last executing test programs: 2.815167266s ago: executing program 0 (id=7909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f0000000140), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.227859184s ago: executing program 1 (id=7915): socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006a004d792abd7000fbdb0f"], 0x18}}, 0x24044000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @vsock={0x28, 0x0, 0x0, @local}, @isdn={0x22, 0x1, 0xf, 0x7f, 0x81}, @isdn={0x22, 0x0, 0x5, 0x6, 0x33}, 0x3, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000180)='hsr0\x00', 0x3, 0x9, 0x8}) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.053104133s ago: executing program 1 (id=7917): unshare(0x2c020400) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000080)=0x80000001, 0x4) 2.013754931s ago: executing program 0 (id=7918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) unshare(0x6020400) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r2, &(0x7f0000000180)}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x100000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000c2e639c8b12e1da0cf0ffa80c08723e2382f1c53d5dd2ff2ce24a67825accf804803e3114e03fb8e38a2e30f41ee33b805f48dd2b9bf0e7c3a0a7d44703c9042c9ca6602aace19b4fe6d8cff521493b54cd521e3ff0de0ac414480b167ab0d4cb53759af9cc49086e361b4a60d20423500b61e68afba1c7ad5524b4674be5e00bbac2ded5e4962c0c098f44bd7", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x8810) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000640)={{}, {0x9}, 0x4b, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)="77e1adf94315708be05187c7c883a6b1e64a904c34cadcde73ca0cbb020575b1a79fa696f1c11099031048c9e811b8827bd80f5adff3799cd19f9b706ead071a869b79c1b9a50a1ff7eca4b7fa772930b58893caefe6d128004e46a352523639b8114fc971d1491b727ede1baca23072edd9b39a8aa3dcbaf89ddf3c9f8669129b282f02", 0x84, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1bc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffffff00000000000000089500000000020000ad"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0xc5) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet(r7, &(0x7f0000000140)='^', 0x1, 0x2000004, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 1.915360206s ago: executing program 3 (id=7920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x6}, 0x8) socket$packet(0x11, 0x2, 0x300) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$alg(r5, 0x0, 0x0, 0x800) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x96c4}, 0x8) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003a52d1c3bf74e88638de74bb8537c18d3b26e75260484c92fa6e25b00c5246ddd01510c926e34bb878cb18b4d738ec88c334b52a55df5d2a2e1acb7b4c709800bfe103fe91fdc81bfbc62813933b128f202615944b0d1167ea1d44e3598a8a0a6d9d30469d295dc9f8478e6a200efa4a4bc91e6fef24b1b81d70648b75f770d82c7d9c9a3c184592a1dadfe05a2340d338d100cce972", @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r11, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) shutdown(r11, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(r8, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0xfffffffffffffef2) 1.836909492s ago: executing program 1 (id=7922): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x234, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}, [@INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "6f9c4e8e7bd7acc909d92c8765386df478fffb029788cce133cec727ba85a24c05ec60434a1dee1964ec3b546072510bd00e5c68cb41173e444b79"}, @INET_DIAG_REQ_BYTECODE={0x44, 0x1, "cc31c3c727f4379f52d600fc8c00c2878a9aa41b9fb24b912f15db50f860d53d0ade9a057af82468b89b1f3a490724963a96e6e1b32c4a54038556c27dfa9044"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "63677acdc4f1197e14498d404e277fe267e985c1c1d1a2617854b422c1d05728bfc3403a73b2cf432eb83338eb46ef1f001c57cb35f03cc011c7b9f6183afa4c63a03efa5e3c8f0a943263dd7aa6486ba41c9e5d006198c2965f167d7696f96fbb9b8c4ac341df82c4e4bf80414e4dd20cc69ffd220536ae7f7df229453c67422bdc84843c10098b15fe0e650814b515a9f7b8b3530ddc9c1c4252a28bbf424fa0af4d17b5"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "516364c594f20212a8bb38655b71e5d4a74968230ba9c4dbf6198f23c04ba9d5ae110aabf36f825f8282303e6b603400005862ac62c79f5defacb2b8eb9db0d1b9496d8651bdf495aaa2b09ce9dc32d8996f963011b06c2f79c2e4816b7aecc7836ba91f0ac95f6c02b4ba2f6b828bea86e768e6b134e91a0241aa2604d474bcbf29ef150b3cefac7b20e5e27b1a46dabef5becb0bbb15c071f90898b809007730b2dac4ab40c0ad520a9545b9de091c3dba02667ee35f053dad765543136bca73eb8f39420009f21c17107d9ee4fb21b2ce030d91e2570e8a98eaec50b7066b0800850e2cb9643c819a40e8"}]}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0xa002a014}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000380)={{r1, &(0x7f0000000040)='!^@)@\x00', 0x2a0281, &(0x7f00000000c0)={@align=0x4, {0x5, 0x3ff, 0x41, 0xe8}}, 0x3ff, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000580)=0x40}, 0x5, &(0x7f00000009c0)=[{0x1, 0x6, &(0x7f00000002c0)='mangle\x00', &(0x7f0000000300)="35059ecedffff6164116228479cecf866637bebad3dc6c", 0x17, 0x38}, {0x2, 0xb4, &(0x7f00000001c0)='-(^.@:!/[\x00', &(0x7f0000000480)="4b5aebf8631ddc5d5275daf0bb4b33402c8a7aa92def7b88227fa255b09ce1d2088c457eb310ac6466c8004c9f271673e0b90a812b90b0e5dc9d8ae9a1961d4ab5bcb802ace06a0caeab5afe29b842768e9f9e46f44d598c1d97155e732e9318eea94ddb1d323832a434d1717bdbc8804fe0b04ffa81042a5ea36d6ffa35ae82c5081c615a769c6d737e2d08a11ad624194cb395922a5fcbf7a321", 0x9b, 0x1de92fb2a91e3cfd}, {0x1, 0x2, &(0x7f0000000280)='[^*\'%\x00', &(0x7f0000000600)="444f636964e01306b94db25d0fe572b6200313785d6244beda3eea1dd9143fd5f31fae94d0624c57a289491aedff2b997c0acda7dfe92b4d72e3b73410721dd724eefd86a3072f493f0e5d3b2d212f8bd8f43caedf3887ea736127280ec2ba62dc185462e13f72e04d745ff3288da3368a19fa6dbfe0d54c55fb30bd3182981cbc1dc593612ae34e341eb4b37127068219b0abbc22dce5d5bb1e79e73be789fb47e103d01f9d3402e15d95c9f206b36569b76cedb001d463cf15d28dd83026f95f813a2c3e79f12a582defa12e1649836dce0e9a9e1187762504c8df96bb754f6f", 0xe1}, {0x2, 0x27e, &(0x7f0000000700)='\']\x00', &(0x7f0000000840)="563112b039dc59fa4272ea643cfc75c02fe7d7f29c1dcc0681ca929b0b72c29cf9ef42e3b388aeba4e9e3b7249a57333c3874d92dcca7b6253e16cdd64b355b4d6d875ca8f19898d729a112d97cc288cb371da", 0x53, 0x10}, {0x1, 0x5, &(0x7f0000000340)='GPL\x00', &(0x7f0000000940)="3fc39ec8b9863a3efc2daed927857763af4ddaa390bdaac6d4cd1948ee6aca4585e7690dc5c8dd1db05f863335fe8e2651d9dfdef4fa99847cb3bec62e998d9064c6a4087685a0fb1771258820189296bf89224a146cee0b4123f12f6ca7df450b8bf6f522bd5c32", 0x68, 0x12}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) unshare(0x2c020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000000040)=r9, 0x4) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}, 0x14) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a80)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000010000000004000000f47e6aebb5abfdf267ec65a23a421c819f286175e640f3e88d090a37366426978f887426dac8cdf757c1a5bb89863da925ec3bd355afebf5a5bb097e20c7dd83d0bf577582779acc09ad74ce135338337b409ba40ef50a34adf748a906bf436b6d0e27c379f3e93476c14e870af2aa40ec70f343531ff40a46ef647d2f8889c6a64eb77a89"], &(0x7f0000000100)=0x28) 1.673033738s ago: executing program 3 (id=7924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dvmrp1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x31}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x10044005) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1.448953636s ago: executing program 3 (id=7928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003ec0)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.367646107s ago: executing program 4 (id=7929): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x5, 0x4b, "3cab0a48b93af7ae4be2bad696f90582f1021b20d573405321bc485390ee5ac57161fc44b82d6eccbb388447bdde23b7665f90b6f309a3d71fd4a84b96d28c", 0x25}, 0x80) sendto$inet(r0, 0x0, 0x0, 0xc0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.319293396s ago: executing program 4 (id=7930): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xa0, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x88}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x180}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc0f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7d86}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc890}, 0x40801) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x5) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfee4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.230660685s ago: executing program 2 (id=7931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000040)={0x32, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x20000, {0xa, 0x40, 0x22, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x4) socket(0x10, 0x803, 0x0) 1.082885406s ago: executing program 3 (id=7932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000006b529dc798aad79a148f5c9be97c85cc4322b512bcdf1d7f3421f20ed9eea0e40140e78d53b43f05e30855875d82f77821ee0ebafbee83ceff2e209000"/77, @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25230000000a0001007770616e34000000050023000e0000000500270007000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 1.042697777s ago: executing program 4 (id=7933): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8010, 0xffffffffffffffff, 0x31cac000) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbe5a01879af26bbbbbb6696eeee2a8186dd6100000000103a0000000000000000000000000000000000ff01000000000000000000000000000186009078ff2d06009909000032590000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@RTM_NEWMDB={0x18, 0x54, 0x300, 0x70bd29, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="91c3a179c9527507458e2d200000001473ce00bb6afecf5ef200010028", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x7, 0x46, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x1, 0x700, 0x9a, 0x5}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x808, 0xa4b6, 0x1, 0xf}, 0xb, 0x4, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00P\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250400000060000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030005000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r6, @ANYBLOB], 0x74}}, 0x8000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007"], 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8402040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r8], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x44881) 1.0413167s ago: executing program 2 (id=7934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r8, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="02042cbd7000fddbdf25100000003c00018008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f746f5f6873720000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="22000700ff2abf7ec6e87065d25788a2913757577619ae90000000"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b400000010000004000000008000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000540034801400350074756e6c3000000000000000000000001400350064766d727030000000000000000000001400350064766d72703100000000000000000000140035cb697036746e6c3000000000000000000008001b000500000000000000ffffffffffff000008002900cd4e060014003500626f6e645f736c6176655f3100000000080004000400000008001b0000001c00"], 0xb4}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000060a01020000000000000000000000080c000640000000000000000508000b40000000040c000640000000000000000214000580080002400000000408000240000000120900020073797a31000000004c000000090a01030000000000000000070000000900010073797a07000000000800044000000004080005408000000408000a4000000001090002"], 0xc8}}, 0x8c0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000980)={{r4, &(0x7f00000003c0)='\x00', 0x64300, &(0x7f0000000400)={@align=0xa0000000000000, {0x650, 0x3ff, 0x5, 0x3e}}, 0x5, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000540)=0x7e1}, 0x3, &(0x7f0000000900)=[{0x3, 0x1, &(0x7f0000000580)='bridge\x00', &(0x7f00000005c0)="d705ac5a2ad109b7760bd42e8fa40e8a7116789389b93fd650aa78b2736791df37b621b4c06042d3a0be5888c6d1c0c146467291a72da152eb5989b67aa2d03a8c51dd2679cfeef916f6645b08c4c18408b2c0a604c718580c08903a30daceb17a590ef500da7e3f6368449ec6bddc871f10404738dbdf84ae3f8bcbb97829bf390a8ff9aa2aada70bcbb47f746d3446917526312ae100937fa531adc39b4fa73a159c2c", 0xa4}, {0x2, 0x8000, &(0x7f0000000680)='&\x00', &(0x7f0000000780)="0e0967e076e0accd9d00d9d6e79ed3e04d7d3fc56b4b585bb347156e86fd544f74c335d084fa8eb8ff7d1e02612f1cc4a973274b0e4e9038232b0a4f3aff57ea00e2dad75fd6e3d14f2bd09cdb5dbcde6880db8c41944044037ccd9d8c252403420cbbe6deffa2db8f94cf96473d0fb56caeffa60a0d536bfc3eb35ab0657fce90448feee6e5e5ef6bae8c0941502494d3a8d6e5d557fdb2f56a492aef14e98d6f84e61a8b179431efc6998943c5d675f9d08cd4650b4dbef84cb4636a", 0xbd, 0x18}, {0x1, 0x6, &(0x7f0000000840)='\x00', &(0x7f0000000880)="49d74028ed32cc14b12db43d3f7cdc18ef106f4b23d6431a183c6c6902e0fb39642819924735a0d94d697f0e39d421fab32bdc3db28e4169710914f8a4983ef43aacc128e341373a28ac7f1d620bbddde6d3c7bc85adf9b61ece7ce7ecbfb2068c", 0x61}]}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000304001300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c000200160000001f00000006000100fc0f000008000500", @ANYRES32=r13, @ANYBLOB="0800ef56", @ANYRES32=r13, @ANYBLOB], 0x58}}, 0x40488c4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x204000, 0x0) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="480000002e0001c6000000000000000005001980340011802e"], 0x48}, {&(0x7f0000000c40)={0xe4, 0x22, 0x10, 0x70bd24, 0x25dfdbff, "", [@nested={0x18, 0x139, 0x0, 0x1, [@typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="35dba7ce2da64bea112fed1ce439178b09dbbab706db4e8b84ee1f1db033fa9c01ca3f77df588d0211532e7ef5dc06b6753ecf6af1540a0a3d1da54a09c5e079e821d9574eaeff432c6c49c63350e76e761f749ae1e78b2b5d2429779b63e2499534768f4d7f49", @generic="5c18894769f6dc05fa2a17286817eb31b14656146a7da2ca9a08467e3d3e63ebca1aa5693bf4dcaa57c3f4870587dc9cdb7f0862cd5b85cdb4efc9b922c3c16f2cf5a80893a4bf2c41ed6553c5fadbcbf25e82dd09"]}, 0xe4}, {&(0x7f0000000240)={0x18, 0x41, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x103, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x3, 0x0, 0x0, 0x84}, 0x300) 837.995522ms ago: executing program 0 (id=7935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r3, 0x431, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004e910}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r4, 0xfff) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r1}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r7, 0x1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) 706.569686ms ago: executing program 2 (id=7936): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x10, 0x9, 0xf, 0x0, 0x4, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @remote, 0x7fffffff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40000000}, @sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x7ff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x78}}, 0x4000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x7800, 0x700, 0x8, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', r2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2ddfdbfa, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x38}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}}, 0x0) 704.781607ms ago: executing program 3 (id=7937): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x10, 0x1}, {0xffff, 0x5}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r4, 0x29, 0x7f, 0xe, 0x6, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x8, 0xa}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x9, 0xc}, {0x3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20008000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000022c0)=@delchain={0x257c, 0x65, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0xa}, {0xd, 0x6}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xd2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0x1c}}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x397}, @filter_kind_options=@f_u32={{0x8}, {0xda0, 0x2, [@TCA_U32_ACT={0x544, 0x7, [@m_sample={0xf8, 0x18, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x60000, 0xa, 0x0, 0x4, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7f, 0x7f, 0x3, 0x80}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xfffffffc, 0x2, 0x2, 0x100}}]}, {0x72, 0x6, "834af220d50d1eb1867fe39f7ed8e5750bd0371ab5182491cbc5559af77c4b27b114c50b1ee8ed768229a2cf2fdcd5b73aeb119854abbb8ff3d032891d7a28ff4c29febd75a316f59df8d706fcef5dc6f00d76b2ca58703354e65d0665287f8ad93e35ff4e27ff13133410ac5334"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x108, 0x16, 0x0, 0x0, {{0xc}, {0x4}, {0xdc, 0x6, "9ef2adaadf65e816870bfc0e9a5a7eb4356d5a39d080013da7fe538f5de7266d4f627d15ff580d2c44e65e5cdbd51929c0091415dff0875640eba02f1ab2d60c6b28fbf71430372c5e3113873261710e763028f8e0e7087d112e4ed644b9d290e880bcf927ec183e608a318f1518475a968aed6351eacb66c614e72a3bb239b204db916ae62d731e2fb4a64b76563b02e575c23ebcdb8bb5477a4f398bf9a46d1a23624a39009144937031c7b80aef3dfd6fc6052a4f6a03e77362aae673726e5f3eedf8ddef8dd1a0d2bcdabdd8c816bbe0bda47a936d77"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x204, 0x12, 0x0, 0x0, {{0x7}, {0x150, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x9d, 0x6, {0x443a, 'security\x00', 0x8, 0x7, "5e6f3669acfba1e443bd14f01492d8ae445ced770b4ec7a96eda9be075d4cb4690fab3aae8005186f6bc8e449ffa5b929fdd27968441278c12664ce7365d2c94ab2a99320e9e4e7c155d8de0734d05f7cfbdf507dae8221868cd242908f32632bd63fd167c4b08ab5a3bd21dc6b4e4c5014046"}}, @TCA_IPT_TARG={0xa4, 