribute type 2 has an invalid length. [ 212.712604][T10692] pimreg: left allmulticast mode [ 212.728075][T10692] dvmrp1: left allmulticast mode [ 213.004360][T10708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.173096][T10716] netlink: 'syz.2.1375': attribute type 4 has an invalid length. [ 213.225056][T10717] netlink: 'syz.2.1375': attribute type 4 has an invalid length. [ 213.292408][T10716] __nla_validate_parse: 4 callbacks suppressed [ 213.292427][T10716] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1375'. [ 213.318628][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1376'. [ 213.383623][T10718] xfrm2: entered allmulticast mode [ 213.399148][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1376'. [ 213.445109][T10712] netlink: 'syz.0.1373': attribute type 3 has an invalid length. [ 213.535167][T10722]  speed is unknown, defaulting to 1000 [ 213.616846][T10722] vxcan1 speed is unknown, defaulting to 1000 [ 213.659922][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1383'. [ 213.764707][T10748] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1381'. [ 213.798200][T10746] bond0: (slave dummy0): Releasing backup interface [ 213.823733][T10746] bond0: (slave bridge_slave_1): Releasing backup interface [ 213.879485][T10746] bond3: (slave wireguard0): Releasing backup interface [ 213.888917][T10746] wireguard0: left promiscuous mode [ 213.928670][T10746] bond4: (slave gretap1): Releasing active interface [ 213.954980][T10751] team0: Mode changed to "loadbalance" [ 214.111567][T10761] tipc: Enabled bearer , priority 0 [ 214.125923][T10761] syzkaller0: entered promiscuous mode [ 214.136040][T10761] syzkaller0: entered allmulticast mode [ 214.195165][T10761] tipc: Resetting bearer [ 214.195826][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 214.231693][T10760] tipc: Resetting bearer [ 214.274529][T10760] tipc: Disabling bearer [ 214.483532][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 214.790022][T10798] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1398'. [ 215.046589][T10807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1400'. [ 215.099246][T10805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1400'. [ 215.161802][T10810] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 215.188971][T10813] netlink: 'syz.4.1402': attribute type 1 has an invalid length. [ 217.010316][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.046124][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.169644][ T5159] Bluetooth: hci1: command 0x0406 tx timeout [ 217.538564][T10944] gretap0: entered promiscuous mode [ 217.550250][T10944] 0{X功: renamed from gretap0 [ 217.558199][T10944] 0{X功: left promiscuous mode [ 217.563400][T10944] 0{X功: entered allmulticast mode [ 217.571257][T10944] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 218.202128][T10982] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 218.238593][T10994] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 218.383196][T11003] geneve2: entered promiscuous mode [ 218.388463][T11003] geneve2: entered allmulticast mode [ 218.478067][T11008] __nla_validate_parse: 16 callbacks suppressed [ 218.478086][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.509986][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.534260][T11014] netlink: 'syz.1.1459': attribute type 11 has an invalid length. [ 218.573407][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.574337][ T1141] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.585729][T11014] netlink: 'syz.1.1459': attribute type 11 has an invalid length. [ 218.608102][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.625453][T11014] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1459'. [ 218.625915][ T1141] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.647242][ T1141] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.672592][ T1141] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.711817][T11020] bond5 (unregistering): Released all slaves [ 219.096492][T11048] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 219.132281][T11048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.162456][T11053] team0: Device vti0 is of different type [ 219.248491][T11054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.273195][T11054] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.311476][T11054] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 219.375456][T11055] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.401761][T11055] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 219.601683][T11079] sctp: [Deprecated]: syz.4.1477 (pid 11079) Use of int in maxseg socket option. [ 219.601683][T11079] Use struct sctp_assoc_value instead [ 219.834953][T11094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1479'. [ 219.844588][T11094] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1479'. [ 219.853755][T11094] netlink: 'syz.4.1479': attribute type 6 has an invalid length. [ 219.864511][T11094] netlink: 'syz.4.1479': attribute type 5 has an invalid length. [ 219.874426][T11094] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1479'. [ 220.015913][T11105] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 220.111553][T11105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.174692][T11108] bond1: (slave ip6erspan0): making interface the new active one [ 220.187493][T11108] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 220.735032][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 220.783820][T11160] netlink: 'syz.2.1499': attribute type 11 has an invalid length. [ 220.814137][T11160] netlink: 'syz.2.1499': attribute type 11 has an invalid length. [ 220.852946][T11160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1499'. [ 220.989793][T11177] netlink: 'syz.4.1505': attribute type 7 has an invalid length. [ 221.011899][T11177] netlink: 'syz.4.1505': attribute type 8 has an invalid length. [ 221.037078][T11177] gretap0: entered promiscuous mode [ 221.044418][T11177] batadv_slave_1: entered promiscuous mode [ 221.054228][T11177] gretap0: left promiscuous mode [ 221.064820][T11177] batadv_slave_1: left promiscuous mode [ 221.547381][T11226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.571119][T11223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.630740][ T1141] bond0: (slave bridge3): link status definitely down, disabling slave [ 221.641886][ T1141] bond0: now running without any active interface! [ 222.040008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.079029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.140107][T11275] veth0_to_team: entered promiscuous mode [ 222.153366][T11275] veth0_to_team: entered allmulticast mode [ 222.215284][T11280] netlink: 'syz.4.1531': attribute type 4 has an invalid length. [ 222.667417][T11316] delete_channel: no stack [ 223.218533][ T5916] IPVS: starting estimator thread 0... [ 223.233000][T11355] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.329557][T11359] IPVS: using max 29 ests per chain, 69600 per kthread [ 223.424308][T11371] netlink: 'syz.2.1560': attribute type 12 has an invalid length. [ 223.527222][T11378] __nla_validate_parse: 54 callbacks suppressed [ 223.527240][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 223.617591][T11378] vlan0: entered allmulticast mode [ 223.626642][T11378] bridge0: entered allmulticast mode [ 223.678739][T11378] bridge5: port 1(vlan0) entered blocking state [ 223.685546][T11378] bridge5: port 1(vlan0) entered disabled state [ 223.685611][T11388] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 223.694844][T11378] vlan0: entered promiscuous mode [ 223.727210][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1565'. [ 223.755811][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 223.790641][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 223.819769][T11388]  speed is unknown, defaulting to 1000 [ 223.931913][T11388] vxcan1 speed is unknown, defaulting to 1000 [ 225.043350][T11448] netlink: 'syz.4.1578': attribute type 10 has an invalid length. [ 225.085872][T11448] team0: Device ipvlan1 failed to register rx_handler [ 225.359297][T11469] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 225.368242][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 225.381956][T11469] tipc: Failed to remove unknown binding: 66,1,1/3542595049:1650998792/1650998794 [ 225.397688][T11469] tipc: Failed to remove unknown binding: 66,1,1/3542595049:1650998792/1650998794 [ 226.072064][T11516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1603'. [ 226.128074][T11516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1603'. [ 226.287432][T11524] C: renamed from lo [ 226.566740][T11546] netlink: 'syz.0.1617': attribute type 11 has an invalid length. [ 226.631724][T11549] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 226.746368][T11557] openvswitch: netlink: IPv4 tun info is not correct [ 226.749947][T11554] tipc: Enabled bearer , priority 0 [ 226.767943][T11557] netlink: 'syz.3.1620': attribute type 2 has an invalid length. [ 226.803069][T11557] netlink: 'syz.3.1620': attribute type 2 has an invalid length. [ 226.814738][T11560] netlink: 'syz.0.1619': attribute type 83 has an invalid length. [ 226.864690][T11554] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 226.913319][T11564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 226.925664][T11563] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1621'. [ 226.967250][T11550] tipc: Disabling bearer [ 227.008464][T11568] netlink: 'syz.3.1622': attribute type 8 has an invalid length. [ 227.178118][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 227.327821][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 228.129834][T11647] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 228.278060][T11662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.301337][T11662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.316422][T11662] hsr0: entered promiscuous mode [ 228.325030][T11662] hsr0: entered allmulticast mode [ 228.335391][T11662] hsr_slave_0: entered allmulticast mode [ 228.349374][T11662] hsr_slave_1: entered allmulticast mode [ 228.375946][T11669] gtp0: entered promiscuous mode [ 228.393174][T11669] gtp0: entered allmulticast mode [ 228.408570][T11670] tipc: MTU too low for tipc bearer [ 228.869830][T11696] __nla_validate_parse: 2 callbacks suppressed [ 228.869852][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 228.885864][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'. [ 228.909756][T11698] netlink: zone id is out of range [ 228.914973][T11698] netlink: zone id is out of range [ 228.920145][T11698] netlink: zone id is out of range [ 228.926358][T11698] netlink: zone id is out of range [ 228.934097][T11698] netlink: zone id is out of range [ 228.940171][T11698] netlink: zone id is out of range [ 228.951924][T11698] netlink: zone id is out of range [ 228.957190][T11698] netlink: zone id is out of range [ 228.963448][T11698] netlink: zone id is out of range [ 228.970233][T11698] netlink: zone id is out of range [ 229.195327][T11694] gretap1: left promiscuous mode [ 229.202194][T11694] gretap1: left allmulticast mode [ 229.214907][T11694] vlan2: left promiscuous mode [ 229.220175][T11694] bond1: left promiscuous mode [ 229.225066][T11694] vlan2: left allmulticast mode [ 229.231188][T11694] bond1: left allmulticast mode [ 229.237370][T11694] bond4: left promiscuous mode [ 229.252578][T11694] gtp0: left promiscuous mode [ 229.257264][T11694] gtp0: left allmulticast mode [ 229.268181][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.308509][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.345510][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.395348][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.606511][T11732] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1668'. [ 229.934674][T11757] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1674'. [ 229.987411][T11762] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1675'. [ 229.997220][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 230.044959][T11759] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1668'. [ 230.211629][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 230.226260][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1678'. [ 230.237828][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 230.537024][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.689894][T11793] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 