last executing test programs: 5.484050904s ago: executing program 3 (id=1843): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x7) 5.385142165s ago: executing program 3 (id=1845): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c005}, 0x8041) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'bond_slave_1\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x80) 5.218154091s ago: executing program 3 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="80000000000000002400128009000100697069700000000014000280080001000000400005000900890000001400030074756e6c30"], 0x58}}, 0x1020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 5.203219018s ago: executing program 3 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x3b0, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x384, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x8}, {0x4, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x4, 0x8}, {0x5}, {0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0x4}, {0x4, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x16, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x2, 0xa964, 0x0, 0x1, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x65, 0x0, 0x6, 0x30, 0x12, 0x6, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x12, 0x0, 0x24, 0xb, 0x2, 0xc, 0x6, 0x6c, 0x48, 0x16, 0x5, 0x24]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x4}, {0x1, 0xa}, {0x5, 0x8}, {0x6, 0x2}, {0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x3}, {0x5, 0x8}, {0x7}, {0x4, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xf, 0xebb5, 0x9, 0xa40, 0x5, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8000, 0x3, 0x1ff, 0x6, 0x2, 0x8, 0x8]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x1, 0x7d71, 0x9, 0x4, 0x6]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0xa}, {0x4, 0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x3}, {0x6}, {0x5, 0x3}, {0x1}, {0x3, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x7, 0xa}, {0x3, 0x8}, {0x1, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x7, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x2, 0x16}, {0x7, 0x8}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0xa}, {}, {0x7, 0x7}, {0x0, 0x2}, {0x3, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x2, 0x1}, {0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x12, 0x0, 0x60, 0x30, 0x3, 0x37, 0xb, 0x1b, 0xc, 0x16, 0x4, 0x2, 0x0, 0x24, 0x4, 0xcac2daec8e41fbcb, 0x36, 0x6, 0x5, 0x9]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x2b, 0xd9, 0xe080, 0xb13, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x1}, {0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x6, 0x4}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0x18, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8001, 0x401, 0x9, 0x8001, 0x28, 0xcfbc, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x5, 0x578a, 0x1000, 0x3, 0xa8e, 0x3]}}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x18, 0x1, 0x1b, 0x6c, 0x1b, 0x12, 0xc, 0xc, 0x19, 0x6c, 0x24, 0x48, 0x48, 0x36, 0x36, 0x36, 0x4, 0x36, 0x18, 0x24, 0x0, 0x0, 0x6, 0x24, 0xc, 0x5, 0xb, 0x2, 0x12, 0x39, 0x1b, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb4, 0x0, 0x401, 0x800, 0x2, 0x6, 0x6, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b, 0xfffa, 0x3, 0xa4ee, 0x8001, 0x7, 0x5, 0x7c59]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x7, 0xdfe, 0x2, 0x8, 0x1, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x7, 0xfff8, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x4, 0x60, 0x16, 0x5, 0x6, 0xc, 0x9, 0xc, 0x2, 0x3, 0x3, 0x65, 0x24, 0x60, 0x16, 0x6, 0x1, 0x36, 0x60, 0x6, 0x9, 0x6c, 0x60]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x5, 0x8}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x8}, {0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x5}, {0x2, 0xa}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x5}, {0x1}, {0x5, 0xa}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x1}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x2}, {0x4, 0x5}, {0x5, 0x5}, {0x2}, {0x5, 0x5}, {0x6, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x1}, {0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x691, 0x6, 0x5, 0x9396, 0x4, 0x5, 0xaa98, 0x7]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x20000000, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0x9}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r10, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r9}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f0000000140), 0x0}, 0x20) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r12, &(0x7f0000000040)=ANY=[@ANYBLOB="030308000c0018000c0045"], 0x30) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x884c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x3, 0x8001, 0xfffffff7}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000001080)={0x1f}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x0, 0x0, 0x20, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x2d}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc, 0x2000000}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6117, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000340), 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f00000000c0)="0000f87100000051229dc9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.037890762s ago: executing program 3 (id=1853): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f000200008008001d0061"], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7585, @local, 0x13ff, 0xfffffffe}, 0x20) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f00000005c0)=0x4) (async) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x94, &(0x7f0000001300)=""/148, 0x0, 0xa}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xd, 0x8, 0xa, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x10, 0x43a, 0x2}}) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x6}, {0x9, 0xfff1}, {0x2, 0xe}}, [{0x8, 0xb, 0xb846}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) 3.368200562s ago: executing program 3 (id=1863): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (rerun: 64) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x26, @remote, 0x800}, 0x1c) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', 0x0}) (async, rerun: 32) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000600)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) 2.376537226s ago: executing program 4 (id=1878): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) unshare(0x28000600) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x3, 0xac, {{0x9, 0x4, 0x1, 0x3a, 0x24, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x3, "de"}, @cipso={0x86, 0xd, 0x2, [{0x2, 0x7, "a74c218be9"}]}]}}}}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000012140157"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000001740)=0x1000004, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000003000000000018110000", @ANYRES32=r5, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendto$inet6(r2, &(0x7f0000000040)="4009e2a392502aa1c7616391557b937d998ecbda789a641aaad096392830d507d55e031f070000005d5800000000000000000057948f", 0x36, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, '\x00', 0x40}, 0xffffffff}, 0x1c) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x40, 0x12) 2.195880487s ago: executing program 4 (id=1881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000b14000125bd7000fedbdf2508003f0004000000080003000000000008003f000500000008003f00050000000800030002"], 0x40}}, 0x405c040) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmmsg$alg(r3, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c", 0x1}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x4) 2.024153312s ago: executing program 4 (id=1885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x200}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) listen(r0, 0x1) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000000)=0x1, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004091) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'netpci0\x00', 0xd802}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r10, 0x6, 0x8, &(0x7f00000004c0)='x\x00\x00\x00', 0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) 1.730474192s ago: executing program 4 (id=1887): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) 1.583774501s ago: executing program 2 (id=1888): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x3f, 0x9, 0x101, 0xff, 0x401, 0x2, 0x6}}]}}]}, 0x44}}, 0x24000040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x86eba000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.565161888s ago: executing program 1 (id=1889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100d000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.458709478s ago: executing program 1 (id=1890): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000ff8000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 1.299430161s ago: executing program 2 (id=1891): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@mcast1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty}, {{@in6=@local, 0x0, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{@in6=@loopback, 0x2, 0x3c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x1}]}]}, 0x1fc}}, 0x300) 1.298539458s ago: executing program 1 (id=1892): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000200)) syz_emit_ethernet(0x91, &(0x7f0000000100)=ANY=[], 0x0) 1.200343378s ago: executing program 2 (id=1894): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2c}}}, @dstopts_2292={{0x18, 0x29, 0x3b, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x24, 0x10, 0x401, 0x20000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8013}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4001) 1.092099103s ago: executing program 4 (id=1895): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x4040880) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg(r0, &(0x7f0000007f80)=[{{&(0x7f0000006200)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000006340)=[{&(0x7f0000006280)="09bec6ee42", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000f0104000700000010000000000000008400000001000000d1468ca607f7e8c519013eb3f43c191c1c848af81f070b19c20a2e93da30d1b2b01d7a647a5db6e05fdc26f2ed1aff988dbec1616f8e9f7b6b3003cc77ac2076c6626f77098008aa3bc71d34710244b1debc2c6a7e495bea6101203e29bb4437fe82b220d5c389e9ca3636006b5ab7e8dcedf21119f56e8b9b6cdb43821e597c7946c8ac5c9473bf284866097c0d63cb2f77ee1a930c06930061a07397c90710fe298850abfce63ab149"], 0x20}}], 0x2, 0x480c1) 1.069875902s ago: executing program 2 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000780)={{{@in6, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000180)}, 0x20) unshare(0xc040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r10, 0x0, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4060800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x1e0, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1cc, 0x1, [@m_police={0x1c8, 0x3fff, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x165, 0x6, "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"}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000080)={0x200000000000035e, &(0x7f0000000280)}) 1.023668333s ago: executing program 1 (id=1897): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000004100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 972.465022ms ago: executing program 0 (id=1898): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1014, 0x21, 0x2, 0x70bd2a, 0x25dfdbfe, {0x11}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x80d0}, 0x810) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 884.673617ms ago: executing program 1 (id=1899): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x6, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}}, 0x4020000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xe, 0x10, 0x6, 0x6, 0x9, 0x5d3b51a8, 0xd0dc, 0x6, 0x5, 0x3, 0x0, 0x4, 0xf, 0x80000000, 0x8000, 0x49, 0x9, 0x3ff, 0x400, 0x4, 0x200, 0x6, 0x9}}) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'rose0\x00', {0x2}, 0x94}) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r6, &(0x7f0000000140)={0x11, 0x5, r7, 0x1, 0x8}, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000000)={0x11, 0x6, r7, 0x1, 0x4}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='3\x00\x00\x00\b \x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="2afd9e8c6217bc5a949b5a4c7cfc377ade667d87a889e5b63869e40a8bf673de243d8d5f6dc0d60594b131beb61bd61d9fefe67cad3dfbc4011a0de4c901104e444ab1f9c0a5687b5623011cefbb98367062273c44ae233a7ed35c29acc96b9e57cb4c754e41a4b508507a4af5b9d5f9e3b0ea36e7e38d63a6dce1a7c685c9a08d339e3567e84bb13987570dab9db240fe3a7b273007b790770f0b901c7a9a732ffbb6e53fe2c6", @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x10000}}}}}}}}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/116, &(0x7f0000000180)=0x74) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xd, 0x28011, r0, 0x4000) 879.594638ms ago: executing program 0 (id=1900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x7, &(0x7f0000000700)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f, 0xfffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0xb7}, @cb_func={0x18, 0x3}], {0x95, 0x0, 0x1200}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xd6, &(0x7f0000000840)=""/214, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8000}}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async, rerun: 64) r3 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4008801}, 0x88010) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a000000000000611164a3af9600190000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getnexthop={0x28, 0x6a, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080), 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030425bd700000000000000000006303130966d3acef8762280284f277067f813953b03e30b07b4820fa990b74bb28335840b3b97188a6fc0598b539b40419ed6074a66f9274165b4e95a186b01839854d4ec0e4068ad9c386b51c0ff03d4b7592b770b509f67d0e1b950a3e7d3f88fb22ac7081a410392a9567173eaef4cf71043787209d1a14b3cece4d4d71a0ec0b683843ebca08bae6a5752224861c29ab17d42feb2c497a996ae181b58d992f09e9103cb5f2991d46f0db81cfd4e6965b282c633ddc2bb20a94463bc2571328c7c77a6b9324d26395ee96aff73f888673a37af332d6d29907a8", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES8=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x810) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000400)=0x1e) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @broadcast}, 0x10) 698.048483ms ago: executing program 0 (id=1901): r0 = socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'lblcr\x00', 0x2c, 0x80005, 0x71}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)="d800000019008111e00228ba0d81050402000000ff0f040b067c55a1bc000900080006990300000015000500", 0x2c}], 0x1}, 0x22004884) sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f700"], 0x1ec}}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x1000) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 648.354337ms ago: executing program 4 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000281600001800a0001006c696d6974000020500002800c000140000000000000020808000440000000010c00014000000000000080010c00024095845bea9c2f4b9ac8830ae46a6f00000000000000090acfcd00c032efd040c30800034000000fba0c00024000000000000000000c000140000000000000000714000000110001efa5b9cfe7ac6ac8c2a52e5f"], 0xdc}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x54, r2, 0x1, 0xfffffffe, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x54}}, 0x20000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r0) 629.143242ms ago: executing program 2 (id=1903): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) (fail_nth: 3) 515.843703ms ago: executing program 0 (id=1904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@mcast1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty}, {{@in6=@local, 0x0, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{@in6=@loopback, 0x2, 0x3c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x1}]}]}, 0x1fc}}, 0x500) 206.483188ms ago: executing program 0 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4008891}, 0x24000001) (async) r1 = epoll_create1(0x0) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x9005}, 0x6080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (async, rerun: 64) r3 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x11}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x2, 0x4, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0xed03]}}]}}]}, 0x8c}}, 0x2000c000) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x437, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) (async) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x94, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x18, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r9 = socket(0x21, 0x2, 0x2) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2006}) r10 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000017c0)=@deltclass={0x844, 0x29, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x2, 0x2}, {0x2, 0x9}}, [@c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x401, 0xc, 0x3, 0x9953, 0x9, 0x8, 0x8998, 0x5, 0x9, 0x1, 0x7, 0xc91e, 0xc77, 0x3, 0x8001, 0xe, 0x1992, 0xdf6, 0x2, 0x1ffe0, 0x2, 0x6, 0xffffffff, 0x6, 0x0, 0x3, 0xf3800000, 0x2, 0xfffffc00, 0x6, 0x1, 0xe045, 0x5, 0x7, 0x6, 0x10, 0x6f4f, 0xcb2, 0x9, 0x101, 0x6, 0x6, 0x1, 0xfffffff9, 0x0, 0x7, 0x1, 0x7, 0x5, 0x2, 0x7, 0x0, 0x160fe4b4, 0xfffffff7, 0x2, 0x4, 0x7, 0x0, 0x4, 0x0, 0x0, 0x8, 0xe8da, 0x5, 0x6, 0x4, 