0x6, {0xe61, 'security\x00', 0x6, 0x0, "7b39d4e9ca1ca00f1d79e63c97f024a555220092cb80e96180339a14beab7e90574cb570217fbfbdae7589f6c6cf701dc27770b074ac1d8bf1bfe5ce98b9b813ee9f65eecba93fa785e19f00bc62aac3cbb6c62c0b80fc194e1e27a74d3107edaa3027c655c870bdca63198aa90ff03ed24a1a2caa319a1161e4"}}]}, {0x8f, 0x6, "97c219099946d66e25fb586f80573e4d9026f3b610c23aa83b640399fa3c5470d8690a4c076c6c783508adffce5b81f249d9c17ab664339392db810bc79cba426f2ead96e8d298869efc36a282adef5d894d5d04fb02dc6537c3f831918e2d3e1dd217ba14a4e8b6ac66ba8167a7fa18bdc915fc2e9f78c80c7314688d66c9573763ea2f08374a8a232d8c"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x13c, 0x1c, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1d2ac0, 0x80000001, 0x0, 0x274, 0xa5d}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xd, 0x4, 0x3, 0x6}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xb3, 0x6, "5f09b7386ca11d2c500690902d74e2358a4057ae19d0cab26c937d584470df7cf78aa895f0177bee6fd14be38d1ccd517e93288240f4b772c182363791b9f2720e2a2de032d2cd720302096363126dbf8ce908325c7610ac46f5745068f224c424b9ef99867ab5759d2783cb0e15c83b45e9d99f42eae3ef76483d2acb93d861db82722063220374c2226ab70fe194fc2cc16f093001ca7b4920cc7c9ddedb5373b208b77f3e9b00941587dcb7b21b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x19c031c8, 0x0, 0xc7a5, 0x5, 0x408, {0xe, 0x2, 0xfff, 0x44d, 0x97, 0x3}, {0xc, 0x2, 0x9, 0x9, 0xa, 0x5}, 0x6, 0x101, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x200, 0x7, 0x2a6f6cc6, 0x200, 0x1, 0x5, 0x7, 0x40, 0x9, 0x8b90, 0x5, 0x8001, 0x19, 0x8001, 0x0, 0x1, 0x7, 0x80, 0x100, 0x10000, 0x2, 0x80000001, 0x7, 0xfff, 0x8, 0x839, 0x9, 0x1, 0x6, 0x7, 0x87, 0x9, 0x7f, 0xffffffff, 0x3, 0x8, 0x9, 0x10, 0x8001, 0x6, 0x5, 0x0, 0x4, 0x200, 0x1, 0xf, 0x8, 0x3, 0x4, 0x6d0, 0x1e58, 0x213, 0x7, 0x0, 0x5, 0x4e952b5d, 0xe, 0x0, 0x6, 0x0, 0x5f, 0x10000, 0x7f, 0x5, 0x2, 0x10, 0x8c, 0x8, 0x10000, 0x4, 0x5, 0x3, 0x7fff, 0x7, 0x3, 0x8, 0x8, 0xd2, 0x1ff, 0x101, 0xb6, 0xf, 0x1, 0x9, 0x7, 0xfff, 0x4, 0x6, 0xa820, 0x0, 0x8, 0xfffffff9, 0x0, 0x10000, 0x0, 0x4ab3, 0x81, 0x9, 0x1, 0xec69, 0x3, 0x0, 0xfffffffb, 0x0, 0x9, 0x7, 0x7, 0x3a1, 0x1, 0x3, 0x5, 0x3, 0xffff, 0x10001, 0x8000, 0x3, 0x0, 0x4, 0x6, 0x8001, 0x4, 0x6d, 0x3ff, 0x0, 0x91a, 0x6e55, 0x7, 0x5, 0x713, 0x1, 0x4, 0x101, 0x200, 0xad, 0x6e3e6d0b, 0x4, 0x1400, 0x6, 0x6, 0x3, 0x6, 0x56, 0x80000000, 0x7, 0xffff8001, 0x6, 0x2, 0x5, 0x2, 0x2, 0x3, 0x6a, 0x9962, 0x81, 0x800, 0x6, 0x3, 0xd, 0x81, 0x3, 0x8001, 0x9, 0xd08, 0x7, 0x0, 0x3, 0x80000001, 0x8, 0x1ff, 0x94, 0x7, 0x3, 0x0, 0x7, 0x89, 0x23, 0x9, 0xf0e6, 0x8, 0x5, 0xfffffff2, 0x10001, 0x0, 0xa, 0xfffffffe, 0x59d, 0x949, 0x9, 0x800, 0x6, 0x2, 0x5, 0x0, 0xffff, 0x8ac4, 0xfffffffd, 0x7f, 0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x80000001, 0x2, 0xe, 0x8, 0x3, 0x1, 0x6, 0x5, 0xffff, 0x9, 0x5, 0x1, 0x5b8e, 0x9, 0x5, 0x1759, 0x9, 0x5c26, 0x1, 0x4, 0x80000000, 0x3, 0x9, 0x8, 0xc, 0x0, 0x6, 0x3, 0x4, 0x1, 0x5, 0x35, 0xfdf5, 0x1, 0x80000000, 0x6, 0x6, 0xb8a2, 0xff, 0x0, 0x51, 0x1, 0x0, 0x2, 0x4, 0x3, 0x8, 0x0, 0x9, 0xfffffff9, 0x9, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x800, 0x7, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x6, 0x2, 0xffff, 0x2, 0xffff, 0x6, 0xffffffff, 0xfffffffc, 0x1, 0x8, 0x7ff, 0x10000, 0x3, 0x1, 0xe, 0x5, 0x8, 0x6, 0x7, 0x5f2, 0x637, 0x655, 0x5, 0x4, 0xff, 0x8, 0x8, 0x10001, 0x2, 0x3, 0x3, 0x7, 0x618, 0x6a, 0x1, 0x7ff, 0x2, 0x1af2d007, 0x80000000, 0x400, 0x1c622fa0, 0x1800000, 0xffff, 0x2f, 0x5, 0xfffffffd, 0xffff8000, 0x10001, 0x8000, 0x3, 0xfffffffe, 0x7, 0x200, 0x2, 0x82, 0x1, 0x3, 0x6, 0x4000000, 0x5e1, 0x8, 0x1, 0xf, 0x5, 0x8, 0xa0, 0x0, 0x15, 0xffffffff, 0x3, 0x7, 0x0, 0x1, 0xe158, 0x8, 0x3, 0x8001, 0x7, 0x9, 0xb, 0x97, 0x1, 0x5, 0x5, 0xfffffffd, 0x2, 0xffffffff, 0x9, 0x6, 0xffff8000, 0x4, 0xc226, 0xff, 0xa961b4f0, 0x6b, 0x2418, 0x7fff, 0xfffffc41, 0x1a0, 0x3, 0x6, 0x70, 0x0, 0x7, 0x1, 0x2, 0x7, 0x8e4, 0x186, 0xfffffffd, 0x6, 0x2, 0x3, 0x24ae658b, 0x380, 0x100, 0x8, 0x5, 0x46f7, 0x5, 0x100, 0x8, 0x5, 0x8, 0x1, 0xc, 0x5, 0x1ff, 0x3e5, 0x8, 0x2, 0xffff, 0x8000, 0x60000000, 0x1, 0x3, 0x7f, 0x8, 0x6, 0x9, 0xe, 0x1, 0x5, 0xfffffff5, 0x7, 0x1b, 0x2, 0xffffffff, 0x4, 0xefc0, 0x846, 0x5, 0x4, 0x4, 0x8, 0xfffffffd, 0x4, 0x200, 0xe, 0x7, 0x2, 0x1, 0xff, 0xfc37, 0x7, 0x2, 0x2, 0x7, 0x7, 0x0, 0xe7, 0x200, 0x8, 0xfffffff5, 0xfffffff8, 0x0, 0x800, 0x6, 0x0, 0xb, 0x5, 0x1, 0x3, 0xff, 0xf, 0x8, 0xffff, 0x8, 0x100, 0x96a6, 0xe, 0x9, 0x6f, 0xf, 0x9ba0, 0x8, 0xe6e, 0x5, 0xe3df, 0x2, 0xeb, 0xfffffd10, 0xee, 0x401, 0x98, 0x5, 0x6, 0x3, 0x7, 0x6, 0x5, 0x2, 0xd9, 0x6, 0x3, 0x7, 0xfffffffe, 0x10001, 0x1, 0x7, 0x4, 0xff, 0xc3c, 0x8, 0xffff2df8, 0x40, 0x1, 0x5, 0x80, 0x5f, 0x22, 0xfffff999, 0x7ff, 0x3, 0x101, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x5763a66b, 0x80000001, 0x450ddd56, 0x8, 0x9, 0x7fffffff, 0x6]}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xc4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}, @TCA_FLOWER_KEY_MPLS_OPTS={0x40, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x8, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x8}]}}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x4080}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x16f0, 0x2, [@TCA_MATCHALL_ACT={0x16e0, 0x2, [@m_csum={0x11c, 0x6, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xff, 0x5, 0x4, 0x6}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe9, 0x0, 0x4, 0xf99, 0x80}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x1, 0x8, 0x1, 0x1}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x0, 0x0, 0x7}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe644, 0x9, 0x4, 0x1, 0x9}, 0x1d}}]}, {0x63, 0x6, "5a49f0a30dd82b6ea20905e477ebcac0f87c7ccb42b1eea65bd47b8fa2f12a24289dec87f047f96dda4ffa06c0d8b6e7b175fec058101e9bb5e01b805884b0508423cbb851e5affa98263835261a05902cbb0331f1e9a1fb29f5965c10536f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x94, 0x1b, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x690}}]}, {0x59, 0x6, "378bd3d3344170d887ccf2c92803aac60d1564ada1b86e2d32e2f45a10a35b8e03d4ae7fa11c1e842ef860939424b688d2c1e57524de944c2f35e65c682b3848f4d50bde0d62db46f26560b41546b4ae21997406cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xd0, 0x8, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10, 0x0, 0x10000000, 0x2, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x4, 0x6, 0xd0f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7a, 0x4, 0x3, 0x10, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x80000001, 0x10000000, 0x2800, 0x40}}, @TCA_GACT_PARMS={0x18, 0x2, {0x22a, 0x6, 0x0, 0x3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x23a1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0x100, 0x4, 0x100, 0x3}}]}, {0x5, 0x6, "ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xe0, 0x5, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xe9f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7, 0xffffffffffffffff, 0x100, 0xc35}}]}, {0x72, 0x6, "357ded38e0625a3c714cd9fee0ebc9dbd012d5946c98b84d436c242ae1adf6b7eaa094e843d58a80e86e2504cb44bc7f66de4284d4a731d00d95c7fbed876283e42e195b6e77de7f52b74327cdc2ff1c553f558623f19407aff7b32926a7d5bdf06de12a382ae4198e3419701498"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x114, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x24c, 0x12000000, 0x2, 0x3, 0x4}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0xc2, 0x6, "73bd330308013ae589ec349e613c1b2e84a4f0db02ce6f6653692ab6b2d94a8bad373c57e3b9e8ea48de7615bc46f4c330be1f0c25cc200c1b704670d1894889520f2e10f7083fd2ae0540ee88a181bf5a49160223c4e8e1737afa939336d285def6f3ab650b3908ee132cac238c33ea6776ce62c685b9681e099dda1de20a64f1403535f4aa6e229a1ce004ad78c7259e5d2cc9f3af93663916ff1b3b85ec32ca4a5e52aff5e93fa367682c60e93218badbfdf6c4b9e2f5330e6e57f99d"}, {0xc}, {0xc}}}, @m_mirred={0x174, 0x1a, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x0, 0xffffffffffffffff, 0x3}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x3, 0x2, 0x80000000, 0x2}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x5, 0x7fffffff}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0x0, 0xee, 0x4}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf1b, 0xfffffffb, 0x20000000, 0x7fffffff, 0x5}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x1, 0x7ff, 0x7}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x0, 0x10000000, 0x2, 0xd}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x20000003, 0x9, 0x10}, 0x1, r4}}]}, {0x45, 0x6, "381a91ee21ef204e698fb524dc2a5f6a645fdec1ae3786d5d9b4084a3755e9bd6bee4838ee48448b09fc8f8c8e1ecc1fa98db6041aea5964376591d4d57394671f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x104c, 0x0, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xa8, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x5, 0x7}, 0x2, r4}}]}, {0x59, 0x6, "3ea95e88b2b693a085263464ce303df9d8e0288173d1f5949d5ba673f3b49253c5e3e2f3d345d0f1276b5cc1c4aab77af985f8795ae68ec3d36c67542c4dcb3f41da0bdecf7056742bd921e98d6e5dc03a40fc5ff7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x257c}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000001240)=""/4128, &(0x7f0000000000)=0x1020) r12 = socket$packet(0x11, 0x3, 0x300) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r16, {0x0, 0xffe0}, {0x5, 0xb}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0xa}, 0xb, 0x1, 0x32, 0x5, 0xd, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 669.38132ms ago: executing program 4 (id=7938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r1, &(0x7f0000000480), 0x10) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000080)={&(0x7f0000000040)=[{0x6, 0x100000000000f, 0x4, 0xa8}], 0x1, 0x20, 0x8, 0x4}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000bff1dedf614e"], 0x50}}, 0x0) 416.698865ms ago: executing program 0 (id=7939): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04f4", 0x2}], 0x1}}], 0x1, 0x4000040) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(0x4) getsockname$l2tp6(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0x3}}, 0x5, 0x7fff, 0x6, 0x8, 0x4, 0x7c6, 0x3}, &(0x7f0000000140)=0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x4}, &(0x7f00000001c0)=0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 360.778816ms ago: executing program 1 (id=7940): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x70}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="5800000014001971a155e9a9f6edff040d8c560a46580020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809dd00800010000100070c100000000200ffffffffbdaaf9c9d013ae66dc67128bf9ae769de150dca2b46da1049824a2e0e935d4de8829cc9206e3a39a2d182791d0f89ae55e056ac7f087c369fcfaf1e0b7e0874e056a0e4366f4e9175d00b076089a8f3ac9a674a0699167509b6d886edd372a5c9d2b8e9eb9b6dd45cff47e3b24e6f39b73e4000000000000000000de9cf2d8cf693a50853ceb2c7554ecf95f19c7", 0xdb}], 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 346.050645ms ago: executing program 4 (id=7941): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x7]}, {0x7, 0x169, 0x3, 0xffffffffffffe27c}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x3}) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) 250.268286ms ago: executing program 2 (id=7942): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x8}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002b40)={{r0, &(0x7f00000014c0)='*\x00', 0x185000, &(0x7f0000001500)={@align=0x100, {0xc, 0x1d94, 0x5}}, 0x200, &(0x7f0000001540)={@_ha_fsid}, &(0x7f0000002c40)=0x6}, {[0xdb33, 0x11b0000, 0xffffff81, 0x7]}, 0x3, 0x7d, &(0x7f0000002ac0)=""/125}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002bc0)=r1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002c00)=0xffffffffffffffff, 0x4) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000100)=""/192, 0xc0}], 0x2}, 0xfffffffc}, {{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)=""/138, 0x8a}], 0x2}, 0xfffffec9}, {{&(0x7f00000015c0)=@tipc=@name, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/121, 0x79}], 0x1, &(0x7f0000001700)=""/102, 0x66}, 0x5}, {{&(0x7f0000001780)=@ll, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/162, 0xa2}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002a00)=""/15, 0xf}}, {{&(0x7f0000002a40)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xa}, {{&(0x7f0000002c80)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000002e00)=""/59, 0x3b}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/41, 0x29}, {&(0x7f0000003f80)=""/139, 0x8b}, {&(0x7f0000004040)=""/200, 0xc8}], 0x5, &(0x7f00000041c0)=""/84, 0x54}, 0x7fff}, {{&(0x7f0000004240)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004400)=[{0x0}], 0x1}, 0xb784}], 0x8, 0x12, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740000000301040800000000000000000100000a080008400000512f0c00198008c3ae00240e0000080007400000000610001640000000000000000600000004f8cba765cbdb60d2000000001400018008000100ac1e010108000200ac1e01010c00028005000100010000000600034000010000"], 0x74}}, 0x4008840) 143.604614ms ago: executing program 0 (id=7943): socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d8ba7c43"]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$unix(0x1, 0x1, 0x0) socket(0x40000000015, 0x805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r1], 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000004f0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xd, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 141.509593ms ago: executing program 2 (id=7944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000040)={0x32, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x20000, {0xa, 0x40, 0x22, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x4) socket(0x10, 0x803, 0x0) 138.200409ms ago: executing program 4 (id=7945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) connect$netlink(r4, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) write$tun(r2, &(0x7f00000001c0)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xfffffffffffffff3}}}}}}}, 0x3e) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x1}, {0x4, 0x8, 0x7, 0xb, 0x40008, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x2, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0xfffffffe, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf6, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0xffffffff, 0x6b}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b}], [{0x5}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x2, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) (async) connect$netlink(r4, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) (async) write$tun(r2, &(0x7f00000001c0)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xfffffffffffffff3}}}}}}}, 0x3e) (async) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x1}, {0x4, 0x8, 0x7, 0xb, 0x40008, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x2, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0xfffffffe, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf6, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0xffffffff, 0x6b}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b}], [{0x5}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x2, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) (async) 136.616436ms ago: executing program 1 (id=7946): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 32.860189ms ago: executing program 0 (id=7947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f8000008000200810000002400098008000200040000080002008000000008000200400000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) (async) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x2}}], 0x1, 0x200880d8) 15.046079ms ago: executing program 3 (id=7948): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1b, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x49, &(0x7f0000000140)=""/73, 0x40f00, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x5, 0x1, 0x1}], 0x10, 0xe}, 0x94) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000340)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe, r1, 0x9}, 0xc) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r3, 0x1, 0x6, @multicast}, 0x10) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x29, 0x81, 0xc, 0xffff0001, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8, 0x1}}) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000640)=0x1) (async) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000680)={0xffffffffffffffff}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@ipv4_getaddr={0x54, 0x16, 0x2, 0x70bd2a, 0x25dfdbff, {0x2, 0x80, 0x54}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x0, 0x200, 0x8}}, @IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20008014) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'team0\x00'}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xed}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x24}}, 0x20008080) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000940)=@req3={0xc7b, 0x200, 0x8, 0x5, 0xb, 0x3, 0x10}, 0x1c) (async) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x1ff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r7, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r0}, 0x20) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0xa, [@func={0xa, 0x0, 0x0, 0xc, 0x6}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1}]}, @struct={0x6, 0x8, 0x0, 0x4, 0x1, 0x6, [{0x5, 0x4, 0x9}, {0x6, 0x5, 0x40}, {0xb, 0x5, 0x6}, {0x10, 0x4, 0x401}, {0xb, 0x0, 0x7}, {0x4, 0x2}, {0x0, 0xe, 