231.391897][T11859] netlink: 'syz.4.1697': attribute type 29 has an invalid length. [ 231.419812][T11859] netlink: 'syz.4.1697': attribute type 29 has an invalid length. [ 231.512690][T11865] netlink: 'syz.3.1700': attribute type 83 has an invalid length. [ 231.554059][T11865] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 231.588091][T11865] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 231.927718][T11884] netlink: 'syz.0.1706': attribute type 7 has an invalid length. [ 232.997665][T11903] dvmrp8: entered allmulticast mode [ 233.054348][T11903] bridge_slave_1 (unregistering): left allmulticast mode [ 233.063657][T11903] bridge_slave_1 (unregistering): left promiscuous mode [ 233.077634][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.124441][ T1141] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 233.145176][ T1141] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 233.153285][ T5902] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 233.269755][ T5902] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 233.300314][ T5902] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 233.435131][T11929] tipc: Resetting bearer [ 233.447506][T11929] gretap0: entered promiscuous mode [ 233.455000][T11929] 0{X功: renamed from gretap0 [ 233.476385][T11929] tipc: Disabling bearer [ 233.496750][T11929] 0{X功: left promiscuous mode [ 233.506154][T11929] 0{X功: entered allmulticast mode [ 234.161818][T11972] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 234.210282][T11978] netlink: 'syz.1.1739': attribute type 1 has an invalid length. [ 234.273555][T11985] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 234.373487][T11992] __nla_validate_parse: 15 callbacks suppressed [ 234.373504][T11992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1741'. [ 234.405599][T11986] can: request_module (can-proto-0) failed. [ 234.441292][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1741'. [ 234.472985][T11986] netlink: 'syz.2.1741': attribute type 11 has an invalid length. [ 234.487648][T11986] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1741'. [ 234.561104][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 234.666911][T12009] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1749'. [ 234.684495][T12009] 0{X功: entered promiscuous mode [ 234.697218][T12009] 0{X功: left allmulticast mode [ 234.733387][T12012] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1749'. [ 234.764372][T12012] 1{X功: renamed from 30{X功 [ 234.778439][T12012] 1{X功: left promiscuous mode [ 234.792488][T12012] 1{X功: entered allmulticast mode [ 234.807601][T12012] net_ratelimit: 513 callbacks suppressed [ 234.807618][T12012] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 235.034081][T12031] rdma_op ffff8880564be9f0 conn xmit_rdma 0000000000000000 [ 235.167565][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1758'. [ 235.238659][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 235.582472][T12066] nftables ruleset with unbound set [ 235.604689][T12065] tipc: Enabled bearer , priority 0 [ 235.614497][T12065] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 235.622125][T12065] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 235.634561][T12065] tipc: Resetting bearer [ 235.644451][T12065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.668136][T12065] tipc: Resetting bearer [ 235.857369][T12082]  speed is unknown, defaulting to 1000 [ 235.863974][ T60] tipc: Resetting bearer [ 235.872273][T12082] vxcan1 speed is unknown, defaulting to 1000 [ 236.194341][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 236.216573][T12094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'. [ 236.249076][T12094] geneve3: entered promiscuous mode [ 236.260550][T12094] geneve3: entered allmulticast mode [ 236.356766][T12104] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 236.665217][T12117] tipc: Enabling of bearer rejected, failed to enable media [ 236.721596][ T10] tipc: Node number set to 3222803900 [ 236.825362][T12125] sch_fq: defrate 0 ignored. [ 236.835638][T12125] erspan0: entered promiscuous mode [ 236.844190][T12125] erspan0: entered allmulticast mode [ 237.005675][T12134] netlink: 'syz.3.1785': attribute type 30 has an invalid length. [ 237.014212][T12135] netlink: 'syz.3.1785': attribute type 30 has an invalid length. [ 237.098885][T12135] netlink: 'syz.3.1785': attribute type 30 has an invalid length. [ 237.156256][T12134] netlink: 'syz.3.1785': attribute type 30 has an invalid length. [ 237.238720][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.249651][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 237.318515][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.329211][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.402185][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.436829][T12153] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 237.750994][T12173] nbd: must specify at least one socket [ 238.266125][T12176] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 238.634858][T12230] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 238.644516][T12230] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 238.656697][T12230] netlink: 'syz.4.1814': attribute type 235 has an invalid length. [ 241.672101][T12257] __nla_validate_parse: 26 callbacks suppressed [ 241.672118][T12257] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1823'. [ 241.730614][T12257] netlink: 'syz.4.1823': attribute type 9 has an invalid length. [ 241.900126][T12268] nbd2: detected capacity change from 0 to 127 [ 241.917926][ T5159] block nbd2: Receive control failed (result -32) [ 241.929989][T12277] tipc: Enabling of bearer rejected, already enabled [ 242.363823][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'. [ 242.602745][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 243.196076][T12366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.352698][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 243.607306][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1862'. [ 243.642259][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1862'. [ 243.676932][T12389] netlink: 'syz.3.1862': attribute type 7 has an invalid length. [ 