0x3, 0x8, 0x9, 0x7fff, 0x3, 0x9, 0x80000000, 0x2ae0, 0x1, 0x80, 0x2, 0xb3b, 0x65, 0x800, 0x4, 0x80000001, 0x8, 0x8b9, 0x8, 0xf6e, 0x17, 0x7ff, 0x401, 0x9, 0x7c, 0xffffffff, 0xfffffff7, 0x7, 0x2, 0x5, 0x100, 0xbe77, 0x80000000, 0x7, 0x0, 0x3, 0x80000000, 0x5, 0x38bd, 0x1, 0x7, 0x5, 0x8, 0x9, 0x2, 0x400, 0x8, 0x3, 0x2, 0x0, 0x4, 0x9, 0xee, 0x8, 0x9, 0x7, 0x3, 0x5, 0x148, 0xa, 0xe, 0x7, 0x4, 0x3, 0x7, 0x7, 0x5, 0x5c, 0x5, 0x0, 0x0, 0x1, 0x1, 0x9, 0xc, 0x8, 0x1, 0x7fff, 0xf0, 0x8, 0x7, 0x3, 0x401, 0x9, 0x5, 0x47, 0x8ac, 0x5, 0x2, 0x4, 0x4, 0x6, 0x5, 0x1000, 0xffffffff, 0x1, 0x3ff, 0x4, 0x80000001, 0x6, 0x7f, 0xb, 0x8, 0x8000, 0xff, 0x6, 0xb9b, 0x81, 0xffffffff, 0x5, 0x3, 0x80000001, 0x4, 0xed97, 0x95, 0x2, 0x43b, 0x1, 0x1ff, 0x100, 0x5, 0x4, 0xd7, 0x80000001, 0x5, 0x5, 0x9, 0xff, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffffe, 0x34, 0x9, 0x8001, 0x5, 0x7, 0x7f, 0x800, 0x2, 0x7fffffff, 0x2, 0x7, 0xa4, 0x4, 0x101, 0x27, 0x3, 0x6, 0xffffff57, 0xfffffffd, 0x4, 0x2df3, 0x8, 0x72cb, 0x9, 0x1ff, 0x9, 0xfffff24e, 0x756, 0x2, 0x2, 0x2, 0x8, 0x1ff, 0xfffffffd, 0xff, 0x7, 0x9, 0x9, 0x81, 0x1, 0x4, 0x1, 0x6, 0x8001, 0x200, 0xf, 0x5, 0x40, 0x400, 0x9, 0x1, 0x8, 0xfffffe01, 0x7, 0x1]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10, 0x0, 0x8000, 0x4, 0x5a0d31dd, 0x8001, 0x8, 0x2, 0x7, 0x6, 0x8, 0xfffffffb, 0x5, 0x9, 0x53c0, 0xe, 0x0, 0x8, 0x0, 0xc0000, 0x9, 0x9, 0x2, 0x10000, 0x4, 0x800, 0x3, 0x0, 0x8, 0x9, 0x2, 0x2, 0x7ff, 0x6ff, 0x2, 0x9f2b, 0x1, 0x8, 0x8, 0x8e3, 0x1fd800, 0xb63, 0x4, 0x0, 0x4cb, 0x9, 0x8, 0x7ff, 0x1, 0x9, 0x8, 0x400, 0x4, 0x100, 0x8, 0x7, 0x7, 0x8, 0x8001, 0x1, 0x5, 0x2, 0x6, 0xd, 0x6, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0x10001, 0x2, 0xa3ba, 0xae33, 0xe, 0x3ff, 0x8, 0x401, 0x5, 0x7, 0x2, 0x0, 0x4, 0xc36, 0xa, 0x6, 0x5, 0x8, 0x1, 0xfffffff8, 0x8, 0x8, 0x800, 0x2e3dd9fd, 0xfff, 0x1, 0x48b2, 0xd8de, 0x8, 0x1a, 0x2, 0xfffffffc, 0x7, 0x0, 0x2e88, 0x0, 0x6, 0x3, 0x6, 0x3ff, 0x1, 0x4e, 0x3, 0x42, 0xffffffce, 0x8, 0xfffff2b3, 0xb6, 0x8, 0x8000, 0x8, 0xff, 0x7, 0xffffa697, 0x80000000, 0xffffffc1, 0x0, 0x2, 0x64be, 0x8, 0x8001, 0x7, 0x3, 0x100, 0xfffffff9, 0xfffffe00, 0xff, 0xfffffbff, 0xfffffeff, 0x5, 0x4, 0x132, 0xd, 0x1000, 0x0, 0x0, 0x8, 0x10, 0x3, 0x0, 0x6, 0x8, 0x84a0, 0x8, 0x200, 0x6, 0x1, 0x2, 0xbb46, 0x7, 0x9, 0x9, 0x4, 0xc29, 0x6000, 0xffffff3a, 0x3, 0x1ff, 0x80000001, 0x2000, 0x3, 0x0, 0x3, 0x1, 0x40, 0xfffffffe, 0x1, 0x5, 0x7f, 0x5, 0x9, 0x1, 0xaf, 0x20000, 0xa00, 0xffffffff, 0x1, 0x5, 0x3, 0x78, 0x80000000, 0x0, 0x5, 0x0, 0x1000, 0x0, 0x40, 0x10, 0x4, 0x101, 0x800, 0x5, 0x0, 0x3, 0x9, 0x6, 0xfffffffc, 0x9, 0x6, 0x4, 0x6, 0x6, 0x4, 0x6, 0x4, 0x1000200, 0x200, 0x1, 0x8000, 0x7ff, 0x5, 0xe, 0x1, 0x715, 0x0, 0xffffffff, 0xa, 0x7, 0x7, 0x6, 0x6, 0x5, 0x3ff, 0xffffffff, 0x88, 0x10, 0x0, 0x1, 0x9, 0x4, 0x5, 0xf, 0x0, 0x1, 0x1, 0x1000, 0x1, 0x7, 0xf, 0x40, 0x6, 0x3, 0x6, 0x7f, 0x10001, 0x2]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000600)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) recvmmsg(r10, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1, &(0x7f0000001740)=""/107, 0x6b}, 0x8}], 0x1, 0x20, 0x0) poll(&(0x7f00000022c0), 0x58, 0x8) (async) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000100)=0x8) 177.935141ms ago: executing program 2 (id=1906): socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x7, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000280)={0x1d, r3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) unshare(0x22020400) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9], 0x40}, 0x1, 0xba01}, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18a50000000034469ae7345ba3a9af6c365f2b7f", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) (async) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 171.219719ms ago: executing program 1 (id=1907): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x0, 0x4}, @hci={0x1f, 0x2004, 0x3}, @can={0x1d, r0}, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0xa, 0x5}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300030000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 0s ago: executing program 0 (id=1908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@'], 0x40}}, 0x20) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xe8}, 0x0) kernel console output (not intermixed with test programs): roblem. [ 71.925190][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.944976][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.952137][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.959672][ T5827] bridge_slave_0: entered allmulticast mode [ 71.966887][ T5827] bridge_slave_0: entered promiscuous mode [ 71.983552][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.990481][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.016355][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.028993][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.041494][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.048722][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.055937][ T5827] bridge_slave_1: entered allmulticast mode [ 72.062953][ T5827] bridge_slave_1: entered promiscuous mode [ 72.071245][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.094632][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.120563][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.168336][ T5841] hsr_slave_0: entered promiscuous mode [ 72.174855][ T5841] hsr_slave_1: entered promiscuous mode [ 72.183790][ T5835] team0: Port device team_slave_0 added [ 72.191803][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.221153][ T5835] team0: Port device team_slave_1 added [ 72.228435][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.239185][ T5834] team0: Port device team_slave_0 added [ 72.277971][ T5834] team0: Port device team_slave_1 added [ 72.294656][ T5828] hsr_slave_0: entered promiscuous mode [ 72.300801][ T5828] hsr_slave_1: entered promiscuous mode [ 72.307230][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 72.313302][ T5828] Cannot create hsr debugfs directory [ 72.360282][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.367846][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.393952][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.407074][ T5827] team0: Port device team_slave_0 added [ 72.414370][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.421310][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.433669][ T5846] Bluetooth: hci1: command tx timeout [ 72.447736][ T5842] Bluetooth: hci2: command tx timeout [ 72.452884][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.494638][ T5827] team0: Port device team_slave_1 added [ 72.511349][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.513047][ T5842] Bluetooth: hci0: command tx timeout [ 72.523709][ T5846] Bluetooth: hci4: command tx timeout [ 72.523895][ T5846] Bluetooth: hci3: command tx timeout [ 72.529747][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.561683][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.593842][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.600773][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.626896][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.655953][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.662949][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.689217][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.725402][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.732345][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.758527][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.820408][ T5835] hsr_slave_0: entered promiscuous mode [ 72.826592][ T5835] hsr_slave_1: entered promiscuous mode [ 72.832532][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 72.838482][ T5835] Cannot create hsr debugfs directory [ 72.903213][ T5834] hsr_slave_0: entered promiscuous mode [ 72.909417][ T5834] hsr_slave_1: entered promiscuous mode [ 72.915950][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 72.921672][ T5834] Cannot create hsr debugfs directory [ 72.995329][ T5827] hsr_slave_0: entered promiscuous mode [ 73.001524][ T5827] hsr_slave_1: entered promiscuous mode [ 73.007795][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.013628][ T5827] Cannot create hsr debugfs directory [ 73.221645][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.254972][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.286262][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.299731][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.394889][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.414572][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.433380][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.447336][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.495613][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.518732][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.551334][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.562412][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.650141][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.663202][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.679342][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.699254][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.711342][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.732646][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.785539][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.796169][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.813846][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.824589][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.839023][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.847000][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.870439][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.877625][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.887480][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.894552][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.919478][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.926561][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.935354][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.942410][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.040930][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.105283][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.159622][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.166780][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.179886][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.187033][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.200896][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.251559][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.307640][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.314786][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.339991][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.347140][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.430510][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.486973][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.513077][ T5846] Bluetooth: hci2: command tx timeout [ 74.523653][ T5846] Bluetooth: hci1: command tx timeout [ 74.557964][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.585827][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.595497][ T5846] Bluetooth: hci0: command tx timeout [ 74.595548][ T5840] Bluetooth: hci4: command tx timeout [ 74.608748][ T5842] Bluetooth: hci3: command tx timeout [ 74.667962][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.675118][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.726925][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.734079][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.850618][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.902038][ T5841] veth0_vlan: entered promiscuous mode [ 74.946196][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.972019][ T5841] veth1_vlan: entered promiscuous mode [ 75.057544][ T5835] veth0_vlan: entered promiscuous mode [ 75.099359][ T5835] veth1_vlan: entered promiscuous mode [ 75.126755][ T5841] veth0_macvtap: entered promiscuous mode [ 75.155987][ T5834] veth0_vlan: entered promiscuous mode [ 75.176843][ T5828] veth0_vlan: entered promiscuous mode [ 75.193533][ T5841] veth1_macvtap: entered promiscuous mode [ 75.201667][ T5834] veth1_vlan: entered promiscuous mode [ 75.216344][ T5828] veth1_vlan: entered promiscuous mode [ 75.249491][ T5835] veth0_macvtap: entered promiscuous mode [ 75.265070][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.275365][ T5835] veth1_macvtap: entered promiscuous mode [ 75.290744][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.314485][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.336203][ T5828] veth0_macvtap: entered promiscuous mode [ 75.348910][ T3559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358297][ T3559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370767][ T5828] veth1_macvtap: entered promiscuous mode [ 75.383907][ T3559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.392623][ T3559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.407331][ T5834] veth0_macvtap: entered promiscuous mode [ 75.421702][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.441305][ T5834] veth1_macvtap: entered promiscuous mode [ 75.455108][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.495566][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.504586][ T1050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.527268][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.535149][ T1050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.550173][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.561714][ T5827] veth0_vlan: entered promiscuous mode [ 75.569225][ T1050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578797][ T1050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607760][ T5827] veth1_vlan: entered promiscuous mode [ 75.618766][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.638855][ T3519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649172][ T3519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.674947][ T3519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.684932][ T3519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.702340][ T3519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.718075][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.734925][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.744483][ T3519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.760006][ T3519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.787331][ T3519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.816548][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.828082][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.866175][ T5827] veth0_macvtap: entered promiscuous mode [ 75.886338][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.911249][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.924681][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.943954][ T5827] veth1_macvtap: entered promiscuous mode [ 76.001073][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.030995][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.070492][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.094905][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.103598][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.111978][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.171174][ T3519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.200684][ T3519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.209790][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.225435][ T3519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.236099][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.263662][ T3519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.336981][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.350750][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.529516][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.547686][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.595043][ T5840] Bluetooth: hci2: command tx timeout [ 76.601499][ T5842] Bluetooth: hci1: command tx timeout [ 76.652001][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.672131][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.679759][ T5840] Bluetooth: hci4: command tx timeout [ 76.683004][ T5846] Bluetooth: hci0: command tx timeout [ 76.690585][ T5842] Bluetooth: hci3: command tx timeout [ 76.765629][ T5966] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 76.773144][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.781562][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.823613][ T5966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7'. [ 76.857259][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.072327][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.367415][ T5997] warning: `syz.4.