0x1}, {0x10, 0x4, 0x3}]}, @struct={0xd, 0xa, 0x0, 0x4, 0x0, 0x579e, [{0xc, 0x1, 0x2}, {0xe, 0x5, 0x7}, {0x1, 0x2, 0x7fff}, {0xb, 0x0, 0x6158d5c3}, {0x3, 0x3, 0x6}, {0x5, 0x1, 0x80000001}, {0x0, 0x1, 0xd7f8}, {0x9, 0x4, 0x401}, {0x3, 0x0, 0x5a83}, {0xb, 0x1, 0x40}]}, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @fwd={0x3}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x18, 0x4}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x2e, 0x0, 0x0, 0xa2e7497fd518376d]}}, &(0x7f0000000e00)=""/115, 0x182, 0x73, 0x0, 0xfffffbff}, 0x28) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)=r0}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001200)={r9, &(0x7f0000001100)='ip6tnl0\x00', 0x0, &(0x7f0000001140)={@align=0x6, {0x7, 0x4, 0x7, 0x5}}, 0x7fff, &(0x7f0000001180), &(0x7f00000011c0)=0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x2f, 0x17, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xfc, 0xc, 0x0, 0x1, 0xb4}, @alu={0x7, 0x0, 0xd, 0x1, 0xa, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x38, '\x00', r1, @fallback=0x20, r13, 0x8, &(0x7f0000000ec0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0xd, 0x8, 0x1fc000}, 0x10, 0x0, r0, 0x6, &(0x7f0000001240)=[0x1, r14, r15, r10, r16, r17], &(0x7f0000001280)=[{0x0, 0x3, 0x9, 0x6}, {0x4, 0x1, 0x9, 0x2}, {0x1, 0x3, 0xd, 0x1}, {0x0, 0x5, 0x1, 0x6}, {0x0, 0xba, 0x2}, {0x5, 0x2, 0xb, 0x3}], 0x10, 0x101}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET(r17, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x18, 0x1401, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4894) 4.431178ms ago: executing program 1 (id=7949): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a00001800028007001480"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010015000000400001802c000400140001000200fa00ac14140f00000000000000001400020002000000ffffffff000d010075647000"/64], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r3, 0x78967656d0a78869, 0x70bd25, 0x259fdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004004) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000b00)=""/192, 0xc0}], 0x2}, 0x40000000) (async) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=7950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001100)=ANY=[], 0x32600) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x7ff, {{0x2, 0x4e22, @multicast2}}}, 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000840)=0x1) kernel console output (not intermixed with test programs): e bridge4): Removing an active aggregator [ 769.656434][T10880] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 769.665964][T10880] bond4 (unregistering): (slave bridge4): the permanent HWaddr of slave - 4e:db:95:79:c5:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 769.686010][T10880] bridge4 (unregistering): left promiscuous mode [ 769.692350][T10880] bridge4 (unregistering): left allmulticast mode [ 769.717479][T10880] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 769.726111][T10880] bridge5 (unregistering): left promiscuous mode [ 769.732656][T10880] bridge5 (unregistering): left allmulticast mode [ 769.914377][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 769.922488][ C0] lec:lec_tx_timeout: lec0 [ 769.927224][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 769.998755][T10880] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 770.007075][T10880] bridge8 (unregistering): left promiscuous mode [ 770.152233][T10880] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 770.160656][T10880] bridge11 (unregistering): left promiscuous mode [ 770.167343][T10880] bridge11 (unregistering): left allmulticast mode [ 770.271565][T10880] bond0 (unregistering): Released all slaves [ 770.281910][T10880] bond1 (unregistering): Released all slaves [ 770.295774][T10880] bond2 (unregistering): Released all slaves [ 770.314209][T10880] bond3 (unregistering): Released all slaves [ 770.330002][T10880] bond4 (unregistering): Released all slaves [ 770.344903][T10880] bond5 (unregistering): Released all slaves [ 770.358683][T10880] bond6 (unregistering): Released all slaves [ 770.381151][T10880] bond7 (unregistering): Released all slaves [ 770.394797][T10880] bond8 (unregistering): Released all slaves [ 770.408402][T10880] bond9 (unregistering): Released all slaves [ 770.424848][T10880] bond10 (unregistering): Released all slaves [ 770.455621][T30632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.480081][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 770.500917][T30537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.514667][T30537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.593408][T30537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.632149][T30653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.646832][T30537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.669034][T30537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.739093][T30537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.772363][T10880] !: left promiscuous mode [ 770.910888][T10880] tipc: Disabling bearer [ 770.916469][T10880] tipc: Disabling bearer [ 770.926152][T10880] tipc: Left network mode [ 771.024517][ T5824] Bluetooth: hci0: command tx timeout [ 771.054953][T30537] hsr_slave_0: entered promiscuous mode [ 771.070540][T30537] hsr_slave_1: entered promiscuous mode [ 771.087566][T30537] debugfs: 'hsr0' already exists in 'hsr' [ 771.102611][T30537] Cannot create hsr debugfs directory [ 771.720852][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 771.779673][T30680] Bluetooth: MGMT ver 1.23 [ 771.792810][T30680] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.6285'. [ 771.935865][T30537] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.011697][T30685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.080342][T30537] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.258085][T30537] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.387854][T30537] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.742139][T30708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6289'. [ 772.837984][T30537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 772.864701][T30713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6290'. [ 772.867242][T30537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.884970][T30713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6290'. [ 772.899653][T30537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 772.939547][T30537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.967215][T30537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 772.987762][T30537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.005897][T30537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 773.020647][T30537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.114042][ T5824] Bluetooth: hci0: command tx timeout [ 773.215027][T30537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.279799][T30537] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.316874][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.324054][T10866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.371759][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.378969][T10866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.599316][T30748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6298'. [ 773.834002][T30752] netlink: 'syz.0.6299': attribute type 1 has an invalid length. [ 773.842354][T30752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.953916][T30760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6299'. [ 773.966469][T30537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.204113][T30537] veth0_vlan: entered promiscuous mode [ 774.238379][T30537] veth1_vlan: entered promiscuous mode [ 774.307619][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6303'. [ 774.341475][T30772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6303'. [ 774.354871][T30537] veth0_macvtap: entered promiscuous mode [ 774.372605][T30537] veth1_macvtap: entered promiscuous mode [ 774.419087][T30537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.467395][T30537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.521803][T29463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.578704][T29463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.623817][T29463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.684865][T29463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.720204][T10880] hsr_slave_0: left promiscuous mode [ 774.733244][T10880] hsr_slave_1: left promiscuous mode [ 774.758308][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6307'. [ 774.934346][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 774.944142][ C0] lec:lec_tx_timeout: lec0 [ 774.948848][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 775.034796][T30806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6309'. [ 775.184506][ T5824] Bluetooth: hci0: command tx timeout [ 775.196542][T30811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 775.706768][T30788] lo speed is unknown, defaulting to 1000 [ 775.918281][T10889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.947684][T10889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.058595][T10889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.063027][T10880] IPVS: stop unused estimator thread 0... [ 776.077219][T10889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.458264][T30856] openvswitch: netlink: IP tunnel dst address not specified [ 776.561514][T30859] netlink: 'syz.1.6255': attribute type 13 has an invalid length. [ 776.590788][T30856] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.598505][T30856] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.612677][T30859] netlink: 'syz.1.6255': attribute type 17 has an invalid length. [ 776.860021][T30856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.879807][T30856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.211769][T30859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.222863][T30859] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.239973][T30859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.262407][T10875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.287486][T10875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.351033][T30897] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 777.353246][T10866] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.371618][T10866] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.632463][T30913] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0 [ 777.955321][T30922] openvswitch: netlink: Flow actions attr not present in new flow. [ 777.971126][T30922] __nla_validate_parse: 4 callbacks suppressed [ 777.971144][T30922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6330'. [ 778.880100][T30951] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6338'. [ 778.903246][T30951] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6338'. [ 778.960854][T30951] netlink: 83 bytes leftover after parsing attributes in process `syz.4.6338'. [ 779.010053][T11056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.024461][T11056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.034909][T11056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.049003][T11056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.058273][T11056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.099582][T30952] lo speed is unknown, defaulting to 1000 [ 779.260584][T30963] netlink: 'syz.4.6342': attribute type 11 has an invalid length. [ 779.381806][T30963] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 779.611709][T30975] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6345'. [ 779.773735][T30952] chnl_net:caif_netlink_parms(): no params data found [ 779.904405][T30952] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.910229][T30989] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6348'. [ 779.911692][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.927104][T30992] siw: device registration error -23 [ 779.928697][T30952] bridge_slave_0: entered allmulticast mode [ 779.940892][T30952] bridge_slave_0: entered promiscuous mode [ 779.949865][T30952] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.957460][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.965845][T30952] bridge_slave_1: entered allmulticast mode [ 779.975607][T30952] bridge_slave_1: entered promiscuous mode [ 780.000944][T10889] smc: removing ib device syz1 [ 780.014142][T30989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.037544][T31000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6351'. [ 780.051402][T30989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.066201][T30989] bond0 (unregistering): Released all slaves [ 780.151358][T31006] syzkaller0: entered promiscuous mode [ 780.169342][T31006] syzkaller0: entered allmulticast mode [ 780.202250][T30952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.213805][T31007] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 780.246589][T30952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.505945][T31003] lo speed is unknown, defaulting to 1000 [ 780.508584][T30952] team0: Port device team_slave_0 added [ 780.621732][T30952] team0: Port device team_slave_1 added [ 780.784266][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 780.792392][ C0] lec:lec_tx_timeout: lec0 [ 780.797256][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 781.104635][T11056] Bluetooth: hci1: command tx timeout [ 781.157013][T31018] team_slave_0: entered promiscuous mode [ 781.159254][T31020] netlink: 'syz.1.6355': attribute type 1 has an invalid length. [ 781.162754][T31018] team_slave_1: entered promiscuous mode [ 781.170730][T31020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6355'. [ 781.225506][T31018] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 781.254945][T30952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.272148][T30952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.317999][T30952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.340601][T30952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.349511][T30952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.376876][T30952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.413449][T31016] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 781.708963][T31030] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20004 [ 781.797182][T30952] hsr_slave_0: entered promiscuous mode [ 781.815492][T30952] hsr_slave_1: entered promiscuous mode [ 781.842434][T30952] debugfs: 'hsr0' already exists in 'hsr' [ 781.853266][T30952] Cannot create hsr debugfs directory [ 781.867300][T31027] lo speed is unknown, defaulting to 1000 [ 782.380929][T31040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6360'. [ 782.509539][T30952] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.530293][T30952] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.635305][T30952] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.645397][T30952] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.718756][T30952] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.729412][T30952] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.807250][T31044] netlink: 'syz.2.6362': attribute type 2 has an invalid length. [ 782.819219][T30952] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.845586][T30952] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.892996][T31045] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 782.893620][T31044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6362'. [ 782.975917][T31044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6362'. [ 782.996110][T31044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6362'. [ 783.005256][T31044] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6362'. [ 783.105661][T30952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 783.118986][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.128369][T30952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 783.139495][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.149389][T30952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 783.168078][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.180853][T30952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 783.192259][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.194538][T11056] Bluetooth: hci1: command tx timeout [ 783.260399][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6363'. [ 783.308540][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6363'. [ 783.350078][T31062] netlink: 'syz.4.6364': attribute type 16 has an invalid length. [ 783.355392][T31059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6365'. [ 783.359323][T31062] netlink: 'syz.4.6364': attribute type 17 has an invalid length. [ 783.382286][T31059] nbd: must specify at least one socket [ 783.391739][T31059] nbd: couldn't find device at index 0 [ 783.421227][T31064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.510705][T31059] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 783.538641][T30952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.542324][T31067] netlink: 'syz.4.6367': attribute type 10 has an invalid length. [ 783.561065][T31069] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6368'. [ 783.566155][T31067] team0: Device veth1_macvtap failed to register rx_handler [ 