243.703640][T12391] netlink: 'syz.3.1862': attribute type 7 has an invalid length. [ 243.732419][T12389] netlink: 'syz.3.1862': attribute type 8 has an invalid length. [ 243.754563][T12391] netlink: 'syz.3.1862': attribute type 8 has an invalid length. [ 243.756774][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 243.763743][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 243.787702][T12397] netlink: 'syz.4.1865': attribute type 10 has an invalid length. [ 243.849349][T12397] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 243.867496][T12399] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 244.161282][T12426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1872'. [ 244.198105][T12426] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1872'. [ 244.360776][ T30] audit: type=1800 audit(1754167953.505:3): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1876" name="memory.events" dev="tmpfs" ino=2003 res=0 errno=0 [ 244.545812][T12439] hsr_slave_1 (unregistering): left promiscuous mode [ 244.585464][T12444] erspan0: left allmulticast mode [ 244.671005][T12463] netlink: 'syz.1.1881': attribute type 83 has an invalid length. [ 244.822230][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.846258][T12470] netlink: 'syz.0.1885': attribute type 9 has an invalid length. [ 245.489964][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 246.073280][T12556] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 246.376052][T12585] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 246.386794][T12585] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 246.561273][T12595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.618728][T12598] erspan0: entered promiscuous mode [ 246.626511][T12598] 0{X功: entered promiscuous mode [ 246.632850][T12598] debugfs: 'hsr0' already exists in 'hsr' [ 246.638712][T12598] Cannot create hsr debugfs directory [ 247.304008][T12625] netlink: 'syz.4.1929': attribute type 11 has an invalid length. [ 247.678473][T12659] dvmrp0: entered allmulticast mode [ 247.697819][T12660] __nla_validate_parse: 16 callbacks suppressed [ 247.697839][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 247.730940][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 247.743822][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 247.976202][T12680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 247.999239][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 248.047687][T12686] openvswitch: netlink: IP tunnel dst address not specified [ 248.162206][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1948'. [ 248.194740][T12696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 248.295811][T12696] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.757222][T12727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 248.805918][T12731] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1958'. [ 248.826070][T12723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.926393][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 249.116756][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 249.153894][T12753] v: left allmulticast mode [ 249.197392][T12753] bridge0: port 4(v) entered disabled state [ 249.266782][T12753] bridge_slave_0: left allmulticast mode [ 249.281192][T12753] bridge_slave_0: left promiscuous mode [ 249.295523][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.311910][T12753] bridge_slave_1: left allmulticast mode [ 249.317730][T12753] bridge_slave_1: left promiscuous mode [ 249.324008][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.345977][T12753] bond0: (slave bond_slave_0): Releasing backup interface [ 249.430437][T12753] bond0: (slave bond_slave_1): Releasing backup interface [ 249.455852][T12753] team0: Port device team_slave_0 removed [ 249.472608][T12753] team0: Port device team_slave_1 removed [ 249.482689][T12753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.492786][T12753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.513369][T12753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.525143][T12753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.546903][T12753] bond2: (slave bond3): Releasing backup interface [ 249.554222][T12753] bond2: (slave bond3): the permanent HWaddr of slave - 4e:49:cc:9e:e0:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 249.590167][T12753] bond2: (slave gretap1): making interface the new active one [ 249.627630][T12753] bond2: (slave gretap1): Releasing backup interface [ 249.653727][T12753] bond5: left promiscuous mode [ 249.659057][T12753] bridge0: port 3(bond5) entered disabled state [ 249.687397][ T24]  speed is unknown, defaulting to 1000 [ 249.898721][T12798] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 249.898937][T12782] bond0 (unregistering): Released all slaves [ 249.907199][T12798] validate_nla: 1 callbacks suppressed [ 249.907214][T12798] netlink: 'syz.1.1976': attribute type 14 has an invalid length. [ 249.945200][T12798] netlink: 'syz.1.1976': attribute type 14 has an invalid length. [ 249.967273][T12800] syzkaller1: entered promiscuous mode [ 249.978399][T12800] syzkaller1: entered allmulticast mode [ 250.143737][T12805] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 250.277080][T12811] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 250.391529][T12819] pim6reg1: entered promiscuous mode [ 250.397024][T12819] pim6reg1: entered allmulticast mode [ 250.691885][ T9] IPVS: starting estimator thread 0... [ 250.802336][T12845] IPVS: using max 30 ests per chain, 72000 per kthread [ 250.999978][T12867] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 251.330221][T12887] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 251.338315][T12887] netlink: 'syz.2.2005': attribute type 2 has an invalid length. [ 251.731193][T12922] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 251.746446][T12921] dvmrp0: entered allmulticast mode [ 251.770955][T12921] dvmrp0: left allmulticast mode [ 251.842218][T12931] netlink: 'syz.4.2018': attribute type 9 has an invalid length. [ 251.854478][T12933] netlink: 'syz.2.2017': attribute type 7 has an invalid length. [ 252.020353][T12940] syzkaller0: create flow: hash 3105116887 index 1 [ 252.221265][T12935] syzkaller0: delete flow: hash 3105116887 index 1 [ 252.470199][T12967] netlink: 'syz.2.2026': attribute type 16 has an invalid length. [ 252.593457][T12976] netlink: 'syz.4.2030': attribute type 23 has an invalid length. [ 253.560511][T12965]  speed is unknown, defaulting to 1000 [ 253.567758][T12965] vxcan1 speed is unknown, defaulting to 1000 [ 254.001428][T13001] __nla_validate_parse: 13 callbacks suppressed [ 254.001448][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 254.225237][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 254.247052][T13010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.334555][T13015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 254.357027][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2042'. [ 254.595027][T13036] tipc: Enabling of bearer rejected, already enabled [ 254.631851][T13036] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 255.046968][T13055] validate_nla: 1 callbacks suppressed [ 255.046985][T13055] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 255.076875][T13055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2053'. [ 255.088024][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 255.097138][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 255.103166][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2053'. [ 255.110742][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 255.124299][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 255.159192][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 255.196095][T13061] tipc: Enabling of bearer rejected, failed to enable media [ 255.215854][T13061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.579775][T13092] block nbd3: server does not support multiple connections per device. [ 255.595602][T13092] block nbd3: shutting down sockets [ 255.627363][T13098] netlink: 'syz.2.2068': attribute type 4 has an invalid length. [ 255.717491][T13102] syzkaller0: entered promiscuous mode [ 255.735267][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.739388][T13102] syzkaller0: entered allmulticast mode [ 255.742043][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.871764][ T30] audit: type=1107 audit(1754167965.025:4): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.褩韼' [ 255.914466][T13105] syzkaller0: create flow: hash 3105116887 index 1 [ 256.075106][T13103] syzkaller0: delete flow: hash 3105116887 index 1 [ 257.225707][T13120] tipc: Enabled bearer , priority 0 [ 257.233647][T13126] syzkaller0: entered promiscuous mode [ 257.254925][T13126] syzkaller0: entered allmulticast mode [ 257.296334][T13137] tipc: Resetting bearer [ 257.330844][T13117] tipc: Resetting bearer [ 257.360192][T13117] tipc: Disabling bearer [ 257.642499][T13157] netlink: 'syz.0.2082': attribute type 13 has an invalid length. [ 257.857477][T13175] nbd: must specify a device to reconfigure [ 258.031043][T13180] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.719044][T13231] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 259.067230][T13250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.350991][T13261] syzkaller0: entered promiscuous mode [ 259.356684][T13261] syzkaller0: entered allmulticast mode [ 260.798278][T13278] sit0: entered promiscuous mode [ 260.804678][T13278] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 260.813477][T13278] __nla_validate_parse: 8 callbacks suppressed [ 260.813494][T13278] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2111'. [ 260.921022][T13296] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2112'. [ 260.973628][T13299] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2114'. [ 261.398019][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2125'. [ 261.448382][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2127'. [ 261.466981][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 261.477060][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2127'. [ 261.537803][T13347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.591411][T13353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'. [ 261.702656][T13359] tipc: Enabled bearer , priority 0 [ 261.724888][T13359] syzkaller0: entered promiscuous mode [ 261.739562][T13359] syzkaller0: entered allmulticast mode [ 261.826369][T13365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2134'. [ 261.853786][T13368] tipc: Resetting bearer [ 261.863880][T13370] openvswitch: netlink: IP tunnel dst address not specified [ 261.865118][T13368] syzkaller0: left promiscuous mode [ 261.979244][T13358] tipc: Disabling bearer [ 262.286953][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2141'. [ 262.346242][T13403] tls_set_device_offload_rx: netdev not found [ 262.593889][T13421] netlink: 'syz.1.2152': attribute type 2 has an invalid length. [ 262.779814][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 262.782052][T13433] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 287.215731][T13449] bond0: (slave bridge_slave_1): Releasing backup interface [ 287.248824][T13449] tipc: Resetting bearer [ 287.407369][T13457] sctp: [Deprecated]: syz.2.2161 (pid 13457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.407369][T13457] Use struct sctp_sack_info instead [ 287.536753][T13477] __nla_validate_parse: 4 callbacks suppressed [ 287.536772][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2167'. [ 287.561124][T13470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.595020][T13470] bond0: (slave bond6): Enslaving as an active interface with an up link [ 287.732571][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 287.836607][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2173'. [ 288.087557][T13520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2178'. [ 288.097171][T13503] syzkaller0: refused to change device tx_queue_len [ 288.162398][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 288.253783][T13537] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 288.557095][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 288.560589][T13557] netlink: 'syz.4.2187': attribute type 29 has an invalid length. [ 288.582753][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 288.626590][T13557] netlink: 'syz.4.2187': attribute type 29 has an