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.425428][ T5999] bond0: entered promiscuous mode [ 77.430502][ T5999] bond_slave_0: entered promiscuous mode [ 77.449701][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 77.454421][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10'. [ 77.467549][ T5999] bond_slave_1: entered promiscuous mode [ 77.515975][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 77.543491][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 77.723316][ T6013] netlink: 84 bytes leftover after parsing attributes in process `syz.4.17'. [ 77.754098][ T6013] netlink: 175 bytes leftover after parsing attributes in process `syz.4.17'. [ 77.829301][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.001284][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 78.198132][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 78.238130][ T6040] vlan0: entered promiscuous mode [ 78.431565][ T6050] Zero length message leads to an empty skb [ 78.468779][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 78.677125][ T5846] Bluetooth: hci2: command tx timeout [ 78.682592][ T5842] Bluetooth: hci1: command tx timeout [ 78.753010][ T5846] Bluetooth: hci3: command tx timeout [ 78.753021][ T5840] Bluetooth: hci0: command tx timeout [ 78.763960][ T5842] Bluetooth: hci4: command tx timeout [ 78.832514][ T6074] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 79.043231][ T6085] netlink: 'syz.4.36': attribute type 6 has an invalid length. [ 79.194236][ T6062] sit0: mtu less than device minimum [ 80.878727][ T6121] syz.1.46 (6121) used greatest stack depth: 18528 bytes left [ 80.888602][ T6127] bond0: entered promiscuous mode [ 80.911650][ T6127] bond_slave_0: entered promiscuous mode [ 80.937784][ T6127] bond_slave_1: entered promiscuous mode [ 80.942092][ T6132] netlink: 'syz.0.50': attribute type 7 has an invalid length. [ 80.947650][ T6127] batadv0: entered promiscuous mode [ 81.120236][ T6138] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 81.128265][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.269210][ T6147] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 81.356992][ T6149] x_tables: duplicate underflow at hook 1 [ 81.439028][ T6158] syzkaller0: entered promiscuous mode [ 81.465632][ T6158] syzkaller0: entered allmulticast mode [ 81.765694][ T6171] netlink: 'syz.2.65': attribute type 21 has an invalid length. [ 82.489476][ T6203] pimreg: entered allmulticast mode [ 82.504857][ T6205] syzkaller0: entered promiscuous mode [ 82.510435][ T6205] syzkaller0: entered allmulticast mode [ 82.639772][ T6212] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 82.847880][ T6215] __nla_validate_parse: 4 callbacks suppressed [ 82.847897][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'. [ 82.888207][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 82.903159][ T6224] bridge_slave_1: left allmulticast mode [ 82.909208][ T6224] bridge_slave_1: left promiscuous mode [ 82.917496][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.939603][ T6224] bridge_slave_0: left allmulticast mode [ 82.958377][ T6224] bridge_slave_0: left promiscuous mode [ 82.965243][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.073030][ T5846] Bluetooth: hci4: command tx timeout [ 83.084875][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 83.175773][ T6240] netlink: 'syz.1.82': attribute type 2 has an invalid length. [ 83.224204][ T6236] netlink: 'syz.1.82': attribute type 11 has an invalid length. [ 83.239227][ T6236] netlink: 'syz.1.82': attribute type 11 has an invalid length. [ 83.280885][ T6236] netlink: 204 bytes leftover after parsing attributes in process `syz.1.82'. [ 83.284795][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 83.304558][ T6243] netpci0: renamed from syz_tun (while UP) [ 83.331474][ T6243] netpci0: entered allmulticast mode [ 83.376588][ T6236] IPv6: sit1: Disabled Multicast RS [ 83.419412][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 83.434311][ T6249] netlink: 264 bytes leftover after parsing attributes in process `syz.2.85'. [ 83.488186][ T6236] bridge_slave_1: left allmulticast mode [ 83.494773][ T6249] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.511608][ T6236] bridge_slave_1: left promiscuous mode [ 83.526424][ T6249] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.533712][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.535854][ T6256] netlink: 96 bytes leftover after parsing attributes in process `syz.0.87'. [ 83.557534][ T6236] bridge_slave_0: left allmulticast mode [ 83.577237][ T6236] bridge_slave_0: left promiscuous mode [ 83.596707][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.612978][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 83.631516][ T6256] netlink: 96 bytes leftover after parsing attributes in process `syz.0.87'. [ 84.025720][ T6268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.037586][ T6268] bond0: (slave bond2): Enslaving as an active interface with an up link [ 84.168262][ T6277] syzkaller1: entered promiscuous mode [ 84.173934][ T6277] syzkaller1: entered allmulticast mode [ 84.592001][ T6291] bond1: option lp_interval: invalid value (0) [ 84.599853][ T6291] bond1: option lp_interval: allowed values 1 - 2147483647 [ 84.611241][ T6291] bond1 (unregistering): Released all slaves [ 84.654837][ T6299] tipc: Started in network mode [ 84.662079][ T6299] tipc: Node identity 1e756f895fb4, cluster identity 4711 [ 84.681415][ T6299] tipc: Enabled bearer , priority 0 [ 84.713126][ T6301] syzkaller0: entered promiscuous mode [ 84.718616][ T6301] syzkaller0: entered allmulticast mode [ 84.828207][ T1007] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x65 [ 84.897885][ T6294] tipc: Resetting bearer [ 84.909152][ T6286] tipc: Resetting bearer [ 84.950507][ T6286] tipc: Disabling bearer [ 85.607897][ T6325] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 85.871949][ T6334] veth3: entered promiscuous mode [ 85.879486][ T6325] erspan0: entered allmulticast mode [ 86.211581][ T6351] tipc: Enabling of bearer rejected, failed to enable media [ 86.292080][ T6349] syzkaller0: entered promiscuous mode [ 86.303946][ T6349] syzkaller0: entered allmulticast mode [ 86.451830][ T6364] Bluetooth: MGMT ver 1.23 [ 86.607302][ T39] cfg80211: failed to load regulatory.db [ 86.738616][ T6374] ipt_rpfilter: unknown options [ 86.907825][ T6379] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 87.701154][ T6394] syz.3.116 (6394) used greatest stack depth: 16096 bytes left [ 87.847890][ T6432] Illegal XDP return value 4294967294 on prog (id 63) dev N/A, expect packet loss! [ 88.507858][ T6475] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.517047][ T5846] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 88.525246][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 88.587665][ T6480] __nla_validate_parse: 130 callbacks suppressed [ 88.587682][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 88.928230][ T6481] syzkaller0: entered promiscuous mode [ 88.975110][ T6481] syzkaller0: entered allmulticast mode [ 89.212065][ T6510] Bluetooth: MGMT ver 1.23 [ 89.255852][ T6511] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 89.384153][ T6518] netlink: 'syz.0.139': attribute type 96 has an invalid length. [ 89.426085][ T6518] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 89.460631][ T6518] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 90.052498][ T6531] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 90.164106][ T6533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.143'. [ 90.431381][ T6526] bond3: invalid ARP target 0.0.0.0 specified for addition [ 90.492809][ T6526] bond3: option arp_ip_target: invalid value (0) [ 90.525921][ T6526] bond3 (unregistering): Released all slaves [ 90.667615][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 90.699233][ T6544] erspan0: left allmulticast mode [ 90.725845][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 90.751414][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'. [ 90.774001][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.781682][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.803446][ T6544] bond0: left promiscuous mode [ 90.808606][ T6544] bond_slave_0: left promiscuous mode [ 90.814744][ T6544] bond_slave_1: left promiscuous mode [ 90.816066][ T6558] netlink: 76 bytes leftover after parsing attributes in process `syz.0.149'. [ 90.891181][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.904148][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.977589][ T6544] veth3: left promiscuous mode [ 91.005194][ T6537] bond1: Removing last ns target with arp_interval on [ 91.021183][ T6550] hsr_slave_0: left promiscuous mode [ 91.027871][ T6550] hsr_slave_1: left promiscuous mode [ 91.089864][ T6554] xfrm1: entered allmulticast mode [ 91.104873][ T6037] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.122137][ T6037] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.133020][ T6037] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.142080][ T6037] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.902873][ T6610] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 91.915992][ T6606] netlink: 'syz.0.161': attribute type 83 has an invalid length. [ 92.583282][ T6634] syzkaller0: entered promiscuous mode [ 92.623590][ T6634] syzkaller0: entered allmulticast mode [ 92.696732][ T6645] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 92.919668][ T6645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.977491][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.168'. [ 93.011944][ T6648] bond2: (slave veth3): Enslaving as an active interface with a down link [ 93.220956][ T6652] bond2: (slave veth5): Enslaving as an active interface with a down link [ 93.317863][ T6666] batadv1: entered promiscuous mode [ 93.494964][ T6662] syzkaller0: entered promiscuous mode [ 93.536515][ T6662] syzkaller0: entered allmulticast mode [ 93.685533][ T6684] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.173'. [ 93.808606][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 94.074406][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 94.220445][ T6719] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 94.301804][ T6720] IPv6: Can't replace route, no match found [ 95.451070][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 95.645250][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 95.751559][ T6770] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 96.034693][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 96.060048][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 96.160092][ T6782] v: renamed from dummy0 [ 96.281383][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 96.290437][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 96.319141][ T6787] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 96.330906][ T6787] macvtap1: entered promiscuous mode [ 96.339938][ T6787] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 96.392416][ T6793] syzkaller0: entered promiscuous mode [ 96.398272][ T6793] syzkaller0: entered allmulticast mode [ 96.509216][ T6791] x_tables: duplicate underflow at hook 1 [ 96.942399][ T6822] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 97.218027][ T6829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.414015][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 97.557585][ T6847] bond1: option arp_all_targets: invalid value (129) [ 97.567176][ T6847] bond1 (unregistering): Released all slaves [ 97.649513][ T6829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.747628][ T6857] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 97.762972][ T6857] syzkaller1: linktype set to 260 [ 97.961260][ T6867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.968565][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 98.427400][ T3559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.454584][ T3559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.476743][ T3559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.516816][ T3559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.605601][ T6829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.737728][ T6829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.928361][ T6922] raw_sendmsg: syz.4.228 forgot to set AF_INET. Fix it! [ 99.005008][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.650120][ T6954] __nla_validate_parse: 1 callbacks suppressed [ 99.650136][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 99.667519][ T6963] netlink: 208 bytes leftover after parsing attributes in process `syz.1.238'. [ 99.754151][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 99.824472][ T6966] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 100.283816][ T6998] netlink: 112 bytes leftover after parsing attributes in process `syz.0.244'. [ 100.325808][ T6998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.244'. [ 100.722640][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 100.760706][ T7032] netlink: 'syz.0.253': attribute type 12 has an invalid length. [ 100.769473][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 100.784560][ T7032] netlink: 'syz.0.253': attribute type 12 has an invalid length. [ 100.803765][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 100.854426][ T7036] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 100.921697][ T7032] netlink: 'syz.0.253': attribute type 12 has an invalid length. [ 100.932586][ T7043] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 100.958432][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 101.074963][ T7032] netlink: 'syz.0.253': attribute type 12 has an invalid length. [ 101.084409][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 101.987287][ T7095] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 102.072577][ T7095] bond1: entered promiscuous mode [ 102.098804][ T7095] bond1: entered allmulticast mode [ 102.116107][ T7095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.148095][ T7124] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 103.177250][ T7124] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 103.214873][ T7124] IPVS: set_ctl: invalid protocol: 92 172.20.20.45:20001 [ 104.113604][ T7178] syzkaller1: entered promiscuous mode [ 104.119160][ T7178] syzkaller1: entered allmulticast mode [ 104.407205][ T7219] tipc: Invalid UDP bearer configuration [ 104.407255][ T7219] tipc: Enabling of bearer rejected, failed to enable media [ 104.799901][ T7237] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 104.878062][ T7242] __nla_validate_parse: 10 callbacks suppressed [ 104.878080][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 105.079593][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 105.214518][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 105.389975][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 105.426403][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 105.453004][ T7278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.995520][ T7303] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 106.007168][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.311'. [ 106.017652][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.311'. [ 106.029585][ T7301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.311'. [ 106.157907][ T7310] netlink: 'syz.0.315': attribute type 23 has an invalid length. [ 106.172304][ T7303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.209615][ T7311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.239707][ T7311] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 106.260874][ T7311] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 106.758938][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 106.769478][ T7347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 106.814529][ T7353] netlink: 'syz.3.328': attribute type 21 has an invalid length. [ 106.853668][ T7352] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 106.860738][ T7352] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 107.077526][ T7367] syzkaller0: entered promiscuous mode [ 107.099436][ T7367] syzkaller0: entered allmulticast mode [ 107.266588][ T7367] Cannot find del_set index 2 as target [ 108.338092][ T7430] ipt_ECN: cannot use operation on non-tcp rule [ 108.390943][ T7432] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 108.445850][ T7432] : entered promiscuous mode [ 108.485553][ T7435] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 108.515393][ T7435] : left promiscuous mode [ 108.552539][ T7439] netlink: 'syz.0.354': attribute type 3 has an invalid length. [ 108.560473][ T7439] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 109.185128][ T7453] netlink: set zone limit has 4 unknown bytes [ 109.217061][ T7463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.277252][ T7482] netlink: 'syz.0.363': attribute type 4 has an invalid length. [ 109.385295][ T7476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.407307][ T7476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.425928][ T7476] bond0 (unregistering): Released all slaves [ 109.570476][ T7463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.679812][ T7492] syzkaller0: entered promiscuous mode [ 109.707548][ T7492] syzkaller0: entered allmulticast mode [ 109.767731][ T7463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.837671][ T7506] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.884536][ T7463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.887667][ T7508] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.026404][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.075725][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.086217][ T7511] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 110.119961][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.180762][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.680646][ T7546] __nla_validate_parse: 15 callbacks suppressed [ 110.680663][ T7546] netlink: 164 bytes leftover after parsing attributes in process `syz.2.376'. [ 110.721200][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.376'. [ 110.876484][ T7556] netlink: 