783.580516][T31069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6368'. [ 783.612898][T31073] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6368'. [ 783.621367][T30952] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.630354][T31069] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6368'. [ 783.648218][T10889] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.655384][T10889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.678618][T10876] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.685815][T10876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.098272][T30952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.186238][T30952] veth0_vlan: entered promiscuous mode [ 784.219487][T30952] veth1_vlan: entered promiscuous mode [ 784.251167][T31103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.286993][T31103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.341062][T30952] veth0_macvtap: entered promiscuous mode [ 784.358066][T30952] veth1_macvtap: entered promiscuous mode [ 784.388220][T31110] bond0: entered promiscuous mode [ 784.397693][T31110] bond_slave_0: entered promiscuous mode [ 784.414594][T31110] bond_slave_1: entered promiscuous mode [ 784.426260][T31110] batadv0: entered promiscuous mode [ 784.443129][T31110] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 784.456462][T31110] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 784.471501][T31110] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 784.489221][T31110] bond0: left promiscuous mode [ 784.498731][T31110] bond_slave_0: left promiscuous mode [ 784.510110][T31110] bond_slave_1: left promiscuous mode [ 784.520646][T31110] batadv0: left promiscuous mode [ 784.546233][T31115] bridge1: entered promiscuous mode [ 784.551825][T31115] bridge1: entered allmulticast mode [ 784.587463][T30952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.612084][T30952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.674818][T10875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.697070][T10875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.721691][T10875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.735873][T10875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.959168][T10889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.987589][T10889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.111676][T29463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.142442][T29463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.266093][T11056] Bluetooth: hci1: command tx timeout [ 785.278140][T31140] netlink: 'syz.3.6388': attribute type 1 has an invalid length. [ 785.690360][T31162] netlink: 'syz.4.6394': attribute type 1 has an invalid length. [ 785.766841][T31162] erspan1: entered allmulticast mode [ 785.804262][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 785.812330][ C0] lec:lec_tx_timeout: lec0 [ 785.817354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 785.995205][T31179] lo speed is unknown, defaulting to 1000 [ 786.032298][T31172] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 786.195988][T31192] netlink: 'syz.3.6403': attribute type 7 has an invalid length. [ 786.212438][T31192] netlink: 'syz.3.6403': attribute type 8 has an invalid length. [ 786.262636][T31192] team0: entered promiscuous mode [ 786.278110][T31192] team_slave_0: entered promiscuous mode [ 786.295167][T31192] team_slave_1: entered promiscuous mode [ 786.320430][T31192] bond0: entered promiscuous mode [ 786.325846][T31192] bond_slave_0: entered promiscuous mode [ 786.331800][T31192] bond_slave_1: entered promiscuous mode [ 786.346487][T31192] gretap0: entered promiscuous mode [ 786.353646][T31192] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 786.365287][T31192] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 786.375576][T31192] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 786.389097][T31192] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 786.852074][T31219] hsr_slave_0: left promiscuous mode [ 786.869765][T31219] hsr_slave_1: left promiscuous mode [ 787.346228][T11056] Bluetooth: hci1: command tx timeout [ 788.031230][T31269] netlink: 'syz.4.6424': attribute type 32 has an invalid length. [ 788.039472][T31277] nbd: must specify at least one socket [ 788.181400][T31285] __nla_validate_parse: 17 callbacks suppressed [ 788.181418][T31285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6430'. [ 788.245611][T31288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 788.443946][T31304] tipc: Started in network mode [ 788.454371][T31304] tipc: Node identity , cluster identity 4711 [ 788.474571][T31304] tipc: Failed to obtain node identity [ 788.483936][T31304] tipc: Enabling of bearer rejected, failed to enable media [ 788.516634][T31304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6435'. [ 788.529473][T31304] 0猉功: renamed from caif0 [ 788.540793][T31304] 0猉功: entered allmulticast mode [ 788.548548][T31304] A link change request failed with some changes committed already. Interface 60猉功 may have been left with an inconsistent configuration, please check. [ 788.566168][T31308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6436'. [ 788.579776][T31308] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.6436'. [ 788.599053][T31308] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 788.847531][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6440'. [ 789.613096][T31369] netlink: 'syz.0.6453': attribute type 13 has an invalid length. [ 789.692583][T31373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6454'. [ 789.759634][T31380] netlink: 'syz.3.6457': attribute type 1 has an invalid length. [ 789.853904][T31380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.891571][T31380] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6457'. [ 789.926377][T31385] vlan3: entered promiscuous mode [ 789.931606][T31385] bond1: entered promiscuous mode [ 789.937770][T31385] vlan3: entered allmulticast mode [ 789.953875][T31385] bond1: entered allmulticast mode [ 789.990334][T31380] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 790.008456][T31380] bond1: (slave batadv1): making interface the new active one [ 790.021654][T31380] batadv1: entered promiscuous mode [ 790.028546][T31380] batadv1: entered allmulticast mode [ 790.036725][T31380] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 790.051933][T31393] macsec0: entered promiscuous mode [ 790.072526][T31393] macsec0: left promiscuous mode [ 790.097731][T31400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6461'. [ 790.108996][T31400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6461'. [ 790.118635][T31400] netlink: 'syz.1.6461': attribute type 5 has an invalid length. [ 790.338435][T31415] syzkaller0: entered promiscuous mode [ 790.346991][T31415] syzkaller0: entered allmulticast mode [ 790.459404][T31421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 790.824270][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 790.832490][ C0] lec:lec_tx_timeout: lec0 [ 790.837127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 791.207589][T31443] syzkaller1: entered promiscuous mode [ 791.224364][T31443] syzkaller1: entered allmulticast mode [ 791.614937][T31454] ipvlan1: entered promiscuous mode [ 791.622082][T31454] ipvlan1: left promiscuous mode [ 791.842774][T31472] veth0_macvtap: entered allmulticast mode [ 792.111539][T31491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 792.614610][T31521] nbd: couldn't find a device at index 65546 [ 792.622514][T31523] Cannot find add_set index 3 as target [ 792.703346][T31527] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 792.968079][T31547] bridge0: port 3(syz_tun) entered blocking state [ 792.977180][T31547] bridge0: port 3(syz_tun) entered disabled state [ 792.983906][T31547] syz_tun: entered allmulticast mode [ 792.991928][T31547] syz_tun: entered promiscuous mode [ 792.998175][T31547] bridge0: port 3(syz_tun) entered blocking state [ 793.004788][T31547] bridge0: port 3(syz_tun) entered forwarding state [ 793.109825][T31552] netlink: 'syz.1.6511': attribute type 6 has an invalid length. [ 793.203000][T31558] netlink: 'syz.0.6514': attribute type 29 has an invalid length. [ 793.732919][T31586] __nla_validate_parse: 8 callbacks suppressed [ 793.732939][T31586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6519'. [ 793.966104][T31594] "syz.2.6521" (31594) uses obsolete ecb(arc4) skcipher [ 794.061249][T31599] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6523'. [ 794.126783][T31600] lo speed is unknown, defaulting to 1000 [ 794.184065][T31599] IPVS: Scheduler module ip_vs_sip not found [ 794.333496][T31610] : renamed from bond_slave_0 [ 794.372332][T31614] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 794.665397][T31619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6528'. [ 794.676422][T31619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6528'. [ 794.692244][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.702752][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.713579][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.723016][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.732570][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.771971][T31634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6531'. [ 794.934529][T31638] lo speed is unknown, defaulting to 1000 [ 795.097376][T31652] netlink: 'syz.1.6536': attribute type 1 has an invalid length. [ 795.195182][T31657] netlink: 'syz.2.6538': attribute type 14 has an invalid length. [ 795.234814][T31657] netlink: 'syz.2.6538': attribute type 13 has an invalid length. [ 795.343498][T31665] siw: device registration error -23 [ 795.370829][T31663] openvswitch: netlink: Missing key (keys=40, expected=100) [ 795.406447][T31669] netlink: 'syz.3.6541': attribute type 15 has an invalid length. [ 795.844258][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 795.852326][ C0] lec:lec_tx_timeout: lec0 [ 795.857372][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 795.971783][T31694] tipc: Started in network mode [ 795.980912][T31694] tipc: Node identity ac14140f, cluster identity 4711 [ 795.997807][T31694] tipc: New replicast peer: 255.255.255.255 [ 796.022375][T31694] tipc: Enabled bearer , priority 26 [ 796.217517][T31696] netlink: 'syz.4.6550': attribute type 1 has an invalid length. [ 796.232568][T31704] lo speed is unknown, defaulting to 1000 [ 796.243272][T31703] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 796.668628][T31719] IPVS: Error connecting to the multicast addr [ 796.681029][T31718] IPVS: Error connecting to the multicast addr [ 796.737787][T31718] lo speed is unknown, defaulting to 1000 [ 797.072237][T31755] x_tables: unsorted underflow at hook 4 [ 797.103581][T31757] netlink: 'syz.4.6562': attribute type 21 has an invalid length. [ 797.124494][T23584] tipc: Node number set to 2886997007 [ 797.135341][T31757] netlink: 'syz.4.6562': attribute type 1 has an invalid length. [ 797.657846][T31769] lo speed is unknown, defaulting to 1000 [ 797.779550][T31779] netlink: 'syz.2.6568': attribute type 4 has an invalid length. [ 798.408455][T31799] IPVS: stopping backup sync thread 30532 ... [ 798.447090][T31802] lo speed is unknown, defaulting to 1000 [ 799.048792][T31814] bridge0: port 3(syz_tun) entered disabled state [ 799.104314][T31814] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.112061][T31814] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.507319][T31814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.541236][T31814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.881397][T31818] __nla_validate_parse: 18 callbacks suppressed [ 799.881416][T31818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6574'. [ 799.957904][T29463] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.986227][T29463] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.039390][T29463] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.130657][T29463] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.151540][T31844] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6578'. [ 800.160832][T31844] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6578'. [ 800.218889][T31844] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 800.575980][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.584016][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.598346][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.607051][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.616770][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.625060][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.634082][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.643858][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.654324][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.662197][T31869] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 800.671758][T31871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.711148][T31873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 800.864564][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 800.872612][ C0] lec:lec_tx_timeout: lec0 [ 800.877352][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 800.969426][T31891] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^侓&镒J?=\礫[国i5劄` [ 801.524038][T31930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 801.630362][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6600'. [ 801.695707][T31935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.779831][T31945] bond0: (slave gretap1): making interface the new active one [ 801.808156][T31945] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 801.971336][T31964] lo speed is unknown, defaulting to 1000 [ 801.994942][ T29] audit: type=1804 audit(1776580472.327:15): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6609" name="/newroot/83/memory.events" dev="tmpfs" ino=445 res=1 errno=0 [ 802.025494][ T29] audit: type=1800 audit(1776580472.347:16): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6609" name="memory.events" dev="tmpfs" ino=445 res=0 errno=0 [ 802.073047][T31967] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 802.088763][T31967] bond3 (unregistering): Released all slaves [ 802.122806][T31980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6611'. [ 802.157398][T31975] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6611'. [ 802.168696][T31975] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6611'. [ 802.369183][T31968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.391367][T31968] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.428699][T31968] A link change request failed with some changes committed already. Interface 60猉功 may have been left with an inconsistent configuration, please check. [ 802.554017][T31979] lo speed is unknown, defaulting to 1000 [ 802.700481][T32000] ip6tnl1: entered promiscuous mode [ 802.737679][T31998] lo speed is unknown, defaulting to 1000 [ 802.914391][T32010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6618'. [ 803.131649][T32017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6619'. [ 803.232058][T32015] tipc: Enabling of bearer rejected, media not registered [ 803.585375][T32025] syzkaller0: entered promiscuous mode [ 803.591218][T32037] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6623'. [ 803.597407][T32025] syzkaller0: entered allmulticast mode [ 803.629459][T32028] lo: entered allmulticast mode [ 803.637110][T32028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.894464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 805.902581][ C0] lec:lec_tx_timeout: lec0 [ 805.907334][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 806.637101][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 806.678532][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 806.756904][T32099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6639'. [ 807.002993][T32113] lo speed is unknown, defaulting to 1000 [ 807.046754][T32120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 807.078595][T32124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6643'. [ 807.131362][T32124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.146933][T32114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6643'. [ 807.164397][T32114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6643'. [ 807.354546][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6646'. [ 807.376118][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6646'. [ 807.458879][T32133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6647'. [ 807.538060][T32136] validate_nla: 47 callbacks suppressed [ 807.538077][T32136] netlink: 'syz.2.6648': attribute type 1 has an invalid length. [ 807.642335][T32136] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 808.019198][T32154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.318534][T32166] veth4: entered promiscuous mode [ 808.418340][T32169] lo speed is unknown, defaulting to 1000 [ 809.143571][T32207] tipc: Started in network mode [ 809.161052][T32207] tipc: Node identity edda405cb52055000000000000000001, cluster identity 4711 [ 809.180959][T32207] tipc: Enabling of bearer rejected, failed to enable media [ 809.247579][T32207] netlink: 'syz.3.6666': attribute type 39 has an invalid length. [ 809.723804][T32244] Bluetooth: MGMT ver 1.23 [ 810.215982][T32276] x_tables: duplicate underflow at