invalid length. [ 288.644888][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 288.889292][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2196'. [ 288.937105][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 289.105634][T13586] netlink: 'syz.4.2200': attribute type 11 has an invalid length. [ 289.473274][T13609] !: renamed from bond_slave_0 [ 289.837936][T13629] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 289.863151][T13629] team0: Device macvtap1 is already an upper device of the team interface [ 289.918258][T13632] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 290.173798][T13650] netlink: 'syz.2.2223': attribute type 11 has an invalid length. [ 290.439306][T13663] syzkaller1: entered promiscuous mode [ 290.460259][T13663] syzkaller1: entered allmulticast mode [ 291.653913][T13737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.836119][T13750] Bluetooth: MGMT ver 1.23 [ 292.012087][T13766] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 292.179224][T13775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.185074][T13773] netlink: 'syz.3.2256': attribute type 15 has an invalid length. [ 292.415127][T13789] veth0_to_team: entered promiscuous mode [ 292.426316][T13789] veth0_to_team: entered allmulticast mode [ 292.574724][T13796] __nla_validate_parse: 27 callbacks suppressed [ 292.574742][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 292.592250][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 292.702832][T13801] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 292.721714][T13801] netlink: 'syz.1.2267': attribute type 2 has an invalid length. [ 292.730384][T13801] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2267'. [ 292.831020][T13807] sctp: [Deprecated]: syz.3.2271 (pid 13807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.831020][T13807] Use struct sctp_sack_info instead [ 292.934410][T13812] syzkaller1: entered promiscuous mode [ 292.952589][T13812] syzkaller1: entered allmulticast mode [ 292.967690][T13818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.991965][T13816] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 293.031964][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'. [ 293.112651][T13822] netlink: 'syz.3.2274': attribute type 1 has an invalid length. [ 293.129732][T13822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2274'. [ 293.138810][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 293.154896][T13825] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2276'. [ 293.486292][T13844] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 293.520855][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 293.693411][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 293.758381][T13853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 293.791309][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 293.836393][T13853] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 293.856547][T13853] gretap2: entered promiscuous mode [ 293.873553][T13853] gretap2: entered allmulticast mode [ 293.890801][ T5159] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 293.900196][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 294.106741][T13873] netlink: 'syz.1.2287': attribute type 10 has an invalid length. [ 294.342684][T13887] netlink: 'syz.0.2292': attribute type 10 has an invalid length. [ 294.368174][T13890] netlink: 'syz.0.2292': attribute type 10 has an invalid length. [ 294.383805][T13889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.454083][T13895] netlink: 'syz.0.2295': attribute type 23 has an invalid length. [ 294.772773][T13916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.788809][T13916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.245179][T13943] delete_channel: no stack [ 295.747654][T13989] netlink: 'syz.2.2318': attribute type 14 has an invalid length. [ 296.027737][T14007] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 296.046835][T14012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.215685][T14027] netlink: 'syz.2.2330': attribute type 26 has an invalid length. [ 296.518035][T14047]  speed is unknown, defaulting to 1000 [ 296.547770][T14047] vxcan1 speed is unknown, defaulting to 1000 [ 296.595544][T14057] netlink: 'syz.2.2339': attribute type 39 has an invalid length. [ 296.617849][T14053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 296.661699][T14053] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.671841][T14053] gretap3: entered promiscuous mode [ 296.679760][T14053] gretap3: entered allmulticast mode [ 297.045334][T14077] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 297.432867][T14051] 1{X功: left allmulticast mode [ 297.496365][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.507052][T14051] batman_adv: batadv0: Interface activated: team0 [ 297.525336][T14051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.557501][T14051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.576805][T14051] hsr0: left promiscuous mode [ 297.584516][T14051] hsr0: left allmulticast mode [ 297.589389][T14051] hsr_slave_0: left allmulticast mode [ 297.598764][T14051] hsr_slave_1: left allmulticast mode [ 297.615014][T14051] veth1_macvtap: left promiscuous mode [ 297.624701][T14051] veth0_macvtap: left promiscuous mode [ 297.634511][T14051] veth0_macvtap: entered promiscuous mode [ 297.644050][T14051] veth1_macvtap: entered promiscuous mode [ 297.662597][T14051] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 297.676507][T14114] __nla_validate_parse: 20 callbacks suppressed [ 297.676519][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2355'. [ 297.678608][T14051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.682837][T14114] netlink: 'syz.1.2355': attribute type 5 has an invalid length. [ 297.682857][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2355'. [ 297.717922][T14051] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 297.743798][T14051] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 297.788743][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.795962][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.829067][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 