'syz.1.378': attribute type 83 has an invalid length. [ 110.976199][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.000433][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.119251][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.195625][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.266364][ T7575] Cannot find add_set index 0 as target [ 111.286544][ T7569] ip_vti0: entered promiscuous mode [ 111.296102][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 111.462570][ T7584] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 111.486256][ T7577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'. [ 111.502017][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 111.687957][ T7595] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 111.699132][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 111.708775][ T7595] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 111.744880][ T7595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.778164][ T7604] batadv_slave_1: entered promiscuous mode [ 111.828448][ T7590] batadv_slave_1: left promiscuous mode [ 112.022439][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 112.218721][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.395'. [ 112.231619][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 112.441683][ T7631] batadv2: entered promiscuous mode [ 113.219556][ T7679] netlink: 'syz.4.412': attribute type 3 has an invalid length. [ 113.294921][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.508709][ T7692] Bluetooth: MGMT ver 1.23 [ 113.586597][ T7694] syz_tun: entered promiscuous mode [ 113.591965][ T7694] macvtap1: entered promiscuous mode [ 113.834104][ T7693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.855803][ T7693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.083095][ T7693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.129513][ T7693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.165150][ T7698] syzkaller0: entered promiscuous mode [ 114.170780][ T7698] syzkaller0: entered allmulticast mode [ 114.220203][ T7693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.241527][ T7693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.346411][ T7714] ip6gre1: entered promiscuous mode [ 114.446887][ T7693] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.477422][ T7693] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.490219][ T7724] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 114.667882][ T3476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.705863][ T3476] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.748451][ T3476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.766036][ T3476] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.820663][ T1007] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.829237][ T1007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.870723][ T1007] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.880296][ T1007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.890181][ T7738] tipc: Started in network mode [ 114.896172][ T7738] tipc: Node identity 2e77e0c17084, cluster identity 4711 [ 114.904101][ T7738] tipc: Enabled bearer , priority 0 [ 114.918271][ T7738] syzkaller0: entered promiscuous mode [ 114.926875][ T7738] syzkaller0: entered allmulticast mode [ 115.052108][ T7754] tipc: Resetting bearer [ 115.113012][ T7735] tipc: Resetting bearer [ 115.190967][ T7735] tipc: Disabling bearer [ 115.373258][ T7767] bridge_slave_0: left allmulticast mode [ 115.378932][ T7767] bridge_slave_0: left promiscuous mode [ 115.433938][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.489026][ T7767] bridge_slave_1: left allmulticast mode [ 115.552950][ T7767] bridge_slave_1: left promiscuous mode [ 115.566017][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.609805][ T7767] team0: Port device team_slave_0 removed [ 115.650218][ T7767] team0: Port device team_slave_1 removed [ 115.682557][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.691584][ T7782] __nla_validate_parse: 9 callbacks suppressed [ 115.691597][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 115.733925][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.795860][ T7767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.854004][ T7770] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 115.976817][ T7782] macvlan2: entered promiscuous mode [ 115.996886][ T7782] macvlan2: entered allmulticast mode [ 116.009057][ T7782] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 116.164925][ T7793] sctp: [Deprecated]: syz.1.436 (pid 7793) Use of int in maxseg socket option. [ 116.164925][ T7793] Use struct sctp_assoc_value instead [ 116.234894][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'. [ 116.348750][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 116.388984][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 116.983738][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 117.025192][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 117.076087][ T7851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.448'. [ 117.827587][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 117.855648][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 118.122320][ T7912] pim6reg1: entered promiscuous mode [ 118.151225][ T7912] pim6reg1: entered allmulticast mode [ 118.186699][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 118.447294][ T7927] netlink: 'syz.0.464': attribute type 11 has an invalid length. [ 118.500656][ T7932] FAULT_INJECTION: forcing a failure. [ 118.500656][ T7932] name failslab, interval 1, probability 0, space 0, times 1 [ 118.530160][ T7931] netlink: 'syz.4.466': attribute type 10 has an invalid length. [ 118.573088][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.3.465 Not tainted syzkaller #0 PREEMPT(full) [ 118.573128][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 118.573157][ T7932] Call Trace: [ 118.573164][ T7932] [ 118.573171][ T7932] dump_stack_lvl+0xe8/0x150 [ 118.573207][ T7932] should_fail_ex+0x412/0x560 [ 118.573233][ T7932] should_failslab+0xa8/0x100 [ 118.573253][ T7932] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 118.573277][ T7932] ? __alloc_skb+0x186/0x7d0 [ 118.573296][ T7932] ? __alloc_skb+0x1d0/0x7d0 [ 118.573314][ T7932] ? __local_bh_enable_ip+0xd0/0x130 [ 118.573334][ T7932] __alloc_skb+0x1d0/0x7d0 [ 118.573358][ T7932] netlink_sendmsg+0x5d4/0xb40 [ 118.573386][ T7932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.573409][ T7932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 118.573432][ T7932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.573453][ T7932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.573489][ T7932] ____sys_sendmsg+0xa68/0xad0 [ 118.573512][ T7932] ? __might_fault+0xaf/0x130 [ 118.573543][ T7932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.573572][ T7932] ? import_iovec+0x73/0xa0 [ 118.573597][ T7932] ___sys_sendmsg+0x2a5/0x360 [ 118.573620][ T7932] ? __lock_acquire+0x6b5/0x2cf0 [ 118.573648][ T7932] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.573704][ T7932] ? __fget_files+0x2a/0x420 [ 118.573730][ T7932] ? __fget_files+0x3a0/0x420 [ 118.573758][ T7932] __x64_sys_sendmsg+0x1bd/0x2a0 [ 118.573784][ T7932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.573817][ T7932] ? __pfx_ksys_write+0x10/0x10 [ 118.573853][ T7932] do_syscall_64+0xe2/0xf80 [ 118.573873][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.573890][ T7932] ? trace_irq_disable+0x37/0x100 [ 118.573907][ T7932] ? clear_bhb_loop+0x60/0xb0 [ 118.573927][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.573944][ T7932] RIP: 0033:0x7fa711d9aeb9 [ 118.573965][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.573979][ T7932] RSP: 002b:00007fa712d14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.573999][ T7932] RAX: ffffffffffffffda RBX: 00007fa712015fa0 RCX: 00007fa711d9aeb9 [ 118.574012][ T7932] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 118.574024][ T7932] RBP: 00007fa712d14090 R08: 0000000000000000 R09: 0000000000000000 [ 118.574035][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.574045][ T7932] R13: 00007fa712016038 R14: 00007fa712015fa0 R15: 00007ffe6d23a6b8 [ 118.574075][ T7932] [ 118.940340][ T7941] xt_nfacct: accounting object `syz0' does not exist [ 118.958077][ T7942] xt_nfacct: accounting object `syz0' does not exist [ 119.310920][ T7948] ÿÿÿÿÿÿ: renamed from vlan0 [ 121.097755][ T5941] IPVS: starting estimator thread 0... [ 121.109072][ T8041] __nla_validate_parse: 7 callbacks suppressed [ 121.109088][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 121.134358][ T8009] nr1: entered promiscuous mode [ 121.139297][ T8009] nr1: entered allmulticast mode [ 121.148795][ T8041] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.159342][ T8041] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.235021][ T8042] IPVS: using max 56 ests per chain, 134400 per kthread [ 121.264256][ T8041] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.282870][ T8041] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.410432][ T8041] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.435612][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 121.440985][ T8041] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.498134][ T8056] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 121.521859][ T8056] bond1 (unregistering): Released all slaves [ 121.587929][ T8041] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.598639][ T8041] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.631147][ T78] IPVS: stop unused estimator thread 0... [ 121.745514][ T1007] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.772317][ T1007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.828348][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.857147][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.928411][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.961624][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.045481][ T78] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.056368][ T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.094725][ T8081] netlink: 'syz.4.509': attribute type 15 has an invalid length. [ 122.139588][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 122.538305][ T8118] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 122.550712][ T8118] bridge_slave_1: left allmulticast mode [ 122.575400][ T8118] bridge_slave_1: left promiscuous mode [ 122.586240][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.726251][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 122.747155][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 122.755350][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 122.824261][ T8134] tun0: tun_chr_ioctl cmd 21731 [ 122.844105][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 122.984173][ T8141] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 123.207658][ T8127] infiniband syz1: set active [ 123.214058][ T39] xfrm0 speed is unknown, defaulting to 1000 [ 123.249275][ T8127] infiniband syz1: added xfrm0 [ 123.335662][ T8127] RDS/IB: syz1: added [ 123.340847][ T8127] smc: adding ib device syz1 with port count 1 [ 123.351951][ T8127] smc: ib device syz1 port 1 has no pnetid [ 123.374980][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 123.392687][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 123.862759][ T8163] xfrm0 speed is unknown, defaulting to 1000 [ 124.165381][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 124.515091][ T8178] xfrm0 speed is unknown, defaulting to 1000 [ 124.523778][ T8184] ªªªªªª: renamed from wg2 [ 124.795506][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 125.205479][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 125.344614][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.352238][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.368479][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.376085][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.508274][ T8127] xfrm0 speed is unknown, defaulting to 1000 [ 126.023490][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 126.057938][ T8211] netlink: 'syz.3.541': attribute type 29 has an invalid length. [ 126.165778][ T8215] netlink: 'syz.3.541': attribute type 29 has an invalid length. [ 126.238169][ T8220] netlink: 43 bytes leftover after parsing attributes in process `syz.2.543'. [ 126.277970][ T8214] xfrm0 speed is unknown, defaulting to 1000 [ 126.344785][ T8220] IPv6: sit2: Disabled Multicast RS [ 126.352063][ T8220] sit2: entered allmulticast mode [ 126.800262][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 127.185976][ T8259] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 127.195269][ T8259] netlink: 'syz.4.555': attribute type 8 has an invalid length. [ 127.215384][ T8254] pim6reg1: entered promiscuous mode [ 127.221857][ T8254] pim6reg1: entered allmulticast mode [ 127.228849][ T8259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.555'. [ 127.579733][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 127.596019][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 127.618973][ T8278] xfrm0 speed is unknown, defaulting to 1000 [ 127.625945][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 127.637762][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 127.655267][ T5941] IPVS: starting estimator thread 0... [ 127.743432][ T8286] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.885852][ T8293] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 127.949147][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.044068][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 128.140736][ T8293] bond0: (slave gretap2): making interface the new active one [ 128.170028][ T8293] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 128.260298][ T8310] netlink: 'syz.0.569': attribute type 3 has an invalid length. [ 128.340313][ T8297] bond0 (unregistering): (slave gretap2): Releasing active interface [ 128.354313][ T8318] xt_hashlimit: max too large, truncated to 1048576 [ 128.388841][ T8297] bond0 (unregistering): Released all slaves [ 128.405102][ T8318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.492821][ T8308] xfrm0 speed is unknown, defaulting to 1000 [ 128.921376][ T8340] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 128.993192][ T8333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.004488][ T8333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.025679][ T8333] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 129.074497][ T8341] xfrm0 speed is unknown, defaulting to 1000 [ 129.115450][ T8331] xfrm0 speed is unknown, defaulting to 1000 [ 129.286261][ T8351] nftables ruleset with unbound chain [ 129.333962][ T8351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'. [ 129.606996][ T8355] xfrm0 speed is unknown, defaulting to 1000 [ 130.110527][ T8386] netlink: 884 bytes leftover after parsing attributes in process `syz.2.585'. [ 131.406037][ T8436] __nla_validate_parse: 1 callbacks suppressed [ 131.406056][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 131.430284][ T8436] netlink: 44 bytes leftover after parsing attributes in process `syz.2.596'. [ 131.544636][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'. [ 131.623936][ T8439] netlink: 96 bytes leftover after parsing attributes in process `syz.3.598'. [ 131.658905][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 131.907034][ T8454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.967289][ T8454] netlink: 'syz.1.601': attribute type 89 has an invalid length. [ 131.994513][ T8454] syzkaller0: entered promiscuous mode [ 132.005618][ T8454] syzkaller0: entered allmulticast mode [ 132.099076][ T8460] tipc: Started in network mode [ 132.117577][ T8460] tipc: Node identity b6b66cb244b5, cluster identity 4711 [ 132.153873][ T8460] tipc: Enabled bearer , priority 0 [ 132.167783][ T8461] syzkaller0: entered promiscuous mode [ 132.200519][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 132.203313][ T8461] syzkaller0: entered allmulticast mode [ 132.226432][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 132.326041][ T8461] tipc: Resetting bearer [ 132.378970][ T8461] tipc: Disabling bearer [ 132.382655][ T8487] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 132.395080][ T8487] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 132.435518][ T8487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.494751][ T8487] bond4: (slave veth9): Enslaving as an active interface with a down link [ 132.508306][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.609'. [ 132.524781][ T8495] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 132.527300][ T8499] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 132.534607][ T8498] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 132.627878][ T8499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.685434][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.882675][ T8521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.618'. [ 132.988870][ T8527] netlink: 'syz.3.620': attribute type 9 has an invalid length. [ 133.167670][ T8535] netlink: 416 bytes leftover after parsing attributes in process `syz.2.622'. [ 133.264823][ T8531] xfrm0 speed is unknown, defaulting to 1000 [ 134.017205][ T8543] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 134.327873][ T8574] IPv6: Can't replace route, no match found [ 134.445405][ T8578] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 134.602469][ T8585] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 