hook 1 [ 810.226097][T32263] lo speed is unknown, defaulting to 1000 [ 810.239428][T32282] team0: Device tunl0 is up. Set it down before adding it as a team port [ 810.269803][T32282] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 810.668414][T32316] tipc: Started in network mode [ 810.678753][T32316] tipc: Node identity 2e536f7af8ca, cluster identity 4711 [ 810.694145][T32316] tipc: Enabled bearer , priority 0 [ 810.850772][T32316] syzkaller0: entered promiscuous mode [ 810.857345][T32316] syzkaller0: entered allmulticast mode [ 810.868120][T32316] tipc: Resetting bearer [ 810.902552][T32330] netlink: 'syz.4.6701': attribute type 11 has an invalid length. [ 810.914252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 810.922335][ C0] lec:lec_tx_timeout: lec0 [ 810.927347][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 811.158753][T10889] tipc: Resetting bearer [ 811.181472][T32315] tipc: Resetting bearer [ 811.217878][T32341] netlink: 'syz.3.6706': attribute type 1 has an invalid length. [ 811.246299][T32341] netlink: 'syz.3.6706': attribute type 1 has an invalid length. [ 811.579506][T32360] netlink: 'syz.1.6711': attribute type 1 has an invalid length. [ 811.589288][T32360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.382479][T32315] tipc: Disabling bearer [ 813.391247][T27403] tipc: Node number set to 3600379770 [ 813.400425][T32360] netlink: 'syz.1.6711': attribute type 1 has an invalid length. [ 813.591519][T32377] __nla_validate_parse: 23 callbacks suppressed [ 813.591536][T32377] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6715'. [ 813.607980][ T5935] IPVS: starting estimator thread 0... [ 813.716971][T32382] IPVS: using max 29 ests per chain, 69600 per kthread [ 814.017765][T32390] nbd1: detected capacity change from 0 to 63 [ 814.060788][T11056] block nbd1: Receive control failed (result -104) [ 814.242140][T32427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6731'. [ 814.262945][T32424] lo speed is unknown, defaulting to 1000 [ 814.408216][T32438] netlink: 'syz.1.6733': attribute type 1 has an invalid length. [ 814.425458][T32438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.879637][T32457] netlink: 'syz.3.6738': attribute type 2 has an invalid length. [ 814.890033][T32457] netlink: 'syz.3.6738': attribute type 8 has an invalid length. [ 814.910294][T32457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6738'. [ 815.216944][T32480] tipc: Started in network mode [ 815.246099][T32480] tipc: Node identity fff, cluster identity 10 [ 815.278932][T32480] tipc: Node number set to 4095 [ 815.466129][T32491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6748'. [ 815.475215][T32491] tipc: Started in network mode [ 815.480672][T32491] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 815.489293][T32491] tipc: Enabled bearer , priority 0 [ 815.517463][T32493] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 815.562398][T32493] netlink: 760 bytes leftover after parsing attributes in process `syz.4.6749'. [ 815.567433][T32498] netlink: 'syz.4.6749': attribute type 3 has an invalid length. [ 815.601118][T32493] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6749'. [ 815.627683][T32501] netlink: 'syz.0.6751': attribute type 1 has an invalid length. [ 815.744705][T11056] Bluetooth: hci4: command 0x0406 tx timeout [ 815.773150][T32505] lo speed is unknown, defaulting to 1000 [ 815.847889][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6753'. [ 815.877672][T32515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6753'. [ 815.934392][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 815.942485][ C0] lec:lec_tx_timeout: lec0 [ 815.949046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 816.000616][T32515] 8021q: VLANs not supported on lo [ 816.078727][T32522] netlink: 'syz.1.6754': attribute type 2 has an invalid length. [ 816.152868][T32528] netlink: 'syz.4.6757': attribute type 3 has an invalid length. [ 816.255200][T32533] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6758'. [ 816.274632][T32533] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6758'. [ 816.392563][T32535] netlink: 'syz.1.6759': attribute type 30 has an invalid length. [ 816.585515][T32542] lo speed is unknown, defaulting to 1000 [ 816.665108][T27403] tipc: Node number set to 10005162 [ 817.728905][T32573] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.736361][T32573] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.003649][T32573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.347196][T10889] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.374754][T10889] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.395991][T10889] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.413626][T10889] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.754268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 821.762288][ C0] lec:lec_tx_timeout: lec0 [ 821.767252][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 826.784422][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 826.792537][ C0] lec:lec_tx_timeout: lec0 [ 826.797237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 831.804286][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 831.812310][ C0] lec:lec_tx_timeout: lec0 [ 831.816932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 836.834266][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 836.842294][ C0] lec:lec_tx_timeout: lec0 [ 836.847126][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 837.600091][T32611] veth1_to_bond: entered allmulticast mode [ 837.625935][T32609] vlan2: entered promiscuous mode [ 837.631219][T32609] bond0: entered promiscuous mode [ 837.637083][T32609] bond_slave_0: entered promiscuous mode [ 837.643028][T32609] bond_slave_1: entered promiscuous mode [ 837.692830][T32617] __nla_validate_parse: 2 callbacks suppressed [ 837.692849][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.731556][T32611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6781'. [ 837.792424][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.826294][T32620] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.863207][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.895313][T32620] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.934465][T32620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 837.973444][T32611] veth1_to_bond (unregistering): left allmulticast mode [ 837.997193][T32611] bond0: (slave bond_slave_1): Releasing backup interface [ 838.005344][T32611] bond_slave_1 (unregistering): left promiscuous mode [ 838.149863][T32627] netlink: 165776 bytes leftover after parsing attributes in process `syz.1.6783'. [ 838.287795][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6784'. [ 838.411932][T32640] tipc: Trying to set illegal importance in message [ 838.420410][T32644] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6791'. [ 838.640161][T32655] validate_nla: 1 callbacks suppressed [ 838.640182][T32655] netlink: 'syz.1.6792': attribute type 1 has an invalid length. [ 838.830937][T32655] bond2: entered promiscuous mode [ 838.852584][T32655] bond2: entered allmulticast mode [ 838.893381][T32655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.482406][T32671] netlink: 'syz.1.6798': attribute type 1 has an invalid length. [ 839.791692][T32696] bond2: option lacp_active: invalid value (8) [ 839.800372][T32696] bond2 (unregistering): Released all slaves [ 839.926891][T32687] lo speed is unknown, defaulting to 1000 [ 839.947030][T32696] netlink: 'syz.3.6804': attribute type 1 has an invalid length. [ 840.630195][T32721] lo speed is unknown, defaulting to 1000 [ 840.825922][T32742] netlink: 'syz.2.6813': attribute type 25 has an invalid length. [ 841.038688][T32755] syzkaller1: entered promiscuous mode [ 841.045627][T32755] syzkaller1: entered allmulticast mode [ 841.487863][T32763] bridge_slave_0: left allmulticast mode [ 841.503006][T32763] bridge_slave_0: left promiscuous mode [ 841.516001][T32763] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.535970][T32763] bridge_slave_1: left allmulticast mode [ 841.552006][T32763] bridge_slave_1: left promiscuous mode [ 841.560576][T32763] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.590059][T32763] bond0: (slave bond_slave_0): Releasing backup interface [ 841.648140][T32763] bond0: (slave bond_slave_1): Releasing backup interface [ 841.705480][T32763] team_slave_0: left promiscuous mode [ 841.728391][T32763] team0: Port device team_slave_0 removed [ 841.750150][T32763] team_slave_1: left promiscuous mode [ 841.768832][T32763] team0: Port device team_slave_1 removed [ 841.782907][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.799855][T32763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.815901][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.834672][T32763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.846477][T32763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.862408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 841.862437][ C0] lec:lec_tx_timeout: lec0 [ 841.870563][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 841.893018][T32764] team0: Mode changed to "loadbalance" [ 841.933282][T27403] syz0: Port: 1 Link DOWN [ 842.556854][ T334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.567159][ T339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 842.853514][ T367] __nla_validate_parse: 18 callbacks suppressed [ 842.853532][ T367] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6836'. [ 842.881375][ T359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6833'. [ 842.894311][ T368] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 842.894967][ T367] netlink: Unknown conntrack attr (0) [ 843.515325][ T407] openvswitch: netlink: IP tunnel dst address not specified [ 843.742206][ T418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6851'. [ 844.009965][ T430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.044470][ T430] 8021q: VLANs not supported on vxcan1 [ 844.161920][ T440] netlink: 'syz.0.6856': attribute type 2 has an invalid length. [ 844.214625][ T440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6856'. [ 844.255159][ T445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6859'. [ 844.390847][ T5160] block nbd1: Possible stuck request ffff8880525b5080: control (read@0,1024B). Runtime 30 seconds [ 844.405467][ T5160] block nbd1: Possible stuck request ffff8880525b5240: control (read@1024,1024B). Runtime 30 seconds [ 844.416959][ T5160] block nbd1: Possible stuck request ffff8880525b5400: control (read@2048,1024B). Runtime 30 seconds [ 844.428273][ T5160] block nbd1: Possible stuck request ffff8880525b55c0: control (read@3072,1024B). Runtime 30 seconds [ 844.472267][ T452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 844.516794][ T445] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 844.536411][ T462] Cannot find map_set index 2 as target [ 844.706300][ T470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6865'. [ 844.751125][ T470] macsec0: entered promiscuous mode [ 844.756829][ T470] team0: entered promiscuous mode [ 844.761952][ T470] team_slave_0: entered promiscuous mode [ 844.762497][ T475] netlink: 14608 bytes leftover after parsing attributes in process `syz.2.6867'. [ 844.768621][ T470] team_slave_1: entered promiscuous mode [ 844.783716][ T470] macsec0: entered allmulticast mode [ 844.793869][ T470] team0: entered allmulticast mode [ 844.799331][ T470] team_slave_0: entered allmulticast mode [ 844.805337][ T470] team_slave_1: entered allmulticast mode [ 844.811577][ T470] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 844.818840][ T470] team0: Device macsec0 is already an upper device of the team interface [ 844.830752][ T470] team0: left allmulticast mode [ 844.835864][ T470] team_slave_0: left allmulticast mode [ 844.841632][ T470] team_slave_1: left allmulticast mode [ 844.847274][ T470] team0: left promiscuous mode [ 844.858586][ T470] team_slave_0: left promiscuous mode [ 844.863254][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6868'. [ 844.868180][ T470] team_slave_1: left promiscuous mode [ 844.910220][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 844.920983][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6869'. [ 844.988154][ T482] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 844.994740][ T482] dvmrp1: linktype set to 804 [ 845.149330][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.183902][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.208420][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.230545][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.242853][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.255440][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.274926][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.293765][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.325490][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.350845][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.382612][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.397384][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.410924][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.433582][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.444592][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.456032][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.484112][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.495395][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.507467][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.518443][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.546215][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.557408][ T515] netlink: 'syz.2.6880': attribute type 4 has an invalid length. [ 845.565889][ T514] netlink: 'syz.2.6880': attribute type 4 has an invalid length. [ 845.575030][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.587016][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.598220][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.610297][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.622193][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.633546][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.649192][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.685951][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.700917][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.712938][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.727646][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.738574][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.752233][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.763371][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.786015][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.800104][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.818491][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.832497][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.854747][ T521] syzkaller1: entered promiscuous mode [ 845.860492][ T521] syzkaller1: entered allmulticast mode [ 845.870899][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.910673][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.925517][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.941488][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.952519][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.966887][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.992382][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.004874][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.019823][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.044588][ T535] netlink: 'syz.2.6888': attribute type 11 has an invalid length. [ 846.058389][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.106530][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.139033][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.159864][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.186670][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.212257][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.260608][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.290971][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.322878][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.345662][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.381505][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.395664][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.422083][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.439942][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.450864][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.463124][ T492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.705930][T23582] IPVS: starting estimator thread 0... [ 846.726380][ T578] netlink: 'syz.2.6900': attribute type 1 has an invalid length. [ 846.804397][ T581] IPVS: using max 29 ests per chain, 69600 per kthread [ 846.823481][ T578] bond3: entered promiscuous mode [ 846.830955][ T578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.874247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 846.882378][ C0] lec:lec_tx_timeout: lec0 [ 846.887480][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 847.055587][ T599] SET target dimension over the limit! [ 847.598146][ T628] lo speed is unknown, defaulting to 1000 [ 847.922702][ T664] __nla_validate_parse: 2 callbacks suppressed [ 847.922721][ T664] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6920'. [ 847.986507][ T669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6923'. [ 848.076209][ T658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6917'. [ 848.212321][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6924'. [ 848.222319][ T676] syzkaller0: entered promiscuous mode [ 848.227909][ T676] syzkaller0: entered allmulticast mode [ 848.249717][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.257988][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.264833][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.271630][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.278424][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.285224][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.292000][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.298884][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.305694][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.312459][ T676] tc action pedit offset must be on 32 bit boundaries [ 848.319307][ T676] TC_ACT_REPEAT abuse ? [ 848.485192][ T695] lo speed is unknown, defaulting to 1000 [ 848.631411][T12222] IPVS: starting estimator thread 0... [ 848.734356][ T707] IPVS: using max 32 ests per chain, 76800 per kthread [ 848.898683][ T718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6934'. [ 848.941565][ T718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6934'. [ 849.211672][ T729] openvswitch: netlink: Duplicate key (type 21). [ 849.265457][ T729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6937'. [ 849.497504][ T748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6945'. [ 849.764544][ T771] batadv_slave_0: entered promiscuous mode [ 849.787234][ T769] batadv_slave_0: left promiscuous mode [ 849.972434][ T788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6953'. [ 850.007579][ T788] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 850.351427][ T812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.358767][ T812] IPv6: NLM_F_CREATE should be set when creating new route [ 850.366073][ T812] IPv6: NLM_F_CREATE should be set when creating new route [ 850.380088][ T816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.429851][ T29] audit: type=1107 audit(1776580520.757:17): pid=805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='hs弓箙鏏q.K遃,渼a兲 N6bZK$疣嬍 蔥`T嬪Jb,+ !