297.875358][T14117] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2357'. [ 297.903290][T14117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2357'. [ 297.913081][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.923446][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.934536][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.943973][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.964481][T14114] geneve2: entered promiscuous mode [ 297.969716][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 297.979753][T14114] geneve2: entered allmulticast mode [ 298.013957][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.041019][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.174255][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.184709][T14133] netlink: 'syz.4.2361': attribute type 16 has an invalid length. [ 298.195673][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.227365][T14133] netlink: 'syz.4.2361': attribute type 3 has an invalid length. [ 298.240752][T14133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2361'. [ 298.252439][T14137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 298.276711][ T10] [ 298.279060][ T10] ====================================================== [ 298.286079][ T10] WARNING: possible circular locking dependency detected [ 298.293122][ T10] 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 Not tainted [ 298.299891][ T10] ------------------------------------------------------ [ 298.306911][ T10] kworker/0:1/10 is trying to acquire lock: [ 298.312796][ T10] ffff88805cffaf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 298.321857][ T10] [ 298.321857][ T10] but task is already holding lock: [ 298.329209][ T10] ffff88807a745558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 298.339052][ T10] [ 298.339052][ T10] which lock already depends on the new lock. [ 298.339052][ T10] [ 298.349450][ T10] [ 298.349450][ T10] the existing dependency chain (in reverse order) is: [ 298.358454][ T10] [ 298.358454][ T10] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 298.366706][ T10] lock_acquire+0x120/0x360 [ 298.371727][ T10] _raw_spin_lock+0x2e/0x40 [ 298.376750][ T10] sch_direct_xmit+0x153/0x4b0 [ 298.382032][ T10] __dev_queue_xmit+0x1857/0x3b50 [ 298.387568][ T10] hsr_forward_skb+0x158b/0x2860 [ 298.393022][ T10] hsr_dev_xmit+0x1a5/0x220 [ 298.398036][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 298.403662][ T10] __dev_queue_xmit+0x1b8d/0x3b50 [ 298.409200][ T10] ip6_finish_output2+0x11fe/0x16a0 [ 298.414926][ T10] ndisc_send_skb+0xb54/0x1440 [ 298.420209][ T10] ndisc_send_ns+0xcb/0x150 [ 298.425223][ T10] addrconf_dad_work+0xaae/0x14b0 [ 298.430767][ T10] process_scheduled_works+0xae1/0x17b0 [ 298.436834][ T10] worker_thread+0x8a0/0xda0 [ 298.441946][ T10] kthread+0x70e/0x8a0 [ 298.446562][ T10] ret_from_fork+0x3fc/0x770 [ 298.451693][ T10] ret_from_fork_asm+0x1a/0x30 [ 298.456977][ T10] [ 298.456977][ T10] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 298.464711][ T10] validate_chain+0xb9b/0x2140 [ 298.469991][ T10] __lock_acquire+0xab9/0xd20 [ 298.475189][ T10] lock_acquire+0x120/0x360 [ 298.480210][ T10] _raw_spin_lock_bh+0x36/0x50 [ 298.485498][ T10] hsr_dev_xmit+0x19a/0x220 [ 298.490523][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 298.496160][ T10] __dev_queue_xmit+0x1b8d/0x3b50 [ 298.501725][ T10] NF_HOOK+0x30d/0x3a0 [ 298.506320][ T10] arp_xmit+0x16c/0x270 [ 298.510996][ T10] arp_solicit+0xc1d/0xe60 [ 298.515933][ T10] __neigh_event_send+0xf6d/0x1560 [ 298.521565][ T10] neigh_resolve_output+0x198/0x750 [ 298.527288][ T10] ip_finish_output2+0xd40/0x1160 [ 298.532830][ T10] ip_output+0x2a1/0x3c0 [ 298.537606][ T10] iptunnel_xmit+0x592/0xa40 [ 298.542721][ T10] ip_tunnel_xmit+0x1c41/0x2390 [ 298.548109][ T10] gre_tap_xmit+0x590/0x7a0 [ 298.553128][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 298.558759][ T10] sch_direct_xmit+0x241/0x4b0 [ 298.564045][ T10] __dev_queue_xmit+0x1857/0x3b50 [ 298.569587][ T10] ip6_finish_output2+0x11fe/0x16a0 [ 298.575306][ T10] NF_HOOK+0x9e/0x380 [ 298.579804][ T10] mld_sendpack+0x800/0xd80 [ 298.584821][ T10] mld_ifc_work+0x83e/0xd60 [ 298.589841][ T10] process_scheduled_works+0xae1/0x17b0 [ 298.595913][ T10] worker_thread+0x8a0/0xda0 [ 298.601027][ T10] kthread+0x70e/0x8a0 [ 298.605619][ T10] ret_from_fork+0x3fc/0x770 [ 298.610732][ T10] ret_from_fork_asm+0x1a/0x30 [ 298.616011][ T10] [ 298.616011][ T10] other info that might help us debug this: [ 298.616011][ T10] [ 298.626228][ T10] Possible unsafe locking scenario: [ 298.626228][ T10] [ 298.633668][ T10] CPU0 CPU1 [ 298.639024][ T10] ---- ---- [ 298.644378][ T10] lock(&qdisc_xmit_lock_key#4); [ 298.649405][ T10] lock(&hsr->seqnr_lock); [ 298.656426][ T10] lock(&qdisc_xmit_lock_key#4); [ 298.663967][ T10] lock(&hsr->seqnr_lock); [ 298.668463][ T10] [ 298.668463][ T10] *** DEADLOCK *** [ 298.668463][ T10] [ 298.676594][ T10] 12 locks held by kworker/0:1/10: [ 298.681693][ T10] #0: ffff888030057548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 298.692400][ T10] #1: ffffc900000f7bc0 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 298.705529][ T10] #2: ffff88806d950538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 298.714753][ T10] #3: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 298.723996][ T10] #4: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 298.733840][ T10] #5: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 298.743780][ T10] #6: ffff88807b863258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+.-.