134.674073][ T8585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.712477][ T8589] bond4: (slave syz_tun): making interface the new active one [ 134.739589][ T8589] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 135.376591][ T8612] netlink: 'syz.3.639': attribute type 11 has an invalid length. [ 135.624069][ T5846] block nbd0: Receive control failed (result -1) [ 135.634309][ T8635] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 136.071279][ T8661] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 136.102578][ T8661] dummy0: entered promiscuous mode [ 136.134783][ T8661] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 136.674331][ T8689] __nla_validate_parse: 13 callbacks suppressed [ 136.674349][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'. [ 136.784002][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 136.877581][ T8693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.657'. [ 136.901103][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 136.934400][ T8698] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 136.958035][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 137.519307][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.669'. [ 137.738587][ T8750] xfrm0 speed is unknown, defaulting to 1000 [ 138.049121][ T8772] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.676'. [ 138.912021][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 138.957964][ T8801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.685'. [ 138.984791][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'. [ 139.641100][ T8836] IPVS: set_ctl: invalid protocol: 46 172.20.20.46:20000 [ 139.732062][ T8841] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 139.790745][ T8841] team0: Device veth1_macvtap failed to register rx_handler [ 139.821716][ T8848] syzkaller0: entered promiscuous mode [ 139.828825][ T8848] syzkaller0: entered allmulticast mode [ 139.963480][ T8854] bridge_slave_0: left allmulticast mode [ 139.985356][ T8854] bridge_slave_0: left promiscuous mode [ 140.001195][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.002624][ T8847] delete_channel: no stack [ 140.575251][ T8887] x_tables: duplicate underflow at hook 4 [ 140.684969][ T8901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.907472][ T8913] syzkaller1: entered promiscuous mode [ 140.922936][ T8913] syzkaller1: entered allmulticast mode [ 141.196277][ T8926] syzkaller0: entered promiscuous mode [ 141.201792][ T8926] syzkaller0: entered allmulticast mode [ 141.429224][ T8940] Cannot find add_set index 3 as target [ 141.475054][ T8949] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 141.542895][ T8946] pim6reg: entered allmulticast mode [ 141.637107][ T8964] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 141.836161][ T8976] xfrm0 speed is unknown, defaulting to 1000 [ 141.971601][ T8985] __nla_validate_parse: 17 callbacks suppressed [ 141.971614][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 142.484423][ T10] IPVS: starting estimator thread 0... [ 142.499059][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 142.593128][ T9005] IPVS: using max 32 ests per chain, 76800 per kthread [ 142.602966][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 142.623351][ T9014] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 142.672508][ T9002] xfrm0 speed is unknown, defaulting to 1000 [ 142.695166][ T8999] tipc: Started in network mode [ 142.700204][ T8999] tipc: Node identity 66a691114add, cluster identity 4711 [ 142.707584][ T8999] tipc: Enabled bearer , priority 0 [ 142.753893][ T8999] IPVS: ip_vs_add_dest(): server weight less than zero [ 142.943128][ T9010] syzkaller0: entered promiscuous mode [ 142.959564][ T9010] syzkaller0: entered allmulticast mode [ 143.154739][ T9021] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 143.212040][ T9021] bond0 (unregistering): Released all slaves [ 143.306918][ T8998] tipc: Resetting bearer [ 143.380878][ T8998] tipc: Disabling bearer [ 143.556384][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 143.838370][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 144.028429][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.761'. [ 144.127356][ T9089] syzkaller0: entered promiscuous mode [ 144.134452][ T9089] syzkaller0: entered allmulticast mode [ 144.291951][ T9093] xt_hashlimit: size too large, truncated to 1048576 [ 144.411733][ T9097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.765'. [ 144.541166][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.768'. [ 144.750829][ T9114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 144.792911][ T9118] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 144.798922][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 144.824553][ T9118] netlink: 'syz.3.771': attribute type 2 has an invalid length. [ 144.990437][ T9123] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 145.013147][ T9123] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 145.016373][ T9126] geneve2: entered promiscuous mode [ 145.166607][ T9134] syzkaller0: entered promiscuous mode [ 145.179464][ T9134] syzkaller0: entered allmulticast mode [ 145.555052][ T9154] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 145.563213][ T9154] netlink: 'syz.1.781': attribute type 3 has an invalid length. [ 145.571741][ T9154] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 145.885168][ T9161] syzkaller0: entered promiscuous mode [ 145.895241][ T9161] syzkaller0: entered allmulticast mode [ 146.497299][ T9215] tipc: Enabled bearer , priority 24 [ 146.558015][ T9216] xfrm0 speed is unknown, defaulting to 1000 [ 146.659372][ T9220] syz_tun: entered promiscuous mode [ 146.670346][ T9220] macvtap1: entered promiscuous mode [ 146.878270][ T9232] --map-set only usable from mangle table [ 146.905342][ T9235] veth5: entered promiscuous mode [ 147.138572][ T9246] __nla_validate_parse: 8 callbacks suppressed [ 147.138590][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 147.141703][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 147.158309][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 147.261115][ T9254] netlink: 92 bytes leftover after parsing attributes in process `syz.3.811'. [ 147.307387][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 147.496395][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 147.620103][ T9275] sit0: entered promiscuous mode [ 147.649080][ T9275] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 147.657154][ T9275] netlink: 1 bytes leftover after parsing attributes in process `syz.1.817'. [ 147.667529][ T10] tipc: Node number set to 746295569 [ 147.797265][ T9289] xfrm0 speed is unknown, defaulting to 1000 [ 147.965381][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 148.079562][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.823'. [ 148.098533][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.823'. [ 148.156540][ T9306] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 148.164747][ T9306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.287822][ T9310] pimreg: tun_chr_ioctl cmd 1074025677 [ 148.294124][ T9310] pimreg: linktype set to 6 [ 148.845897][ T9335] SET target dimension over the limit! [ 148.929180][ T9337] xfrm0 speed is unknown, defaulting to 1000 [ 150.321724][ T9418] netlink: 'syz.0.851': attribute type 13 has an invalid length. [ 150.356669][ T9418] netlink: 'syz.0.851': attribute type 11 has an invalid length. [ 150.846923][ T9443] xfrm0 speed is unknown, defaulting to 1000 [ 151.172074][ T9465] trusted_key: syz.3.861 sent an empty control message without MSG_MORE. [ 151.328648][ T9456] xfrm0 speed is unknown, defaulting to 1000 [ 151.835150][ T9494] : renamed from veth0_to_bond (while UP) [ 152.652981][ T9520] __nla_validate_parse: 7 callbacks suppressed [ 152.652998][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 153.423494][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 153.469220][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 153.586357][ T9563] bond0: (slave rose0): Error: Device can not be enslaved while up [ 153.739242][ T9570] xfrm0 speed is unknown, defaulting to 1000 [ 153.785670][ T9575] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 153.838197][ T9575] bond5: entered promiscuous mode [ 153.843711][ T9575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.937346][ T9575] bond5: (slave bridge1): making interface the new active one [ 153.967755][ T9579] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 153.975548][ T9575] bridge1: entered promiscuous mode [ 153.983806][ T9579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.891'. [ 153.993732][ T9575] bridge1: left promiscuous mode [ 154.094610][ T9579] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 154.107116][ T9585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.109165][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 154.571936][ T9605] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.896'. [ 154.655775][ T9609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.898'. [ 155.081332][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 155.101178][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 155.114239][ T9639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.360966][ T9659] netlink: 60 bytes leftover after parsing attributes in process `syz.4.911'. [ 155.886284][ T9692] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.841209][ T9751] xfrm1: entered allmulticast mode [ 157.033701][ T9768] FAULT_INJECTION: forcing a failure. [ 157.033701][ T9768] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 157.057580][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.1.938 Not tainted syzkaller #0 PREEMPT(full) [ 157.057600][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 157.057610][ T9768] Call Trace: [ 157.057617][ T9768] [ 157.057624][ T9768] dump_stack_lvl+0xe8/0x150 [ 157.057658][ T9768] should_fail_ex+0x412/0x560 [ 157.057683][ T9768] _copy_from_user+0x2d/0xb0 [ 157.057709][ T9768] ___sys_sendmsg+0x1c6/0x360 [ 157.057732][ T9768] ? __lock_acquire+0x6b5/0x2cf0 [ 157.057760][ T9768] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.057815][ T9768] ? __fget_files+0x2a/0x420 [ 157.057834][ T9768] ? __fget_files+0x3a0/0x420 [ 157.057862][ T9768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.057888][ T9768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.057919][ T9768] ? __pfx_ksys_write+0x10/0x10 [ 157.057952][ T9768] do_syscall_64+0xe2/0xf80 [ 157.057972][ T9768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.057998][ T9768] ? trace_irq_disable+0x37/0x100 [ 157.058013][ T9768] ? clear_bhb_loop+0x60/0xb0 [ 157.058033][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.058050][ T9768] RIP: 0033:0x7f0b0679aeb9 [ 157.058070][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.058084][ T9768] RSP: 002b:00007f0b07659028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.058109][ T9768] RAX: ffffffffffffffda RBX: 00007f0b06a16090 RCX: 00007f0b0679aeb9 [ 157.058122][ T9768] RDX: 0000000020004044 RSI: 00002000000000c0 RDI: 0000000000000004 [ 157.058134][ T9768] RBP: 00007f0b07659090 R08: 0000000000000000 R09: 0000000000000000 [ 157.058144][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.058154][ T9768] R13: 00007f0b06a16128 R14: 00007f0b06a16090 R15: 00007ffdaddfe618 [ 157.058181][ T9768] [ 157.369945][ T9774] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 157.418699][ T9774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.427194][ T9778] bond4: option lacp_rate: unable to set because the bond device is up [ 157.447363][ T9777] vti0: entered promiscuous mode [ 157.452449][ T9777] vti0: entered allmulticast mode [ 157.756675][ T9794] __nla_validate_parse: 28 callbacks suppressed [ 157.756692][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.948'. [ 157.778715][ T9794] netlink: 'syz.0.948': attribute type 13 has an invalid length. [ 157.802081][ T9758] delete_channel: no stack [ 157.850352][ T9809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.948'. [ 157.874470][ T9809] block nbd0: reconnected socket [ 158.138166][ T9794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.237099][ T9794] tipc: Resetting bearer [ 158.245718][ T9838] delete_channel: no stack [ 158.313993][ T5846] block nbd0: Receive control failed (result -32) [ 158.321207][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 158.349524][ T65] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.360416][ T65] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.385075][ T65] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.394610][ T65] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.404053][ T65] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.412466][ T65] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.421557][ T65] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.430393][ T65] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.488801][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 158.978731][ T9886] xt_cgroup: invalid path, errno=-2 [ 159.061387][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 159.260489][ T9906] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 159.344182][ T9906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.354261][ T9906] bond5: (slave bond6): making interface the new active one [ 159.362142][ T9906] bond5: (slave bond6): Enslaving as an active interface with an up link [ 159.406383][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.969'. [ 159.423623][ T9915] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 159.438750][ T9906] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.558104][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 159.639384][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 159.642639][ T9931] syzkaller1: entered promiscuous mode [ 159.673082][ T9931] syzkaller1: entered allmulticast mode [ 159.858749][ T9937] xfrm0 speed is unknown, defaulting to 1000 [ 160.201531][ T9952] bond0: (slave bond_slave_0): Releasing backup interface [ 160.252467][ T9952] bond0: (slave bond_slave_1): Releasing backup interface [ 160.345846][ T9952] team0: Port device team_slave_0 removed [ 160.364441][ T9952] team0: Port device team_slave_1 removed [ 160.376456][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.385142][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.395025][ T9952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.402663][ T9952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.416017][ T9952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.442551][ T9967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.985'. [ 160.453727][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 160.528218][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 160.682411][ T9968] syzkaller1: entered promiscuous mode [ 160.703399][ T9968] syzkaller1: entered allmulticast mode [ 161.126235][ T9992] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 161.166084][ T9995] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 161.177266][ T9995] team0: Device ipvlan1 failed to register rx_handler [ 161.404326][T10012] syzkaller0: entered promiscuous mode [ 161.409828][T10012] syzkaller0: entered allmulticast mode [ 161.568588][T10013] xfrm0 speed is unknown, defaulting to 1000 [ 161.570958][T10018] syz_tun: entered allmulticast mode [ 161.605742][T10015] syz_tun: left allmulticast mode [ 161.780699][T10016] xfrm0 speed is unknown, defaulting to 1000 [ 161.780926][T10024] xt_hashlimit: size too large, truncated to 1048576 [ 162.165641][T10042] netlink: 'syz.4.1004': attribute type 7 has an invalid length. [ 162.202252][T10033] xfrm0 speed is unknown, defaulting to 1000 [ 162.628466][T10038] xfrm0 speed is unknown, defaulting to 1000 [ 162.846440][T10065] __nla_validate_parse: 2 callbacks suppressed [ 162.846451][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1008'. [ 162.897291][T10037] xfrm0 speed is unknown, defaulting to 1000 [ 162.947774][T10073] netlink: 'syz.1.1010': attribute type 36 has an invalid length. [ 163.244215][T10084] netlink: 'syz.1.1014': attribute type 13 has an invalid length. [ 163.256205][T10087] netlink: 'syz.2.1015': attribute type 11 has an invalid length. [ 163.277196][T10089] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1016'. [ 163.293125][T10087] netlink: 'syz.2.1015': attribute type 11 has an invalid length. [ 163.300953][T10087] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1015'. [ 163.412634][T10098] syzkaller0: entered promiscuous mode [ 163.433506][T10098] syzkaller0: entered allmulticast mode [ 163.481986][T10091] tipc: Enabled bearer , priority 0 [ 163.497763][T10091] tipc: Enabling of bearer rejected, media not registered [ 163.672144][T10095] tipc: Resetting bearer [ 163.710997][T10105] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 163.750715][T10095] tipc: Disabling bearer [ 163.774464][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.814747][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 163.851145][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 163.888522][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.083946][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 164.157232][T10123] hsr0: entered promiscuous mode [ 164.162619][T10125] hsr_slave_0: left promiscuous mode [ 164.180630][T10125] hsr_slave_1: left promiscuous mode [ 164.219274][T10125] hsr0 (unregistering): left promiscuous mode [ 164.334538][T10136] tipc: Started in network mode [ 164.339515][T10136] tipc: Node identity 0a495cba844b, cluster identity 