縟9!镳~y柲貪-鵀焢晖\-z贺Eyr@' [ 850.857245][ T836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6970'. [ 851.190378][ T857] bridge0: port 3(syz_tun) entered blocking state [ 851.245743][ T857] bridge0: port 3(syz_tun) entered disabled state [ 851.270018][ T857] syz_tun: entered allmulticast mode [ 851.286639][ T857] syz_tun: entered promiscuous mode [ 851.557769][ T879] bond1: Removing last arp target with arp_interval on [ 851.894235][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 851.902342][ C0] lec:lec_tx_timeout: lec0 [ 851.907390][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 852.052081][ T931] lo speed is unknown, defaulting to 1000 [ 852.962667][ T977] tipc: Enabled bearer , priority 0 [ 853.203948][ T984] lo speed is unknown, defaulting to 1000 [ 853.969968][ T1013] tc_dump_action: action bad kind [ 853.982662][ T1013] __nla_validate_parse: 10 callbacks suppressed [ 853.982680][ T1013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7012'. [ 854.370173][ T1032] netlink: 'syz.1.7016': attribute type 1 has an invalid length. [ 854.378433][ T1029] lo speed is unknown, defaulting to 1000 [ 854.384670][ T1032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7016'. [ 855.372718][ T1071] veth1_vlan: entered allmulticast mode [ 855.694121][ T1082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7027'. [ 855.989192][ T1096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7035'. [ 856.247166][ T1096] bridge_slave_0 (unregistering): left allmulticast mode [ 856.264978][ T1096] bridge_slave_0 (unregistering): left promiscuous mode [ 856.282104][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.432573][ T1114] lo speed is unknown, defaulting to 1000 [ 856.923747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 856.931913][ C0] lec:lec_tx_timeout: lec0 [ 857.687159][ T1172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 857.902195][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7054'. [ 857.980632][ T1195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7054'. [ 857.992371][ T1195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7054'. [ 858.004809][ T1196] netlink: 'syz.3.7056': attribute type 1 has an invalid length. [ 858.013736][ T1195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7054'. [ 858.024164][ T1196] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7056'. [ 858.755868][ T1212] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 858.773853][ T1212] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 858.787220][ T1212] tipc: Resetting bearer [ 858.797317][T10888] tipc: Resetting bearer [ 859.165673][ T1222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7062'. [ 859.817537][ T1258] netlink: 'syz.3.7074': attribute type 2 has an invalid length. [ 859.891260][ T1267] sctp: [Deprecated]: syz.0.7076 (pid 1267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 859.891260][ T1267] Use struct sctp_sack_info instead [ 860.162133][ T1126] Set syz1 is full, maxelem 65536 reached [ 860.295954][ T1288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7082'. [ 860.336836][ T1292] veth0_to_batadv: entered promiscuous mode [ 860.354921][ T1292] veth0_to_batadv: entered allmulticast mode [ 860.358383][ T1295] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7084'. [ 860.713456][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7088'. [ 860.741497][ T1324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7089'. [ 860.742979][ T1322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7089'. [ 860.917449][ T1310] vlan2: entered allmulticast mode [ 860.932425][ T1310] bridge_slave_0: entered allmulticast mode [ 860.939664][ T1310] bridge0: port 1(vlan2) entered blocking state [ 860.947054][ T1310] bridge0: port 1(vlan2) entered disabled state [ 860.956176][ T1310] vlan2: entered promiscuous mode [ 860.963866][ T1310] bridge_slave_0: entered promiscuous mode [ 860.977858][T29471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.000367][T29471] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.020499][T29471] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.087729][T29471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.138806][ T1331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7092'. [ 861.406153][ T1357] lo speed is unknown, defaulting to 1000 [ 861.486431][ T1365] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 861.516741][ T1365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.623420][ T1367] syzkaller0: entered promiscuous mode [ 861.648725][ T1367] syzkaller0: entered allmulticast mode [ 861.814888][ T1383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7102'. [ 861.938545][ T1383] bond2: Invalid ad_actor_system MAC address. [ 861.939746][ T1394] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 861.958992][ T1383] bond2: option ad_actor_system: invalid value (7) [ 861.971744][ T1383] bond2 (unregistering): Released all slaves [ 862.150373][ T1403] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7106'. [ 862.248830][ T1406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7107'. [ 862.329529][ T1409] netlink: 'syz.4.7109': attribute type 14 has an invalid length. [ 862.408159][ T1409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 862.474820][ T1417] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 863.108324][ T1463] netlink: 'syz.3.7122': attribute type 9 has an invalid length. [ 863.149482][ T1463] netlink: 'syz.3.7122': attribute type 1 has an invalid length. [ 863.617968][ T1499] xt_l2tp: invalid flags combination: 8 [ 863.660918][ T1499] netlink: 'syz.4.7128': attribute type 1 has an invalid length. [ 863.790661][ T1496] gretap2: entered allmulticast mode [ 863.800413][ T1496] bond3: (slave gretap2): making interface the new active one [ 863.809137][ T1496] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 863.821063][ T1506] batadv_slave_1: entered promiscuous mode [ 863.886688][ T1514] bond4: option xmit_hash_policy: invalid value (10) [ 863.908777][ T1514] bond4 (unregistering): Released all slaves [ 864.002051][ T1508] batadv_slave_1: left promiscuous mode [ 864.046310][ T1525] syzkaller0: entered promiscuous mode [ 864.067075][ T1525] syzkaller0: entered allmulticast mode [ 864.209325][ T1542] __nla_validate_parse: 8 callbacks suppressed [ 864.209344][ T1542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7138'. [ 864.211128][ T1544] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 864.263332][ T1539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7136'. [ 864.263701][ T1546] netlink: 'syz.1.7137': attribute type 12 has an invalid length. [ 864.304567][ T1544] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 864.362539][ T1552] IPVS: length: 132 != 8 [ 864.391312][ T1554] pimreg: entered allmulticast mode [ 865.222812][ T1597] syzkaller0: entered promiscuous mode [ 865.234117][ T1597] syzkaller0: entered allmulticast mode [ 865.352190][ T1606] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7156'. [ 865.464925][ T1610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7157'. [ 865.496441][ T1610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7157'. [ 865.542441][ T1614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7158'. [ 865.724002][ T1625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7159'. [ 866.240763][ T1656] lo speed is unknown, defaulting to 1000 [ 866.465558][ T1678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7173'. [ 866.475722][ T1678] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7173'. [ 866.478083][ T1680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7172'. [ 866.850764][ T1696] syzkaller1: entered promiscuous mode [ 866.856464][ T1696] syzkaller1: entered allmulticast mode [ 867.249658][ T1726] bridge0: port 3(syz_tun) entered blocking state [ 867.260851][ T1726] bridge0: port 3(syz_tun) entered disabled state [ 867.268425][ T1726] syz_tun: entered allmulticast mode [ 867.291652][ T1726] syz_tun: entered promiscuous mode [ 867.378884][ T1735] netlink: 'syz.0.7189': attribute type 2 has an invalid length. [ 867.514495][ T1743] xt_l2tp: v2 doesn't support IP mode [ 867.976346][ T1768] bond0: entered promiscuous mode [ 867.997213][ T1768] bond_slave_0: entered promiscuous mode [ 868.018367][ T1768] bond_slave_1: entered promiscuous mode [ 868.051424][ T1768] batadv0: entered promiscuous mode [ 868.095122][ T1768] debugfs: 'hsr0' already exists in 'hsr' [ 868.126208][ T1768] Cannot create hsr debugfs directory [ 868.145453][ T1768] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 868.179320][ T1768] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 868.197607][ T1768] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 868.207800][ T1768] bond0: left promiscuous mode [ 868.218016][ T1768] bond_slave_0: left promiscuous mode [ 868.229272][ T1768] bond_slave_1: left promiscuous mode [ 868.237799][ T1768] batadv0: left promiscuous mode [ 868.271917][ T1784] batadv_slave_1: entered promiscuous mode [ 868.759582][ T1807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.865085][T11056] Bluetooth: hci1: command tx timeout [ 868.980193][ T1783] batadv_slave_1: left promiscuous mode [ 869.392050][ T1845] netlink: 'syz.3.7218': attribute type 1 has an invalid length. [ 869.521914][ T1851] netlink: 'syz.3.7222': attribute type 2 has an invalid length. [ 869.545622][ T1851] __nla_validate_parse: 43 callbacks suppressed [ 869.545638][ T1851] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7222'. [ 869.781120][ T1865] netlink: 'syz.3.7225': attribute type 21 has an invalid length. [ 869.821661][ T1864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7224'. [ 869.837971][ T1865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7225'. [ 870.003103][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.020580][ T1870] netlink: 'syz.4.7226': attribute type 5 has an invalid length. [ 870.083137][ T1872] lo speed is unknown, defaulting to 1000 [ 870.164442][ T1882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7229'. [ 870.279900][ T29] audit: type=1800 audit(1776580540.607:18): pid=1883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7228" name="memory.events" dev="tmpfs" ino=1438 res=0 errno=0 [ 870.550790][ T1890] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 870.689217][ T1891] lo speed is unknown, defaulting to 1000 [ 870.713349][ T1876] Bluetooth: hci2: command 0x0401 tx timeout [ 870.715600][ T5824] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 870.889577][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7233'. [ 870.912864][ T1906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.998742][ T1910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7234'. [ 871.319794][ T1920] tipc: Enabling of bearer rejected, already enabled [ 871.359353][ T1923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7238'. [ 871.359353][ T1922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7238'. [ 871.625135][ T1934] syzkaller0: entered promiscuous mode [ 871.634443][ T1934] syzkaller0: entered allmulticast mode [ 871.787804][ T1942] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7244'. [ 871.892485][ T1942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.906784][ T1942] bond_slave_0: left promiscuous mode [ 871.923360][ T1942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.940951][ T1942] bond_slave_1: left promiscuous mode [ 871.948631][ T1942] bond0 (unregistering): Released all slaves [ 871.975035][ T1948] bridge0: port 4(vlan2) entered blocking state [ 871.981642][ T1948] bridge0: port 4(vlan2) entered disabled state [ 871.988689][ T1948] vlan2: entered allmulticast mode [ 871.993995][ T1948] geneve0: entered allmulticast mode [ 872.020067][ T1948] vlan2: entered promiscuous mode [ 872.026911][ T1948] geneve0: entered promiscuous mode [ 872.065375][ T1876] Bluetooth: hci5: command 0x0406 tx timeout [ 872.795265][T28472] Bluetooth: hci2: command 0x0401 tx timeout [ 874.466370][ T5160] block nbd1: Possible stuck request ffff8880525b5080: control (read@0,1024B). Runtime 60 seconds [ 874.477272][ T5160] block nbd1: Possible stuck request ffff8880525b5240: control (read@1024,1024B). Runtime 60 seconds [ 874.488685][ T5160] block nbd1: Possible stuck request ffff8880525b5400: control (read@2048,1024B). Runtime 60 seconds [ 874.500384][ T5160] block nbd1: Possible stuck request ffff8880525b55c0: control (read@3072,1024B). Runtime 60 seconds [ 874.580233][ T1965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7253'. [ 874.590320][ T1965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7253'. [ 874.632206][T10866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.658162][T10866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.732413][ T1978] nbd: must specify at least one socket [ 874.805604][ T1989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.209278][ T1990] lo speed is unknown, defaulting to 1000 [ 875.209516][ T2002] bridge_slave_1: left allmulticast mode [ 875.233065][ T2002] bridge_slave_1: left promiscuous mode [ 875.255508][ T2002] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.303431][ T2002] bridge_slave_0: left allmulticast mode [ 875.321698][ T2002] bridge_slave_0: left promiscuous mode [ 875.359492][ T2002] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.551709][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7262'. [ 875.744531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.752706][ C0] lec:lec_tx_timeout: lec0 [ 875.897126][ T2032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7266'. [ 876.148497][ T2041] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 876.260498][ T2053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7272'. [ 876.485589][ T2066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7274'. [ 876.525490][ T2065] lo speed is unknown, defaulting to 1000 [ 876.535893][ T2066] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 877.119977][ T2085] syzkaller0: entered promiscuous mode [ 877.125813][ T2085] syzkaller0: entered allmulticast mode [ 877.148741][ T2098] sit2: entered allmulticast mode [ 877.259934][ T2108] netlink: 'syz.4.7285': attribute type 83 has an invalid length. [ 877.298766][ T2109] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7283'. [ 877.359485][ T2112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7286'. [ 877.423030][ T2114] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7286'. [ 877.433160][ T2115] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7286'. [ 879.478112][T25729] lec:lec_start_xmit: lec0:No lecd attached [ 879.489786][ T5195] udevd[5195]: worker [32105] /devices/virtual/block/nbd1 is taking a long time [ 879.661372][ T2137] __nla_validate_parse: 1 callbacks suppressed [ 879.661392][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 879.691577][ T2137] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7293'. [ 879.708543][ T2137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7293'. [ 880.251231][ T2170] netlink: zone id is out of range [ 880.256712][ T2170] netlink: get zone limit has 4 unknown bytes [ 880.263645][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7300'. [ 880.280721][ T2170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7300'. [ 880.292209][ T2170] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7300'. [ 880.539373][ T2182] syzkaller0: entered promiscuous mode [ 880.592783][ T2182] syzkaller0: entered allmulticast mode [ 880.657022][ T2187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7305'. [ 880.852372][ T2189] lo speed is unknown, defaulting to 1000 [ 880.935238][ T2205] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7308'. [ 880.997745][ T2205] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 881.261520][ T2220] netlink: 'syz.0.7313': attribute type 89 has an invalid length. [ 881.287663][ T2224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7314'. [ 881.347190][ T2227] netlink: 'syz.3.7315': attribute type 1 has an invalid length. [ 881.366394][ T2227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.375626][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7314'. [ 881.531122][T10866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.555687][T10866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.596106][T10866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 881.622910][T10866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.361329][ T2260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.513990][ T2273] netlink: 'syz.3.7328': attribute type 1 has an invalid length. [ 882.522656][ T2273] netlink: 'syz.3.7328': attribute type 4 has an invalid length. [ 882.531670][ T2273] netlink: 'syz.3.7328': attribute type 1 has an invalid length. [ 882.539829][ T2273] netlink: 'syz.3.7328': attribute type 4 has an invalid length. [ 882.550845][ T2273] pim6reg1: entered promiscuous mode [ 882.564116][ T2273] pim6reg1: entered allmulticast mode [ 882.950930][ T2291] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 882.999191][ T2291] lo speed is unknown, defaulting to 1000 [ 883.879398][ T2333] vlan2: entered allmulticast mode [ 883.885097][ T2333] bond0: entered allmulticast mode [ 883.890226][ T2333] bond_slave_0: entered allmulticast mode [ 883.896211][ T2333] bond_slave_1: entered allmulticast mode [ 883.908685][ T2334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.918307][ T2334] bond_slave_0: left allmulticast mode [ 883.926127][ T2334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.935833][ T2334] bond_slave_1: left allmulticast mode [ 883.941688][ T2334] bond0 (unregistering): Released all slaves [ 884.097440][ T2340] netlink: 'syz.0.7345': attribute type 1 has an invalid length. [ 884.101585][ T2335] tipc: Resetting bearer [ 884.119089][ T2340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.310043][ T2349] netlink: 'syz.3.7346': attribute type 7 has an invalid length. [ 884.784762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 884.792823][ C0] lec:lec_tx_timeout: lec0 [ 884.997164][ T2387] netlink: 'syz.1.7351': attribute type 13 has an invalid length. [ 885.012472][ T2387] netlink: 'syz.1.7351': attribute type 17 has an invalid length. [ 885.087370][ T2388] __nla_validate_parse: 13 callbacks suppressed [ 885.087390][ T2388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7351'. [ 885.102452][ T2390] sctp: [Deprecated]: syz.4.7353 (pid 2390) Use of int in max_burst socket option deprecated. [ 885.102452][ T2390] Use struct sctp_assoc_value instead [ 885.301868][ T2403] netlink: 'syz.4.7355': attribute type 11 has an invalid length. [ 885.337210][ T2387] bridge0: port 3(syz_tun) entered blocking state [ 885.343838][ T2387] bridge0: port 3(syz_tun) entered forwarding state [ 885.360800][ T2387] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.374157][ T2387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.560792][ T2406] bond0: option ad_select: invalid value (34) [ 885.579203][ T2406] bond0 (unregistering): Released all slaves [ 886.009148][ T2433] C: renamed from team_slave_0 [ 886.041690][ T2433] netlink: 'syz.2.7361': attribute type 8 has an invalid length. [ 886.064083][ T2433] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 886.504743][ T2461] netlink: 'syz.4.7366': attribute type 13 has an invalid length. [ 886.526841][ T2461] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.7366'. [ 887.084069][T10888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.105111][T10888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.148502][ T2490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.326590][ T2502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7370'. [ 887.362896][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7370'. [ 887.447709][ T2502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7370'. [ 887.469719][T10876] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.488047][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7370'. [ 887.505475][T29471] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.539522][ T2506] lo speed is unknown, defaulting to 1000 [ 887.546338][T29471] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.582771][T29471] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.771924][ T2525] mac80211_hwsim hwsim67 syzkaller0: left promiscuous mode [ 887.780240][ T2525] mac80211_hwsim hwsim67 syzkaller0: left allmulticast mode [ 887.799752][ T2525] tipc: Resetting bearer [ 888.159942][ T2556] validate_nla: 3 callbacks suppressed [ 888.159962][ T2556] netlink: 'syz.3.7384': attribute type 32 has an invalid length. [ 888.189074][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7384'. [ 888.269649][ T2556] bond3: option coupled_control: invalid value (12) [ 888.300901][ T2556] bond3 (unregistering): Released all slaves [ 888.579317][ T2585] netlink: 'syz.4.7387': attribute type 4 has an invalid length. [ 888.609817][ T2585] netlink: 'syz.4.7387': attribute type 4 has an invalid length. [ 888.692619][ T2585] syzkaller0: entered promiscuous mode [ 888.698352][ T2585] syzkaller0: entered allmulticast mode [ 888.719399][T12222] IPVS: starting estimator thread 0... [ 888.761286][ T2596] syzkaller0: entered promiscuous mode [ 888.767536][ T2596] syzkaller0: entered allmulticast mode [ 888.815692][ T2598] IPVS: using max 30 ests per chain, 72000 per kthread [ 888.892988][ T2605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7390'. [ 888.957391][ T2610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 891.188044][ T2565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 891.372837][ T2618] netlink: 'syz.2.7393': attribute type 1 has an invalid length. [ 891.802971][ T2634] nftables ruleset with unbound set [ 893.535620][ T2618] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 893.564798][ T2625] veth7: entered promiscuous mode [ 893.622196][ T2637] tipc: Enabling of bearer rejected, failed to enable media [ 893.737838][ T2650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7396'. [ 893.995728][ T2665] lo speed is unknown, defaulting to 1000 [ 894.046115][ T2682] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 894.102640][ T2682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.158826][ T2683] geneve2: entered promiscuous mode [ 894.221146][T10876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.254025][T10876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.299188][T10876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.308932][T10876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.377312][ T2698] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7404'. [ 894.723277][ T2717] FAULT_INJECTION: forcing a failure. [ 894.723277][ T2717] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 894.758606][ T2717] CPU: 0 UID: 0 PID: 2717 Comm: syz.0.7406 Not tainted syzkaller #0 PREEMPT(full) [ 894.758632][ T2717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 894.758644][ T2717] Call Trace: [ 894.758652][ T2717] [ 894.758660][ T2717] dump_stack_lvl+0xe8/0x150 [ 894.758692][ T2717] should_fail_ex+0x412/0x560 [ 894.758723][ T2717] _copy_from_user+0x2d/0xb0 [ 894.758743][ T2717] ___sys_sendmsg+0x1c6/0x360 [ 894.758770][ T2717] ? __lock_acquire+0x6b5/0x2cf0 [ 894.758797][ T2717] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.758828][ T2717] ? kstrtouint+0x6e/0xe0 [ 894.758874][ T2717] ? __fget_files+0x2a/0x420 [ 894.758896][ T2717] ? __fget_files+0x3a0/0x420 [ 894.758928][ T2717] __sys_sendmmsg+0x27c/0x4e0 [ 894.758959][ T2717] ? __pfx___sys_sendmmsg+0x10/0x10 [ 894.758984][ T2717] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 894.759035][ T2717] ? ksys_write+0x242/0x270 [ 894.759063][ T2717] ? __pfx_ksys_write+0x10/0x10 [ 894.759095][ T2717] __x64_sys_sendmmsg+0xa0/0xc0 [ 894.759127][ T2717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.759147][ T2717] do_syscall_64+0x15f/0xf80 [ 894.759168][ T2717] ? trace_irq_disable+0x3b/0x140 [ 894.759187][ T2717] ? clear_bhb_loop+0x40/0x90 [ 894.759209][ T2717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.759228][ T2717] RIP: 0033:0x7fd299f9c819 [ 894.759246][ T2717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.759262][ T2717] RSP: 002b:00007fd29ae0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.759284][ T2717] RAX: ffffffffffffffda RBX: 00007fd29a216090 RCX: 00007fd299f9c819 [ 894.759298][ T2717] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 894.759310][ T2717] RBP: 00007fd29ae0a090 R08: 0000000000000000 R09: 0000000000000000 [ 894.759321][ T2717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.759332][ T2717] R13: 00007fd29a216128 R14: 00007fd29a216090 R15: 00007ffd28237c58 [ 894.759360][ T2717] [ 895.143817][ T2738] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 895.180140][ T2743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7410'. [ 895.657600][ T2762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7413'. [ 895.706432][ T2763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7413'. [ 895.758912][ T2763] netlink: 'syz.2.7413': attribute type 2 has an invalid length. [ 895.759046][ T2765] netlink: 'syz.2.7413': attribute type 2 has an invalid length. [ 895.809166][ T2765] netlink: 'syz.2.7413': attribute type 1 has an invalid length. [ 895.813516][ T2763] netlink: 'syz.2.7413': attribute type 1 has an invalid length. [ 895.841258][ T2765] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7413'. [ 895.930383][ T2763] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7413'. [ 896.148693][ T2783] bond0: entered allmulticast mode [ 896.359859][ T2802] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 896.388635][ T2802] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 896.414860][ T2805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7421'. [ 896.425871][ T2802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7422'. [ 896.746493][ T2829] lo speed is unknown, defaulting to 1000 [ 896.874157][ T2826] lo speed is unknown, defaulting to 1000 [ 897.152474][ T2866] syzkaller0: entered promiscuous mode [ 897.169972][ T2866] syzkaller0: entered allmulticast mode [ 897.313964][ T2868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7431'. [ 897.712107][ T2895] netlink: 'syz.2.7438': attribute type 1 has an invalid length. [ 898.265888][ T2904] tipc: Resetting bearer [ 898.386418][ T2918] netlink: 'syz.0.7446': attribute type 7 has an invalid length. [ 898.405512][ T2908] lo speed is unknown, defaulting to 1000 [ 898.415026][ T2918] netlink: 'syz.0.7446': attribute type 7 has an invalid length. [ 898.630581][ T2927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.651859][ T2922] bridge5: entered promiscuous mode [ 898.661554][ T2922] bridge5: port 1(macvtap0) entered blocking state [ 898.668829][ T2922] bridge5: port 1(macvtap0) entered disabled state [ 898.676335][ T2922] macvtap0: entered allmulticast mode [ 898.682054][ T2922] bridge5: entered allmulticast mode [ 898.690286][ T2922] macvtap0: left allmulticast mode [ 898.696047][ T2922] bridge5: left allmulticast mode [ 898.719881][ T2922] bridge5: left promiscuous mode [ 898.895758][ T2937] __nla_validate_parse: 3 callbacks suppressed [ 898.895775][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7451'. [ 898.923492][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7451'. [ 898.986214][ T2945] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 899.885728][ T2998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.097522][ T3011] xt_HMARK: proto mask must be zero with L3 mode [ 900.136789][ T3011] team0: entered promiscuous mode [ 900.151096][ T3011] team_slave_0: entered promiscuous mode [ 900.167198][ T3011] team_slave_1: entered promiscuous mode [ 900.185237][ T3011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 900.250324][ T3019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7474'. [ 900.262231][ T3018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7475'. [ 900.290573][ T3019] macvtap1: entered promiscuous mode [ 900.300987][ T3019] dummy0: entered promiscuous mode [ 900.313641][ T3022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7474'. [ 900.323104][ T3019] macvtap1: entered allmulticast mode [ 900.330669][ T3019] dummy0: entered allmulticast mode [ 900.623425][ T3036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7479'. [ 900.654780][ T3036] validate_nla: 1 callbacks suppressed [ 900.654800][ T3036] netlink: 'syz.4.7479': attribute type 4 has an invalid length. [ 900.680463][ T3040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7480'. [ 900.712008][ T3040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7480'. [ 900.939022][ T3054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7486'. [ 901.059354][ T3059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7487'. [ 901.429658][ T3087] netlink: 'syz.3.7493': attribute type 10 has an invalid length. [ 901.708732][ T3105] netlink: 'syz.2.7499': attribute type 5 has an invalid length. [ 901.735098][ T3105] geneve3: entered promiscuous mode [ 901.740628][ T3105] geneve3: entered allmulticast mode [ 901.750800][T10888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 52773 - 0 [ 901.760326][T10888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 52773 - 0 [ 901.771613][T10888] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 52773 - 0 [ 901.801387][ T3104] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 901.833950][ T3109] Bluetooth: MGMT ver 1.23 [ 901.897305][ T3104] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 901.964781][ T3115] bond0: entered promiscuous mode [ 902.005259][ T3115] gretap0: entered promiscuous mode [ 902.016207][ T3115] debugfs: 'hsr0' already exists in 'hsr' [ 902.030261][ T3115] Cannot create hsr debugfs directory [ 902.040432][ T3115] hsr0: entered promiscuous mode [ 902.050487][ T3104] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 902.099416][ T3120] gre3: entered promiscuous mode [ 902.216491][ T3130] openvswitch: netlink: IP tunnel dst address not specified [ 902.223970][T29467] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 52773 - 0 [ 902.293617][ T3136] netlink: 'syz.0.7505': attribute type 13 has an invalid length. [ 902.318814][ T3136] netlink: 'syz.0.7505': attribute type 17 has an invalid length. [ 902.427766][ T3142] netlink: 'syz.1.7508': attribute type 5 has an invalid length. [ 902.443282][ T3144] netlink: 'syz.1.7508': attribute type 5 has an invalid length. [ 902.443310][T29467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 52773 - 0 [ 902.490518][T10876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 52773 - 0 [ 902.619965][T29467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 52773 - 0 [ 903.111335][ T3174] x_tables: duplicate underflow at hook 3 [ 903.179165][ T3180] netlink: 'syz.0.7516': attribute type 1 has an invalid length. [ 903.567077][ T3199] IPv6: addrconf: prefix option has invalid lifetime [ 903.634022][ T3201] netlink: 'syz.1.7520': attribute type 4 has an invalid length. [ 904.048697][ T3204] netlink: 'syz.1.7521': attribute type 1 has an invalid length. [ 904.552323][ T5160] block nbd1: Possible stuck request ffff8880525b5080: control (read@0,1024B). Runtime 90 seconds [ 904.563603][ T5160] block nbd1: Possible stuck request ffff8880525b5240: control (read@1024,1024B). Runtime 90 seconds [ 904.575948][ T5160] block nbd1: Possible stuck request ffff8880525b5400: control (read@2048,1024B). Runtime 90 seconds [ 904.601899][ T5160] block nbd1: Possible stuck request ffff8880525b55c0: control (read@3072,1024B). Runtime 90 seconds [ 905.586810][ T3180] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 905.677148][ T3212] __nla_validate_parse: 17 callbacks suppressed [ 905.677181][ T3212] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7523'. [ 905.710327][ T3212] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7523'. [ 920.932075][ T3253] validate_nla: 3 callbacks suppressed [ 920.932094][ T3253] netlink: 'syz.3.7527': attribute type 3 has an invalid length. [ 920.954275][ T3253] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7527'. [ 921.002080][ T3256] siw: device registration error -23 [ 921.019751][ T3254] ip6gre1: entered promiscuous mode [ 921.028226][ T3254] ip6gre1: entered allmulticast mode [ 921.029496][ T3259] x_tables: duplicate underflow at hook 3 [ 921.110850][ T3263] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.160696][ T3254] netlink: 