}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 298.756397][ T10] #7: ffff88807a745558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 298.766674][ T10] #8: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 298.775557][ T10] #9: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 298.785299][ T10] #10: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 298.794170][ T10] #11: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 298.804177][ T10] [ 298.804177][ T10] stack backtrace: [ 298.810074][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 298.810095][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.810106][ T10] Workqueue: mld mld_ifc_work [ 298.810130][ T10] Call Trace: [ 298.810136][ T10] [ 298.810143][ T10] dump_stack_lvl+0x189/0x250 [ 298.810162][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.810178][ T10] ? __pfx__printk+0x10/0x10 [ 298.810199][ T10] ? print_lock_name+0xde/0x100 [ 298.810219][ T10] print_circular_bug+0x2ee/0x310 [ 298.810237][ T10] check_noncircular+0x134/0x160 [ 298.810255][ T10] validate_chain+0xb9b/0x2140 [ 298.810270][ T10] ? unwind_next_frame+0xa5/0x2390 [ 298.810288][ T10] ? unwind_next_frame+0xa5/0x2390 [ 298.810309][ T10] __lock_acquire+0xab9/0xd20 [ 298.810333][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 298.810351][ T10] lock_acquire+0x120/0x360 [ 298.810371][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 298.810393][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 298.810410][ T10] _raw_spin_lock_bh+0x36/0x50 [ 298.810430][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 298.810447][ T10] hsr_dev_xmit+0x19a/0x220 [ 298.810466][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 298.810490][ T10] __dev_queue_xmit+0x1b8d/0x3b50 [ 298.810507][ T10] ? arp_send_dst+0xa7/0x2d0 [ 298.810525][ T10] ? arp_solicit+0xc1d/0xe60 [ 298.810542][ T10] ? __neigh_event_send+0xf6d/0x1560 [ 298.810568][ T10] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.810585][ T10] ? ret_from_fork+0x3fc/0x770 [ 298.810609][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 298.810631][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 298.810655][ T10] ? __lock_acquire+0xab9/0xd20 [ 298.810684][ T10] ? NF_HOOK+0x9e/0x3a0 [ 298.810703][ T10] NF_HOOK+0x30d/0x3a0 [ 298.810722][ T10] ? __pfx_arp_xmit_finish+0x10/0x10 [ 298.810740][ T10] ? NF_HOOK+0x9e/0x3a0 [ 298.810757][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 298.810775][ T10] ? arp_xmit+0x23/0x270 [ 298.810798][ T10] arp_xmit+0x16c/0x270 [ 298.810815][ T10] ? arp_xmit+0x23/0x270 [ 298.810833][ T10] arp_solicit+0xc1d/0xe60 [ 298.810854][ T10] ? arp_solicit+0x11a/0xe60 [ 298.810874][ T10] ? __pfx_arp_solicit+0x10/0x10 [ 298.810896][ T10] ? __neigh_event_send+0xf08/0x1560 [ 298.810920][ T10] ? __pfx_arp_solicit+0x10/0x10 [ 298.810938][ T10] __neigh_event_send+0xf6d/0x1560 [ 298.810966][ T10] neigh_resolve_output+0x198/0x750 [ 298.810990][ T10] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 298.811009][ T10] ? __lock_acquire+0xab9/0xd20 [ 298.811032][ T10] ip_finish_output2+0xd40/0x1160 [ 298.811059][ T10] ? ip_finish_output2+0x452/0x1160 [ 298.811079][ T10] ? __pfx_ip_finish_output2+0x10/0x10 [ 298.811098][ T10] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 298.811115][ T10] ? ip_skb_dst_mtu+0x866/0xab0 [ 298.811133][ T10] ? ip_finish_output+0x33a/0x3f0 [ 298.811151][ T10] ip_output+0x2a1/0x3c0 [ 298.811167][ T10] ? ip_output+0x60/0x3c0 [ 298.811183][ T10] iptunnel_xmit+0x592/0xa40 [ 298.811212][ T10] ip_tunnel_xmit+0x1c41/0x2390 [ 298.811240][ T10] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 298.811258][ T10] ? gre_build_header+0x3fd/0xa40 [ 298.811278][ T10] ? __pfx_gre_build_header+0x10/0x10 [ 298.811294][ T10] ? iptunnel_handle_offloads+0x2fd/0x630 [ 298.811321][ T10] gre_tap_xmit+0x590/0x7a0 [ 298.811339][ T10] ? __pfx_gre_tap_xmit+0x10/0x10 [ 298.811354][ T10] ? __lock_acquire+0xab9/0xd20 [ 298.811379][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 298.811402][ T10] sch_direct_xmit+0x241/0x4b0 [ 298.811425][ T10] ? __pfx_sch_direct_xmit+0x10/0x10 [ 298.811450][ T10] __dev_queue_xmit+0x1857/0x3b50 [ 298.811468][ T10] ? register_lock_class+0x51/0x320 [ 298.811492][ T10] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.811516][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 298.811534][ T10] ? read_seqbegin+0x122/0x250 [ 298.811555][ T10] ? neigh_resolve_output+0x438/0x750 [ 298.811577][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.811600][ T10] ? read_seqbegin+0x1ac/0x250 [ 298.811621][ T10] ? __pfx_read_seqbegin+0x10/0x10 [ 298.811641][ T10] ? __local_bh_enable_ip+0x12d/0x1c0 [ 298.811665][ T10] ? eth_header+0x11b/0x200 [ 298.811679][ T10] ? __asan_memcpy+0x40/0x70 [ 298.811710][ T10] ip6_finish_output2+0x11fe/0x16a0 [ 298.811746][ T10] ? ip6_finish_output2+0x701/0x16a0 [ 298.811767][ T10] ? ip6_mtu+0x7d/0x3f0 [ 298.811784][ T10] ? __pfx_ip6_finish_output2+0x10/0x10 [ 298.811804][ T10] ? ip6_mtu+0x7d/0x3f0 [ 298.811819][ T10] ? ip6_mtu+0x321/0x3f0 [ 298.811836][ T10] ? ip6_finish_output+0x2ef/0x4e0 [ 298.811855][ T10] NF_HOOK+0x9e/0x380 [ 298.811874][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 298.811892][ T10] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 298.811909][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 298.811926][ T10] ? icmp6_dst_alloc+0x3a5/0x420 [ 298.811944][ T10] ? icmp6_dst_alloc+0x3a5/0x420 [ 298.811963][ T10] mld_sendpack+0x800/0xd80 [ 298.811988][ T10] ? mld_sendpack+0x1de/0xd80 [ 298.812007][ T10] ? __pfx_mld_sendpack+0x10/0x10 [ 298.812033][ T10] mld_ifc_work+0x83e/0xd60 [ 298.812051][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.812074][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 298.812097][ T10] process_scheduled_works+0xae1/0x17b0 [ 298.812130][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.812159][ T10] worker_thread+0x8a0/0xda0 [ 298.812183][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.812205][ T10] ? __kthread_parkme+0x7b/0x200 [ 298.812222][ T10] kthread+0x70e/0x8a0 [ 298.812239][ T10] ? __pfx_worker_thread+0x10/0x10 [ 298.812262][ T10] ? __pfx_kthread+0x10/0x10 [ 298.812278][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.812296][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.812318][ T10] ? __pfx_kthread+0x10/0x10 [ 298.812334][ T10] ret_from_fork+0x3fc/0x770 [ 298.812357][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 298.812382][ T10] ? __switch_to_asm+0x39/0x70 [ 298.812398][ T10] ? __switch_to_asm+0x33/0x70 [ 298.812414][ T10] ? __pfx_kthread+0x10/0x10 [ 298.812430][ T10] ret_from_fork_asm+0x1a/0x30 [ 298.812453][ T10] [ 299.438723][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 299.464472][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 299.494541][ T7514] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 299.505349][ T7514] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0