4711 [ 164.370192][T10136] tipc: Enabled bearer , priority 0 [ 164.457988][T10133] syzkaller0: entered promiscuous mode [ 164.484922][T10133] syzkaller0: entered allmulticast mode [ 164.549644][T10133] tipc: Resetting bearer [ 164.607385][T10153] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 164.666774][T10132] tipc: Resetting bearer [ 164.667959][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1030'. [ 164.738453][T10132] tipc: Disabling bearer [ 164.870166][T10164] netlink: 'syz.1.1032': attribute type 9 has an invalid length. [ 164.881128][T10164] netlink: 'syz.1.1032': attribute type 6 has an invalid length. [ 164.902533][T10164] netlink: 'syz.1.1032': attribute type 7 has an invalid length. [ 164.916268][T10166] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 164.929665][T10164] netlink: 'syz.1.1032': attribute type 8 has an invalid length. [ 165.463370][T10202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1040'. [ 165.935230][T10237] openvswitch: netlink: Message has 4 unknown bytes. [ 166.038287][T10243] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 166.060225][T10240] netlink: 'syz.2.1049': attribute type 3 has an invalid length. [ 166.083009][T10240] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1049'. [ 166.259962][T10259] macvlan3: entered allmulticast mode [ 166.899561][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 167.369841][T10289] bond0: (slave geneve3): making interface the new active one [ 167.394058][T10289] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 167.409621][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.432660][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.444224][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.458996][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 168.119090][T10310] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 168.183107][T10319] __nla_validate_parse: 1 callbacks suppressed [ 168.183123][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 168.381755][T10322] xfrm0 speed is unknown, defaulting to 1000 [ 168.901409][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'. [ 169.517026][T10351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1074'. [ 169.527256][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1074'. [ 169.537668][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 170.974517][T10385] validate_nla: 4 callbacks suppressed [ 170.974534][T10385] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 171.009382][T10386] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 171.495245][T10421] syzkaller0: entered promiscuous mode [ 171.500757][T10421] syzkaller0: entered allmulticast mode [ 171.668787][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'. [ 171.978613][T10455] netlink: 'syz.0.1093': attribute type 30 has an invalid length. [ 172.025856][T10455] ip_vti0: left promiscuous mode [ 172.071218][T10455] netpci0: left allmulticast mode [ 172.116346][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.140447][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.159243][T10455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.308459][T10473] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 172.309063][T10476] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1101'. [ 172.327377][T10475] syz_tun: entered allmulticast mode [ 172.347806][T10472] syz_tun: left allmulticast mode [ 172.368987][T10476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'. [ 172.497004][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 172.579911][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 172.727973][T10497] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.787925][T10497] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.861422][T10497] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.978786][T10497] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.208131][ T1314] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.247821][ T3519] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.279260][T10531] sctp: [Deprecated]: syz.0.1116 (pid 10531) Use of int in max_burst socket option. [ 173.279260][T10531] Use struct sctp_assoc_value instead [ 173.316037][ T3519] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.334575][ T3519] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.471148][T10543] tipc: Invalid UDP bearer configuration [ 173.471196][T10543] tipc: Enabling of bearer rejected, failed to enable media [ 173.660466][T10557] __nla_validate_parse: 1 callbacks suppressed [ 173.660485][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 174.021731][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 174.043341][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 174.052225][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1125'. [ 174.153470][T10584] Bluetooth: MGMT ver 1.23 [ 174.264320][T10578] xfrm0 speed is unknown, defaulting to 1000 [ 174.359640][T10594] syzkaller1: entered promiscuous mode [ 174.372766][T10594] syzkaller1: entered allmulticast mode [ 174.505898][T10599] geneve2: entered promiscuous mode [ 175.239856][T10634] netlink: 'syz.4.1144': attribute type 8 has an invalid length. [ 175.324877][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1145'. [ 176.286759][T10641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.335754][T10641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.018745][T10657] ip_vti0: entered promiscuous mode [ 177.025091][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 177.053332][T10677] tipc: Enabled bearer , priority 0 [ 177.064010][ T2136] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.113061][T10681] syzkaller0: entered promiscuous mode [ 177.118555][T10681] syzkaller0: entered allmulticast mode [ 177.137688][T10688] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1150'. [ 177.164570][T10685] tipc: Resetting bearer [ 177.175882][T10696] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 177.199110][ T2136] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.219614][ T9807] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.241576][ T9807] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.335904][T10685] tipc: Resetting bearer [ 177.368981][T10709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1156'. [ 177.404420][T10685] tipc: Disabling bearer [ 177.592449][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.610209][T10723] tap0: linktype set to 0 [ 177.618830][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 177.651256][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.669138][T10723] tap0: linktype set to 0 [ 177.674315][T10725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1161'. [ 177.684206][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.689777][T10723] tap0: linktype set to 0 [ 177.703116][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.716096][T10723] tap0: linktype set to 0 [ 177.722126][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.742913][T10723] tap0: linktype set to 0 [ 177.752905][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.758272][T10723] tap0: linktype set to 0 [ 177.774033][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.781621][T10723] tap0: linktype set to 0 [ 177.799050][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.833299][T10723] tap0: linktype set to 0 [ 177.837937][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.851124][T10723] tap0: linktype set to 0 [ 177.856086][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.871639][T10723] tap0: linktype set to 0 [ 177.876613][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.892159][T10723] tap0: linktype set to 0 [ 177.902465][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.924949][T10723] tap0: linktype set to 0 [ 177.929565][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 177.952222][T10723] tap0: linktype set to 0 [ 177.988361][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.022894][T10723] tap0: linktype set to 0 [ 178.027620][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.052943][T10723] tap0: linktype set to 0 [ 178.060420][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.066544][T10723] tap0: linktype set to 0 [ 178.071206][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.076912][T10723] tap0: linktype set to 0 [ 178.081548][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.086996][T10723] tap0: linktype set to 0 [ 178.091675][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.097332][T10723] tap0: linktype set to 0 [ 178.101993][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.124328][T10723] tap0: linktype set to 0 [ 178.133369][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.141617][T10723] tap0: linktype set to 0 [ 178.146537][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.152054][T10723] tap0: linktype set to 0 [ 178.157162][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.162665][T10723] tap0: linktype set to 0 [ 178.167508][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.173055][T10723] tap0: linktype set to 0 [ 178.177764][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.183587][T10723] tap0: linktype set to 0 [ 178.188299][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.199570][T10723] tap0: linktype set to 0 [ 178.204725][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.211259][T10723] tap0: linktype set to 0 [ 178.216493][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.222052][T10723] tap0: linktype set to 0 [ 178.230189][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.236492][T10723] tap0: linktype set to 0 [ 178.241178][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.247078][T10723] tap0: linktype set to 0 [ 178.251864][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.258596][T10723] tap0: linktype set to 0 [ 178.293981][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.321954][T10723] tap0: linktype set to 0 [ 178.348830][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.375944][T10723] tap0: linktype set to 0 [ 178.390739][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.407979][T10723] tap0: linktype set to 0 [ 178.428691][T10723] tap0: tun_chr_ioctl cmd 1074025677 [ 178.444072][T10723] tap0: linktype set to 0 [ 178.617623][T10782] netlink: 'syz.0.1178': attribute type 6 has an invalid length. [ 178.654291][T10782] netlink: 'syz.0.1178': attribute type 6 has an invalid length. [ 178.799679][T10790] __nla_validate_parse: 7 callbacks suppressed [ 178.799698][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 178.874021][T10790] nbd: illegal input index -1113835520 [ 178.950039][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1180'. [ 179.019405][T10790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.260648][T10814] xfrm0 speed is unknown, defaulting to 1000 [ 179.898212][T10843] syzkaller0: entered promiscuous mode [ 179.907213][T10843] syzkaller0: entered allmulticast mode [ 179.951230][T10850] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1196'. [ 179.975208][T10850] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 179.985223][T10852] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 180.006266][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 180.027084][T10852] bond6: entered promiscuous mode [ 180.032619][T10852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.170071][T10852] bond6: (slave veth9): making interface the new active one [ 180.177436][T10852] veth9: entered promiscuous mode [ 180.193466][T10852] bond6: (slave veth9): Enslaving as an active interface with an up link [ 180.361519][T10867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1199'. [ 180.534257][T10875] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 180.545787][T10875] team0: Port device dummy0 added [ 180.589021][T10875] netlink: 'syz.4.1203': attribute type 10 has an invalid length. [ 180.684184][T10875] team0: Port device dummy0 removed [ 180.693959][T10875] dummy0: entered promiscuous mode [ 180.699767][T10875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.898297][T10888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1206'. [ 180.941164][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1208'. [ 181.131011][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1208'. [ 181.312220][T10917] xfrm0 speed is unknown, defaulting to 1000 [ 181.367950][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.611218][T10922] xfrm0 speed is unknown, defaulting to 1000 [ 181.986162][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 181.998847][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1219'. [ 182.008733][T10935] netlink: 'syz.1.1219': attribute type 2 has an invalid length. [ 182.397968][T10947] xfrm0 speed is unknown, defaulting to 1000 [ 182.954612][T10958] xfrm0 speed is unknown, defaulting to 1000 [ 184.443604][ T30] audit: type=1800 audit(1769598180.287:2): pid=10995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1232" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1254 res=0 errno=0 [ 184.747094][T11013] lo: Caught tx_queue_len zero misconfig [ 184.787995][T11016] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 185.009523][T11032] __nla_validate_parse: 7 callbacks suppressed [ 185.009541][T11032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'. [ 185.035930][T11032] netem: change failed [ 185.041642][T11032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 185.180081][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 185.386928][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 185.759771][T11080] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1254'. [ 185.787523][T11074] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1256'. [ 185.943710][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 186.463307][T11092] syzkaller0: entered promiscuous mode [ 186.484266][T11092] syzkaller0: entered allmulticast mode [ 186.575451][T11095] netlink: 'syz.3.1257': attribute type 13 has an invalid length. [ 186.790787][ T78] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.791951][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 186.809587][ T78] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.827332][ T78] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 186.848349][ T78] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 187.048605][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1270'. [ 187.110247][T11130] syzkaller0: entered promiscuous mode [ 187.116987][T11130] syzkaller0: entered allmulticast mode [ 187.228946][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 187.437703][T11151] macvtap2: entered promiscuous mode [ 187.450195][T11151] bridge0: entered promiscuous mode [ 187.460407][T11151] macvtap2: entered allmulticast mode [ 187.466089][T11151] bridge0: entered allmulticast mode [ 187.472180][T11151] bridge0: port 1(macvtap2) entered blocking state [ 187.499517][T11151] bridge0: port 1(macvtap2) entered disabled state [ 187.525107][T11151] bridge0: left allmulticast mode [ 187.530154][T11151] bridge0: left promiscuous mode [ 187.688297][T11168] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 187.731951][T11168] bond6: entered promiscuous mode [ 187.737867][T11168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.565457][T11230] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 189.568059][T11238] xfrm0 speed is unknown, defaulting to 1000 [ 190.023487][ T9] IPVS: starting estimator thread 0... [ 190.114144][T11269] IPVS: using max 26 ests per chain, 62400 per kthread [ 190.207287][T11273] __nla_validate_parse: 7 callbacks suppressed [ 190.207304][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 190.208333][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 190.239790][T11274] xfrm0 speed is unknown, defaulting to 1000 [ 190.777749][T11298] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.918817][T11303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1309'. [ 190.941377][T11309] syzkaller0: entered promiscuous mode [ 190.982955][T11309] syzkaller0: entered allmulticast mode [ 191.099463][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'. [ 191.190448][T11313] xfrm0 speed is unknown, defaulting to 1000 [ 191.397377][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 193.228646][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 193.276798][T11370] macvtap2: entered promiscuous mode [ 193.282116][T11370] bridge0: entered promiscuous mode [ 193.302433][T11370] macvtap2: entered allmulticast mode [ 193.313397][T11370] bridge0: entered allmulticast mode [ 193.880307][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 193.910991][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 193.922197][T11406] æÿîÿ: entered promiscuous mode [ 193.961608][T11408] netlink: 'syz.0.1329': attribute type 2 has an invalid length. [ 193.973571][T11408] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 194.003767][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 194.056412][T11410] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 194.120159][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326848][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 194.361935][T11411] tap0: tun_chr_ioctl cmd 1074025677 [ 194.368217][T11411] tap0: linktype set to 769 [ 194.391901][T11426] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 194.909575][T11438] xfrm0 speed is unknown, defaulting to 1000 [ 194.946723][T11446] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 195.004276][T11446] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 195.133095][T11450] macvlan2: entered promiscuous mode [ 195.148121][T11450] macvlan2: entered allmulticast mode [ 195.174341][T11450] vlan1: entered promiscuous mode [ 195.195932][T11450] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 195.217142][T11453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.279595][T11460] bond3: (slave ip6gretap2): making interface the new active one [ 195.297693][T11460] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 195.331335][T11467] __nla_validate_parse: 1 callbacks suppressed [ 195.331350][T11467] netlink: 63 bytes leftover after parsing attributes in process `syz.3.1339'. [ 195.796679][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 195.963627][T11508] syzkaller0: entered promiscuous mode [ 195.979140][T11508] syzkaller0: entered allmulticast mode [ 196.111708][T11519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1351'. [ 196.197202][ T5843] Bluetooth: hci2: command 0x0401 tx timeout [ 196.197242][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 196.203471][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 196.831759][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'. [ 196.882488][ T5943] IPVS: starting estimator thread 0... [ 196.973314][T11548] IPVS: using max 27 ests per chain, 64800 per kthread [ 197.032452][T11544] xfrm0 speed is unknown, defaulting to 1000 [ 197.543850][T11574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.873670][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 197.882567][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 198.111190][T11590] delete_channel: no stack [ 198.266933][T11614] bond7: entered promiscuous mode [ 198.272013][T11614] bond7: entered allmulticast mode [ 198.285191][ T5846] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 198.287917][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 198.305050][T11614] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.443192][T11625] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 198.503641][T11633] tipc: Enabling of bearer rejected, failed to enable media [ 198.669591][T11637] bridge0: entered promiscuous mode [ 198.675249][T11637] bridge0: entered allmulticast mode [ 198.844963][T11649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1372'. [ 198.959871][T11659] ieee802154 phy1 wpan1: encryption failed: -90 [ 199.181227][T11669] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1375'. [ 199.598541][T11702] x_tables: ip_tables: ah match: only valid for protocol 51 [ 199.632038][T11703] vxcan2: entered allmulticast mode [ 199.800695][T11706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1383'. [ 199.816591][T11717] netlink: 'syz.4.1386': attribute type 4 has an invalid length. [ 199.822514][T11702] xfrm0 speed is unknown, defaulting to 1000 [ 199.826537][T11717] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1386'. [ 200.202296][T11731] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.340282][T11744] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 200.657917][T11754] __nla_validate_parse: 1 callbacks suppressed [ 200.657932][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 200.677366][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 200.829038][T11763] netlink: 'syz.4.1399': attribute type 8 has an invalid length. [ 200.855682][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 200.891914][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 200.935506][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 200.976764][T11770] syzkaller0: entered promiscuous mode [ 200.991602][T11770] syzkaller0: entered allmulticast mode [ 201.035164][T11765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1398'. [ 201.269384][T11765] xfrm0 speed is unknown, defaulting to 1000 [ 201.328193][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 201.545106][T11788] syzkaller0: entered promiscuous mode [ 201.582079][T11788] syzkaller0: entered allmulticast mode [ 201.750697][T11800] netlink: 'syz.0.1406': attribute type 3 has an invalid length. [ 201.780280][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 202.065081][T11818] netlink: 'syz.1.1410': attribute type 66 has an invalid length. [ 202.079898][T11818] netlink: 'syz.1.1410': attribute type 4 has an invalid length. [ 202.185524][T11821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1412'. [ 202.204836][T11821] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1412'. [ 202.277248][T11821] netlink: 'syz.2.1412': attribute type 27 has an invalid length. [ 202.714438][T11839] lo speed is unknown, defaulting to 1000 [ 202.720474][T11839] lo speed is unknown, defaulting to 1000 [ 202.755009][T11839] lo speed is unknown, defaulting to 1000 [ 202.780807][T11843] nbd: must specify at least one socket [ 202.806294][T11845] smc: removing ib device syz1 [ 202.837320][T11839] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.880741][T11839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.058970][T11839] lo speed is unknown, defaulting to 1000 [ 203.171568][T11866] --map-set only usable from mangle table [ 203.174544][T11853] bond4: Removing last ns target with arp_interval on [ 203.215864][T11839] lo speed is unknown, defaulting to 1000 [ 203.233974][T11839] lo speed is unknown, defaulting to 1000 [ 203.301382][T11839] lo speed is unknown, defaulting to 1000 [ 203.465172][T11839] lo speed is unknown, defaulting to 1000 [ 203.721571][T11896] bridge_slave_0: entered promiscuous mode [ 203.728147][T11896] bridge_slave_0: entered allmulticast mode [ 204.768098][T11936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.843413][T11936] bond0: (slave bond1): Enslaving as an active interface with an up link [ 204.871724][T11942] gretap0: entered promiscuous mode [ 204.926269][T11937] gretap0: left promiscuous mode [ 204.987963][T11937] syz_tun: left promiscuous mode [ 205.017691][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.031233][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.046855][T11937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.112138][T11947] bridge0: entered promiscuous mode [ 205.156946][T11947] macvtap1: entered promiscuous mode [ 205.163038][T11947] macvtap1: entered allmulticast mode [ 205.168438][T11947] bridge0: entered allmulticast mode [ 205.178921][T11947] bridge0: port 3(macvtap1) entered blocking state [ 205.188554][T11947] bridge0: port 3(macvtap1) entered disabled state [ 205.199072][T11947] bridge0: left allmulticast mode [ 205.205168][T11947] bridge0: left promiscuous mode [ 205.316814][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.667206][T11985] netlink: 'syz.1.1456': attribute type 1 has an invalid length. [ 205.679332][T11985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.697054][T11988] __nla_validate_parse: 9 callbacks suppressed [ 205.697069][T11988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1455'. [ 205.698652][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 205.716640][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 205.752627][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1455'. [ 205.778097][T11992] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 205.803552][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 205.809687][T11990] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1455'. [ 205.822109][T11992] SET target dimension over the limit! [ 205.870595][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 205.959783][T12007] tipc: Failed to remove unknown binding: 66,1,1/0:3805571881/3805571883 [ 205.972261][T12008] tipc: Failed to remove unknown binding: 66,1,1/0:3805571881/3805571883 [ 206.173500][T12020] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 206.194040][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.274102][ T9805] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.458489][T12027] lo speed is unknown, defaulting to 1000 [ 206.539536][T12038] netlink: 'syz.2.1472': attribute type 12 has an invalid length. [ 206.806325][T12045] Cannot find set identified by id 65534 to match [ 207.040483][T12059] netlink: 'syz.1.1478': attribute type 3 has an invalid length. [ 207.101934][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 207.111619][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1480'. [ 207.124765][T12071] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 207.321287][T12076] lo speed is unknown, defaulting to 1000 [ 207.326361][ T65] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.351396][ T65] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.430903][ T5941] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 207.467764][T12062] lo speed is unknown, defaulting to 1000 [ 207.625388][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'. [ 207.914782][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 207.944008][T12121] netlink: 'syz.4.1492': attribute type 29 has an invalid length. [ 208.111506][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.119648][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.331575][T12143] lo speed is unknown, defaulting to 1000 [ 208.348534][T12138] lo speed is unknown, defaulting to 1000 [ 208.549894][T12157] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 208.592031][T12162] netlink: 'syz.2.1505': attribute type 2 has an invalid length. [ 209.043742][T12192] lo speed is unknown, defaulting to 1000 [ 209.063925][T12195] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 209.175697][T12199] netlink: 'syz.2.1515': attribute type 20 has an invalid length. [ 209.202818][T12199] netlink: 'syz.2.1515': attribute type 21 has an invalid length. [ 209.825046][T12223] lo speed is unknown, defaulting to 1000 [ 209.855829][T12230] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 209.968464][T12230] vlan0: left promiscuous mode [ 210.079011][T12236] Cannot find add_set index 3 as target [ 210.375145][T12248] bridge0: left allmulticast mode [ 210.380190][T12248] bridge0: left promiscuous mode [ 210.538364][T12262] netlink: get zone limit has 4 unknown bytes [ 210.545227][T12261] netlink: get zone limit has 4 unknown bytes [ 210.720507][ T9807] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 210.844590][T12259] IPVS: set_ctl: invalid protocol: 92 100.1.0.255:20003 [ 210.890776][T12271] tipc: Enabling of bearer rejected, failed to enable media [ 210.902187][T12271] __nla_validate_parse: 8 callbacks suppressed [ 210.902201][T12271] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1532'. [ 210.929700][T12271] macvlan0: entered allmulticast mode [ 210.939664][T12271] veth1_vlan: entered allmulticast mode [ 211.144064][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.250246][T12291] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1539'. [ 211.574680][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 211.585668][ T9805] nci: nci_rx_work: unknown MT 0x7 [ 212.044784][T12349] lo speed is unknown, defaulting to 1000 [ 212.355940][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 212.439157][T12360] validate_nla: 1 callbacks suppressed [ 212.439174][T12360] netlink: 'syz.4.1559': attribute type 6 has an invalid length. [ 212.491261][T12361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.541169][ T10] lo speed is unknown, defaulting to 1000 [ 212.587611][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 214.835163][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 214.966301][T12459] netlink: 171000 bytes leftover after parsing attributes in process `syz.2.1586'. [ 215.281754][T12464] netlink: 'syz.4.1588': attribute type 2 has an invalid length. [ 215.350050][T12475] lo speed is unknown, defaulting to 1000 [ 215.625035][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 215.660709][T12472] lo speed is unknown, defaulting to 1000 [ 215.693761][T12485] syzkaller1: entered promiscuous mode [ 215.699260][T12485] syzkaller1: entered allmulticast mode [ 215.833088][T12503] veth0: entered promiscuous mode [ 215.867567][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 215.967888][T12503] veth0 (unregistering): left promiscuous mode [ 216.326528][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 216.375992][T12532] IPVS: Scheduler module ip_vs_ not found [ 216.381910][T12531] IPVS: length: 24 != 12312 [ 216.459179][T12536] x_tables: duplicate underflow at hook 1 [ 216.720887][T12555] netlink: 'syz.0.1605': attribute type 13 has an invalid length. [ 216.990980][T12555] tipc: Enabling of bearer rejected, failed to enable media [ 217.070233][T12573] lo speed is unknown, defaulting to 1000 [ 217.121189][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 217.184474][T12576] vlan1: entered allmulticast mode [ 217.189854][T12576] veth0_vlan: entered allmulticast mode [ 217.215406][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 217.458211][T12597] sctp: [Deprecated]: syz.0.1615 (pid 12597) Use of int in maxseg socket option. [ 217.458211][T12597] Use struct sctp_assoc_value instead [ 217.678093][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 217.816127][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 217.957099][T12621] tipc: Enabled bearer , priority 0 [ 217.967240][T12621] syzkaller0: MTU too low for tipc bearer [ 217.973966][T12621] tipc: Disabling bearer [ 218.071487][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 218.087313][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 218.105075][T12633] bridge0: entered allmulticast mode [ 218.154649][T12638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1626'. [ 218.467861][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1631'. [ 218.663145][T12675] syzkaller1: entered promiscuous mode [ 218.683089][T12675] syzkaller1: entered allmulticast mode [ 218.950204][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 219.039015][T12688] bond2: entered promiscuous mode [ 219.049310][T12688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.689813][T12719] tipc: Enabled bearer , priority 0 [ 220.053631][T12728] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 220.147293][T12731] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 220.219448][T12718] tipc: Disabling bearer [ 220.389941][T12742] lo speed is unknown, defaulting to 1000 [ 220.734524][ T78] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.763942][ T78] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.788920][ T78] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.802872][ T78] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.457000][T12795] __nla_validate_parse: 14 callbacks suppressed [ 221.457018][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 221.522525][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 221.576333][T12799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 222.422510][T12788] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 222.443135][T12788] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 222.491425][T12788] bond1: left promiscuous mode [ 222.503250][T12788] bond1: left allmulticast mode [ 222.601722][T12788] sit2: left allmulticast mode [ 222.631867][T12788] xfrm1: left allmulticast mode [ 222.656755][T12788] geneve2: left promiscuous mode [ 222.824622][T12803] lo speed is unknown, defaulting to 1000 [ 222.852322][T12818] lo speed is unknown, defaulting to 1000 [ 222.899601][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 223.099872][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1681'. [ 223.373927][T12854] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 223.397206][T12854] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1688'. [ 223.450372][T12854] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1688'. [ 223.463449][T12854] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 223.475548][T12855] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1688'. [ 223.483681][T12854] netlink: 'syz.0.1688': attribute type 8 has an invalid length. [ 223.496621][T12854] netlink: 582 bytes leftover after parsing attributes in process `syz.0.1688'. [ 223.526528][T12859] syzkaller0: entered promiscuous mode [ 223.532028][T12859] syzkaller0: entered allmulticast mode [ 223.551186][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 224.240473][T12901] team0 (unregistering): Port device team_slave_0 removed [ 224.250552][T12910] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 224.279722][T12901] team0 (unregistering): Port device team_slave_1 removed [ 224.851390][T12946] lo speed is unknown, defaulting to 1000 [ 225.292758][T12812] IPVS: starting estimator thread 0... [ 225.382911][T12967] IPVS: using max 30 ests per chain, 72000 per kthread [ 225.735896][ T5817] udevd[5817]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.739552][T12995] openvswitch: netlink: Invalid VLAN frame [ 225.754724][ T5820] udevd[5820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.877514][T13005] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 225.888591][T13005] bond0: (slave sit0): Error -95 calling set_mac_address [ 225.940319][T13005] netlink: zone id is out of range [ 225.948863][T13005] netlink: zone id is out of range [ 226.033830][T13010] syzkaller0: entered promiscuous mode [ 226.039330][T13010] syzkaller0: entered allmulticast mode [ 226.077835][T13011] tipc: Enabled bearer , priority 0 [ 226.117463][T13009] tipc: Resetting bearer [ 226.140597][T13009] tipc: Disabling bearer [ 226.366510][T13038] ipt_ECN: cannot use operation on non-tcp rule [ 226.414843][T13039] veth11: entered promiscuous mode [ 226.610723][T13056] syzkaller1: entered promiscuous mode [ 226.616332][T13056] syzkaller1: entered allmulticast mode [ 226.641687][T13059] __nla_validate_parse: 18 callbacks suppressed [ 226.641704][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 226.711521][T13064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1749'. [ 226.724417][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1749'. [ 226.748174][T13064] netlink: 'syz.4.1749': attribute type 13 has an invalid length. [ 226.827645][T13069] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1753'. [ 226.837744][T13069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.990734][T13078] netlink: 64106 bytes leftover after parsing attributes in process `syz.2.1756'. [ 227.086277][T13083] tipc: Enabling of bearer rejected, failed to enable media [ 227.113681][T13084] bridge0: entered promiscuous mode [ 227.523927][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 227.536359][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 227.545933][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 227.555491][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 227.569767][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 227.855838][T13131] netlink: 'syz.2.1772': attribute type 25 has an invalid length. [ 227.856004][T13132] netlink: 'syz.2.1772': attribute type 25 has an invalid length. [ 227.974070][T13137] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 228.059961][T13144] netlink: 'syz.2.1776': attribute type 11 has an invalid length. [ 228.080492][T13135] netlink: set zone limit has 4 unknown bytes [ 228.911821][T13188] bridge_slave_1: left allmulticast mode [ 228.938892][T13188] bridge_slave_1: left promiscuous mode [ 228.961391][T13188] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.005490][T13188] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.228834][T13214] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 229.237718][T13214] bridge1: entered allmulticast mode [ 229.291969][T13220] netlink: 'syz.2.1799': attribute type 39 has an invalid length. [ 229.377937][T13227] syzkaller0: entered promiscuous mode [ 229.384279][T13227] syzkaller0: entered allmulticast mode [ 229.401866][T13225] lo speed is unknown, defaulting to 1000 [ 229.817796][T13241] IPVS: Error connecting to the multicast addr [ 230.088810][T13278] netlink: 'syz.4.1812': attribute type 2 has an invalid length. [ 230.122599][T13278] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 230.621620][T13307] lo speed is unknown, defaulting to 1000 [ 230.693703][T13320] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 231.364813][T13370] netlink: 'syz.1.1839': attribute type 12 has an invalid length. [ 231.410879][T13369] syzkaller0: entered promiscuous mode [ 231.417286][T13369] syzkaller0: entered allmulticast mode [ 232.829739][T13414] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 232.971372][T13425] __nla_validate_parse: 20 callbacks suppressed [ 232.971390][T13425] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1851'. [ 233.012407][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 233.067050][T13429] lo speed is unknown, defaulting to 1000 [ 233.105749][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 233.116940][T13427] lo speed is unknown, defaulting to 1000 [ 233.220713][T13451] netlink: 'syz.0.1857': attribute type 11 has an invalid length. [ 233.459050][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 233.468340][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 233.575058][T13467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1862'. [ 233.679173][ T30] audit: type=1804 audit(1769598229.537:3): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1864" name="/newroot/378/cgroup.controllers" dev="tmpfs" ino=1952 res=1 errno=0 [ 233.705565][T13469] lo speed is unknown, defaulting to 1000 [ 233.741581][ T30] audit: type=1800 audit(1769598229.557:4): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1864" name="cgroup.controllers" dev="tmpfs" ino=1952 res=0 errno=0 [ 233.872864][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 234.551571][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'. [ 234.716731][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 234.962098][T13545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'. [ 235.068522][T13550] lo speed is unknown, defaulting to 1000 [ 235.872755][T13578] IPVS: length: 90 != 8 [ 236.004139][T13582] block nbd1: server does not support multiple connections per device. [ 236.045228][T13582] block nbd1: shutting down sockets [ 236.087667][T13588] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 236.124161][T13580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.174104][T13586] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 236.413047][T13610] FAULT_INJECTION: forcing a failure. [ 236.413047][T13610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.453683][T13610] CPU: 0 UID: 0 PID: 13610 Comm: syz.2.1903 Not tainted syzkaller #0 PREEMPT(full) [ 236.453728][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.453751][T13610] Call Trace: [ 236.453758][T13610] [ 236.453766][T13610] dump_stack_lvl+0xe8/0x150 [ 236.453794][T13610] should_fail_ex+0x412/0x560 [ 236.453821][T13610] _copy_to_user+0x31/0xb0 [ 236.453849][T13610] simple_read_from_buffer+0xe1/0x170 [ 236.453873][T13610] proc_fail_nth_read+0x1bb/0x230 [ 236.453901][T13610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.453928][T13610] ? rw_verify_area+0x2a6/0x4d0 [ 236.453952][T13610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.453977][T13610] vfs_read+0x20c/0xa70 [ 236.453999][T13610] ? fdget_pos+0x246/0x320 [ 236.454030][T13610] ? __pfx___mutex_lock+0x10/0x10 [ 236.454052][T13610] ? __pfx_vfs_read+0x10/0x10 [ 236.454077][T13610] ? __fget_files+0x2a/0x420 [ 236.454100][T13610] ? __fget_files+0x3a0/0x420 [ 236.454118][T13610] ? __fget_files+0x2a/0x420 [ 236.454144][T13610] ksys_read+0x150/0x270 [ 236.454170][T13610] ? __pfx_ksys_read+0x10/0x10 [ 236.454205][T13610] do_syscall_64+0xe2/0xf80 [ 236.454226][T13610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.454243][T13610] ? trace_irq_disable+0x37/0x100 [ 236.454259][T13610] ? clear_bhb_loop+0x60/0xb0 [ 236.454281][T13610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.454298][T13610] RIP: 0033:0x7f327075b78e [ 236.454314][T13610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.454330][T13610] RSP: 002b:00007f326e9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.454350][T13610] RAX: ffffffffffffffda RBX: 00007f326e9f66c0 RCX: 00007f327075b78e [ 236.454364][T13610] RDX: 000000000000000f RSI: 00007f326e9f60a0 RDI: 0000000000000004 [ 236.454376][T13610] RBP: 00007f326e9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.454388][T13610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.454399][T13610] R13: 00007f3270a16038 R14: 00007f3270a15fa0 R15: 00007ffccd2c6a28 [ 236.454429][T13610] [ 236.750697][T13616] bond0: Caught tx_queue_len zero misconfig [ 236.969295][T13604] [ 236.971655][T13604] ====================================================== [ 236.978666][T13604] WARNING: possible circular locking dependency detected [ 236.985682][T13604] syzkaller #0 Not tainted [ 236.990090][T13604] ------------------------------------------------------ [ 236.997094][T13604] syz.4.1902/13604 is trying to acquire lock: [ 237.003151][T13604] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 237.012731][T13604] [ 237.012731][T13604] but task is already holding lock: [ 237.020084][T13604] ffff888024a1cca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 237.030372][T13604] [ 237.030372][T13604] which lock already depends on the new lock. [ 237.030372][T13604] [ 237.040767][T13604] [ 237.040767][T13604] the existing dependency chain (in reverse order) is: [ 237.049770][T13604] [ 237.049770][T13604] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 237.058384][T13604] blk_alloc_queue+0x52f/0x610 [ 237.063667][T13604] __blk_mq_alloc_disk+0x197/0x390 [ 237.069301][T13604] nbd_dev_add+0x499/0xb50 [ 237.074244][T13604] nbd_init+0x168/0x1f0 [ 237.078922][T13604] do_one_initcall+0x250/0x840 [ 237.084215][T13604] do_initcall_level+0x104/0x190 [ 237.089656][T13604] do_initcalls+0x59/0xa0 [ 237.094488][T13604] kernel_init_freeable+0x2a6/0x3d0 [ 237.100185][T13604] kernel_init+0x1d/0x1d0 [ 237.105025][T13604] ret_from_fork+0x51b/0xa40 [ 237.110126][T13604] ret_from_fork_asm+0x1a/0x30 [ 237.115396][T13604] [ 237.115396][T13604] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 237.122590][T13604] fs_reclaim_acquire+0x71/0x100 [ 237.128033][T13604] prepare_alloc_pages+0x152/0x650 [ 237.133646][T13604] __alloc_frozen_pages_noprof+0x12f/0x380 [ 237.139953][T13604] __alloc_pages_noprof+0xa/0x30 [ 237.145391][T13604] pcpu_populate_chunk+0x182/0xb30 [ 237.151001][T13604] pcpu_alloc_noprof+0xc4a/0x18d0 [ 237.156524][T13604] xt_percpu_counter_alloc+0x161/0x220 [ 237.162494][T13604] translate_table+0x134a/0x2110 [ 237.167937][T13604] ipt_register_table+0x11b/0x7f0 [ 237.173465][T13604] iptable_mangle_table_init+0x41/0x70 [ 237.179427][T13604] xt_find_table_lock+0x30c/0x3e0 [ 237.184960][T13604] xt_request_find_table_lock+0x26/0x100 [ 237.191102][T13604] do_ipt_get_ctl+0x716/0x1240 [ 237.196367][T13604] nf_getsockopt+0x26e/0x290 [ 237.201467][T13604] ip_getsockopt+0x19e/0x230 [ 237.206557][T13604] do_sock_getsockopt+0x2d3/0x3f0 [ 237.212087][T13604] __x64_sys_getsockopt+0x1a4/0x240 [ 237.217789][T13604] do_syscall_64+0xe2/0xf80 [ 237.222796][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.229200][T13604] [ 237.229200][T13604] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 237.236914][T13604] __lock_acquire+0x15a5/0x2cf0 [ 237.242280][T13604] lock_acquire+0x106/0x330 [ 237.247287][T13604] __mutex_lock+0x19f/0x1300 [ 237.252381][T13604] pcpu_alloc_noprof+0x272/0x18d0 [ 237.257908][T13604] sbitmap_init_node+0x1e1/0x640 [ 237.263356][T13604] sbitmap_queue_init_node+0x3e/0x4d0 [ 237.269239][T13604] blk_mq_init_tags+0x15c/0x2d0 [ 237.274594][T13604] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 237.280560][T13604] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 237.286869][T13604] nbd_start_device+0x17f/0xb10 [ 237.292227][T13604] nbd_genl_connect+0x165b/0x1cf0 [ 237.297758][T13604] genl_family_rcv_msg_doit+0x22a/0x330 [ 237.303810][T13604] genl_rcv_msg+0x61c/0x7a0 [ 237.308815][T13604] netlink_rcv_skb+0x232/0x4b0 [ 237.314080][T13604] genl_rcv+0x28/0x40 [ 237.318564][T13604] netlink_unicast+0x80f/0x9b0 [ 237.323827][T13604] netlink_sendmsg+0x813/0xb40 [ 237.329092][T13604] ____sys_sendmsg+0xa68/0xad0 [ 237.334359][T13604] ___sys_sendmsg+0x2a5/0x360 [ 237.339539][T13604] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.344981][T13604] do_syscall_64+0xe2/0xf80 [ 237.349988][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.356381][T13604] [ 237.356381][T13604] other info that might help us debug this: [ 237.356381][T13604] [ 237.366585][T13604] Chain exists of: [ 237.366585][T13604] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 237.366585][T13604] [ 237.380215][T13604] Possible unsafe locking scenario: [ 237.380215][T13604] [ 237.387642][T13604] CPU0 CPU1 [ 237.392984][T13604] ---- ---- [ 237.398324][T13604] lock(&q->q_usage_counter(io)#50); [ 237.403686][T13604] lock(fs_reclaim); [ 237.410169][T13604] lock(&q->q_usage_counter(io)#50); [ 237.418046][T13604] lock(pcpu_alloc_mutex); [ 237.422528][T13604] [ 237.422528][T13604] *** DEADLOCK *** [ 237.422528][T13604] [ 237.430646][T13604] 6 locks held by syz.4.1902/13604: [ 237.435820][T13604] #0: ffffffff8fa19230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 237.443991][T13604] #1: ffffffff8fa19048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 237.452937][T13604] #2: ffff8880250fa1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 237.464313][T13604] #3: ffff8880250fa0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 237.475256][T13604] #4: ffff888024a1cca0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 237.485948][T13604] #5: ffff888024a1ccd8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 237.496900][T13604] [ 237.496900][T13604] stack backtrace: [ 237.502767][T13604] CPU: 1 UID: 0 PID: 13604 Comm: syz.4.1902 Not tainted syzkaller #0 PREEMPT(full) [ 237.502784][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 237.502793][T13604] Call Trace: [ 237.502799][T13604] [ 237.502806][T13604] dump_stack_lvl+0xe8/0x150 [ 237.502825][T13604] print_circular_bug+0x2e1/0x300 [ 237.502842][T13604] check_noncircular+0x12e/0x150 [ 237.502859][T13604] __lock_acquire+0x15a5/0x2cf0 [ 237.502884][T13604] ? kernel_text_address+0xa5/0xe0 [ 237.502907][T13604] ? pcpu_alloc_noprof+0x272/0x18d0 [ 237.502922][T13604] lock_acquire+0x106/0x330 [ 237.502940][T13604] ? pcpu_alloc_noprof+0x272/0x18d0 [ 237.502957][T13604] __mutex_lock+0x19f/0x1300 [ 237.502975][T13604] ? pcpu_alloc_noprof+0x272/0x18d0 [ 237.502988][T13604] ? stack_depot_save_flags+0x3f3/0x810 [ 237.503008][T13604] ? kasan_save_track+0x4f/0x80 [ 237.503020][T13604] ? kasan_save_track+0x3e/0x80 [ 237.503032][T13604] ? pcpu_alloc_noprof+0x272/0x18d0 [ 237.503045][T13604] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 237.503060][T13604] ? blk_mq_init_tags+0x83/0x2d0 [ 237.503078][T13604] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 237.503093][T13604] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 237.503110][T13604] ? __pfx___mutex_lock+0x10/0x10 [ 237.503125][T13604] ? genl_rcv+0x28/0x40 [ 237.503143][T13604] ? ____sys_sendmsg+0xa68/0xad0 [ 237.503162][T13604] ? ___sys_sendmsg+0x2a5/0x360 [ 237.503185][T13604] pcpu_alloc_noprof+0x272/0x18d0 [ 237.503205][T13604] sbitmap_init_node+0x1e1/0x640 [ 237.503228][T13604] sbitmap_queue_init_node+0x3e/0x4d0 [ 237.503250][T13604] blk_mq_init_tags+0x15c/0x2d0 [ 237.503270][T13604] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 237.503285][T13604] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.503302][T13604] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 237.503319][T13604] ? kfree+0x1be/0x650 [ 237.503336][T13604] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 237.503355][T13604] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 237.503378][T13604] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 237.503399][T13604] ? sysfs_add_file_mode_ns+0x259/0x300 [ 237.503419][T13604] nbd_start_device+0x17f/0xb10 [ 237.503441][T13604] ? device_create_file+0xf4/0x1b0 [ 237.503462][T13604] nbd_genl_connect+0x165b/0x1cf0 [ 237.503484][T13604] ? __pfx_nbd_genl_connect+0x10/0x10 [ 237.503507][T13604] ? rcu_is_watching+0x15/0xb0 [ 237.503523][T13604] ? __nla_parse+0x40/0x60 [ 237.503542][T13604] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 237.503565][T13604] genl_family_rcv_msg_doit+0x22a/0x330 [ 237.503587][T13604] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.503610][T13604] ? __lock_acquire+0x6b5/0x2cf0 [ 237.503631][T13604] genl_rcv_msg+0x61c/0x7a0 [ 237.503652][T13604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.503670][T13604] ? __pfx_nbd_genl_connect+0x10/0x10 [ 237.503692][T13604] netlink_rcv_skb+0x232/0x4b0 [ 237.503708][T13604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.503727][T13604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.503741][T13604] ? genl_rcv+0x19/0x40 [ 237.503763][T13604] ? down_read+0x272/0x2e0 [ 237.503780][T13604] ? genl_rcv+0xd/0x40 [ 237.503797][T13604] genl_rcv+0x28/0x40 [ 237.503814][T13604] netlink_unicast+0x80f/0x9b0 [ 237.503831][T13604] ? __pfx_netlink_unicast+0x10/0x10 [ 237.503845][T13604] ? netlink_sendmsg+0x650/0xb40 [ 237.503859][T13604] ? skb_put+0x11b/0x210 [ 237.503877][T13604] netlink_sendmsg+0x813/0xb40 [ 237.503901][T13604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.503917][T13604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.503935][T13604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.503951][T13604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.503966][T13604] ____sys_sendmsg+0xa68/0xad0 [ 237.503984][T13604] ? __might_fault+0xaf/0x130 [ 237.504005][T13604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.504026][T13604] ? import_iovec+0x73/0xa0 [ 237.504047][T13604] ___sys_sendmsg+0x2a5/0x360 [ 237.504065][T13604] ? __lock_acquire+0x6b5/0x2cf0 [ 237.504084][T13604] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.504105][T13604] ? futex_wake+0x4ac/0x580 [ 237.504126][T13604] ? __fget_files+0x2a/0x420 [ 237.504142][T13604] ? __fget_files+0x3a0/0x420 [ 237.504166][T13604] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.504185][T13604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.504207][T13604] ? rcu_is_watching+0x15/0xb0 [ 237.504225][T13604] do_syscall_64+0xe2/0xf80 [ 237.504240][T13604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.504255][T13604] ? trace_irq_disable+0x37/0x100 [ 237.504269][T13604] ? clear_bhb_loop+0x60/0xb0 [ 237.504284][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.504298][T13604] RIP: 0033:0x7fd04259aeb9 [ 237.504312][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.504325][T13604] RSP: 002b:00007fd043507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.504340][T13604] RAX: ffffffffffffffda RBX: 00007fd042815fa0 RCX: 00007fd04259aeb9 [ 237.504351][T13604] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 237.504361][T13604] RBP: 00007fd042608c1f R08: 0000000000000000 R09: 0000000000000000 [ 237.504370][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.504379][T13604] R13: 00007fd042816038 R14: 00007fd042815fa0 R15: 00007fff6d65d808 [ 237.504396][T13604] [ 238.100162][ T5832] block nbd1: Receive control failed (result -32) [ 238.102838][ T5846] block nbd1: Receive control failed (result -32) [ 238.113613][ T5846] block nbd1: Receive control failed (result -32)