'syz.2.7526': attribute type 11 has an invalid length. [ 921.250175][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7532'. [ 921.515645][T10889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.533597][T10889] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.545408][T23582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.628079][ T3290] lo speed is unknown, defaulting to 1000 [ 922.055140][T23582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.337748][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7545'. [ 922.391945][ T3332] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.545296][T23582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.716626][ T3343] netlink: 'syz.3.7540': attribute type 2 has an invalid length. [ 922.730239][ T3343] tipc: Cannot configure node identity twice [ 922.755134][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7540'. [ 922.859049][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7552'. [ 922.874893][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7552'. [ 922.881164][ T3363] netlink: 'syz.3.7553': attribute type 1 has an invalid length. [ 922.889370][ T3361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7552'. [ 923.027034][ T3376] netlink: 'syz.3.7558': attribute type 1 has an invalid length. [ 923.029533][ T3375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7557'. [ 923.050956][ T3375] netem: unknown loss type 11 [ 923.056926][ T3375] netem: change failed [ 923.081061][ T3376] bond3: entered promiscuous mode [ 923.085067][ T3372] block nbd2: server does not support multiple connections per device. [ 923.086987][ T3376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 923.098132][ T3372] block nbd2: shutting down sockets [ 923.139382][ T3380] netlink: 'syz.2.7557': attribute type 7 has an invalid length. [ 923.147458][ T3380] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7557'. [ 923.164018][ T3379] bond3: (slave bridge0): making interface the new active one [ 923.218251][ T3379] bridge0: entered promiscuous mode [ 923.238626][ T3379] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 923.313723][ T3390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7559'. [ 923.370286][ T3390] 0{X功: renamed from gretap0 [ 923.389999][ T3390] 0{X功: entered allmulticast mode [ 923.400151][ T3404] netlink: zone id is out of range [ 923.407802][ T3390] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 923.407845][ T3404] netlink: zone id is out of range [ 923.432200][ T3404] netlink: zone id is out of range [ 923.437995][ T3404] netlink: zone id is out of range [ 923.452054][ T3403] dummy0: left allmulticast mode [ 923.458374][ T3403] dummy0: left promiscuous mode [ 923.466123][ T3404] netlink: set zone limit has 4 unknown bytes [ 923.479685][ T3394] netlink: 'syz.1.7562': attribute type 21 has an invalid length. [ 923.487867][T10889] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.498301][T10889] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.533705][T10889] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.542483][T10889] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.723202][ T3414] netlink: 'syz.1.7566': attribute type 1 has an invalid length. [ 925.904417][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 926.256663][ T3447] __nla_validate_parse: 3 callbacks suppressed [ 926.256681][ T3447] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7571'. [ 926.496280][ T3473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7579'. [ 926.522320][ T3473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7579'. [ 926.541974][ T3478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7580'. [ 926.566163][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7580'. [ 926.577667][ T3478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7580'. [ 926.603687][ T3473] IPv6: sit1: Disabled Multicast RS [ 926.755853][ T3494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7584'. [ 926.828032][ T3500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7585'. [ 926.857581][ T3496] lo speed is unknown, defaulting to 1000 [ 926.912516][ T3507] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 927.088267][ T3518] netlink: 'syz.0.7591': attribute type 10 has an invalid length. [ 927.127986][ T3518] team0: Port device dummy0 added [ 927.140302][ T3518] netlink: 'syz.0.7591': attribute type 10 has an invalid length. [ 927.175266][ T3518] team0: Port device dummy0 removed [ 927.182752][ T3523] lo speed is unknown, defaulting to 1000 [ 927.245749][ T3528] netlink: 'syz.1.7595': attribute type 4 has an invalid length. [ 927.268398][ T3528] netlink: 'syz.1.7595': attribute type 4 has an invalid length. [ 927.395996][ T3532] IPVS: Error connecting to the multicast addr [ 927.410752][ T3531] IPVS: Error connecting to the multicast addr [ 927.753349][ T3546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7598'. [ 927.783016][ T3548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7599'. [ 927.796473][ T3546] nbd: couldn't find a device at index 65546 [ 927.802665][ T3534] lo speed is unknown, defaulting to 1000 [ 927.823397][ T3548] geneve2: entered promiscuous mode [ 927.838151][ T3546] siw: device registration error -23 [ 928.290590][ T3572] netlink: 'syz.3.7607': attribute type 17 has an invalid length. [ 928.312230][ T3572] netlink: 'syz.3.7607': attribute type 27 has an invalid length. [ 928.341764][ T3572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.350611][ T3572] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.361052][ T3572] A link change request failed with some changes committed already. Interface 60猉功 may have been left with an inconsistent configuration, please check. [ 928.699577][ T3594] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.181701][ T3646] syzkaller0: entered promiscuous mode [ 930.193908][ T3646] syzkaller0: entered allmulticast mode [ 930.219285][ T3646] tipc: Enabling of bearer rejected, failed to enable media [ 930.235221][ T3640] netlink: 'syz.1.7625': attribute type 13 has an invalid length. [ 930.418506][ T3653] lo speed is unknown, defaulting to 1000 [ 930.528854][ T3665] IPv6: Can't replace route, no match found [ 930.534052][ T3664] syzkaller1: entered promiscuous mode [ 930.535562][ T3665] IPv6: Can't replace route, no match found [ 930.541424][ T3664] syzkaller1: entered allmulticast mode [ 930.578774][ T3664] hsr_slave_0: left promiscuous mode [ 930.592458][ T3664] hsr_slave_1: left promiscuous mode [ 930.771303][ T3670] netlink: 'syz.4.7633': attribute type 12 has an invalid length. [ 930.779693][ T3670] netlink: 'syz.4.7633': attribute type 29 has an invalid length. [ 931.088949][ T3691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.108561][ T3689] No such timeout policy "syz0" [ 931.431800][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.650118][ T3722] __nla_validate_parse: 15 callbacks suppressed [ 931.650137][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7648'. [ 931.776077][ T3722] xt_CT: No such helper "snmp_trap" [ 932.102537][ T3740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7653'. [ 932.186734][ T3744] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 932.197143][ T3742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7656'. [ 932.315247][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7659'. [ 932.332363][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7659'. [ 932.353121][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7661'. [ 932.400100][ T3755] macsec1: entered promiscuous mode [ 932.408566][ T3755] batadv0: entered promiscuous mode [ 932.417082][ T3755] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 932.577917][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7663'. [ 932.782158][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7663'. [ 932.924026][ T3792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7669'. [ 933.431311][ T3804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 934.655832][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 934.663812][ T5160] block nbd1: Possible stuck request ffff8880525b5080: control (read@0,1024B). Runtime 120 seconds [ 934.675076][ T5160] block nbd1: Possible stuck request ffff8880525b5240: control (read@1024,1024B). Runtime 120 seconds [ 934.686270][ T5160] block nbd1: Possible stuck request ffff8880525b5400: control (read@2048,1024B). Runtime 120 seconds [ 934.697630][ T5160] block nbd1: Possible stuck request ffff8880525b55c0: control (read@3072,1024B). Runtime 120 seconds [ 934.826288][ T3806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7672'. [ 935.636626][ T3778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 935.663194][ T3809] netlink: 'syz.4.7672': attribute type 2 has an invalid length. [ 936.071834][ T3828] lo speed is unknown, defaulting to 1000 [ 936.527168][ T29] audit: type=1804 audit(1776580606.857:19): pid=3861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7683" name="/newroot/369/cgroup.controllers" dev="tmpfs" ino=1894 res=1 errno=0 [ 936.571827][ T29] audit: type=1800 audit(1776580606.897:20): pid=3861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7683" name="cgroup.controllers" dev="tmpfs" ino=1894 res=0 errno=0 [ 936.757679][ T3871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 936.772678][ T3860] lo speed is unknown, defaulting to 1000 [ 936.784213][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 936.792325][ C0] lec:lec_tx_timeout: lec0 [ 936.824060][ T3871] __nla_validate_parse: 7 callbacks suppressed [ 936.824077][ T3871] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7686'. [ 936.920635][ T3874] netlink: 'syz.4.7687': attribute type 4 has an invalid length. [ 936.976480][ T3873] lo speed is unknown, defaulting to 1000 [ 937.069301][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7691'. [ 937.311381][ T3899] netlink: 'syz.2.7695': attribute type 1 has an invalid length. [ 937.363005][ T3899] bond4: entered promiscuous mode [ 937.369197][ T3899] bond4: entered allmulticast mode [ 937.375932][ T3899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 937.412944][ T3907] erspan1: entered allmulticast mode [ 937.463398][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7695'. [ 937.472443][ T3907] bond4: (slave erspan1): making interface the new active one [ 937.472471][ T3907] erspan1: entered promiscuous mode [ 937.480930][ T3907] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 937.561011][ T3916] bridge7: entered promiscuous mode [ 937.566980][ T3916] bridge7: entered allmulticast mode [ 937.575719][ T3916] team0: Port device bridge7 added [ 937.585804][ T3916] bridge0: port 5(team0) entered blocking state [ 937.592340][ T3916] bridge0: port 5(team0) entered disabled state [ 937.604447][ T3916] team0: entered allmulticast mode [ 937.611889][ T3916] team_slave_0: entered allmulticast mode [ 937.618605][ T3916] team_slave_1: entered allmulticast mode [ 937.630628][ T3916] team0: entered promiscuous mode [ 937.636594][ T3916] team_slave_0: entered promiscuous mode [ 937.646781][ T3916] team_slave_1: entered promiscuous mode [ 937.756648][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7704'. [ 937.780750][ T3923] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 937.808148][ T3927] bond0: (slave vlan3): Opening slave failed [ 937.966494][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7707'. [ 937.985426][ T3934] block nbd1: NBD_DISCONNECT [ 937.990389][ T3936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7707'. [ 938.000105][ T3934] block nbd1: Send disconnect failed -32 [ 938.012372][ T3934] block nbd1: shutting down sockets [ 938.018451][ T3936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7707'. [ 938.044348][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.053541][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7706'. [ 938.053807][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 938.073829][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7707'. [ 938.077232][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.086311][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.091774][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 938.100845][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 938.111301][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.125478][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 938.137537][T32105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.167302][T32105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 938.184977][T32105] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.209579][T32105] Buffer I/O error on dev nbd1, logical block 1, async page read [ 938.246010][T32105] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.277600][T32105] Buffer I/O error on dev nbd1, logical block 2, async page read [ 938.303360][T32105] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.333999][T32105] Buffer I/O error on dev nbd1, logical block 3, async page read [ 938.362282][T32105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.397214][T32105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 938.414084][T32105] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 938.426178][T32105] Buffer I/O error on dev nbd1, logical block 1, async page read [ 938.442991][T32105] ldm_validate_partition_table(): Disk read failed. [ 938.461313][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7711'. [ 938.494027][T32105] Dev nbd1: unable to read RDB block 0 [ 938.556990][T32105] nbd1: unable to read partition table [ 938.611870][T32105] ldm_validate_partition_table(): Disk read failed. [ 938.626750][ T3974] netlink: 'syz.2.7715': attribute type 13 has an invalid length. [ 938.646482][T32105] Dev nbd1: unable to read RDB block 0 [ 938.678586][ T3974] netlink: 'syz.2.7715': attribute type 17 has an invalid length. [ 938.687861][T32105] nbd1: unable to read partition table [ 938.952429][ T3974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.962207][ T3974] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.972782][ T3974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 938.989557][T29467] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 52773 - 0 [ 938.999291][T29467] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 52773 - 0 [ 939.009211][T29467] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 52773 - 0 [ 939.027202][ T3980] syzkaller0: entered promiscuous mode [ 939.033048][ T3980] syzkaller0: entered allmulticast mode [ 939.043317][T29467] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 52773 - 0 [ 939.333090][ T4006] netlink: 'syz.4.7725': attribute type 4 has an invalid length. [ 942.770424][ T4057] netlink: 'syz.1.7740': attribute type 6 has an invalid length. [ 942.773627][ T4055] __nla_validate_parse: 9 callbacks suppressed [ 942.773644][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7739'. [ 942.820853][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7739'. [ 942.834378][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7740'. [ 942.929701][ T4068] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7744'. [ 943.005248][ T4072] netlink: 'syz.0.7745': attribute type 3 has an invalid length. [ 943.062397][ T4077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7746'. [ 943.141652][ T4084] netlink: 'syz.3.7750': attribute type 1 has an invalid length. [ 943.202616][ T4081] sit2: entered promiscuous mode [ 943.209022][ T4081] sit2: entered allmulticast mode [ 943.269565][ T4086] gretap2: entered allmulticast mode [ 943.289258][ T4086] bond4: (slave gretap2): making interface the new active one [ 943.299805][ T4086] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 943.310156][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7752'. [ 943.395956][ T4107] geneve0: entered promiscuous mode [ 943.403830][ T4107] geneve0: entered allmulticast mode [ 943.618115][ T4120] netlink: 'syz.1.7760': attribute type 1 has an invalid length. [ 943.628332][ T4120] netlink: 'syz.1.7760': attribute type 2 has an invalid length. [ 943.748375][ T4127] lo speed is unknown, defaulting to 1000 [ 944.027880][ T4143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7767'. [ 944.239228][T25729] lec:lec_start_xmit: lec0:No lecd attached [ 944.477440][ T4168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7771'. [ 944.525096][ T4168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7771'. [ 944.642042][ T4178] netlink: 640 bytes leftover after parsing attributes in process `syz.1.7776'. [ 944.743559][ T4182] netlink: 'syz.3.7774': attribute type 2 has an invalid length. [ 944.779362][ T4182] netlink: 'syz.3.7774': attribute type 2 has an invalid length. [ 944.849999][ T4182] netlink: 'syz.3.7774': attribute type 4 has an invalid length. [ 944.899439][ T4194] netlink: 'syz.3.7774': attribute type 4 has an invalid length. [ 945.240630][ T4214] netlink: 'syz.0.7783': attribute type 9 has an invalid length. [ 945.252186][ T4210] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 945.278468][ T4210] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 945.315989][ T4210] tipc: Resetting bearer [ 945.813136][ T4232] gre2: entered promiscuous mode [ 946.116316][ T4247] tipc: Resetting bearer [ 946.691632][ T4268] tipc: Resetting bearer [ 946.976852][ T4267] syzkaller0: entered promiscuous mode [ 946.998504][ T4267] syzkaller0: entered allmulticast mode [ 947.052615][ T4275] ip6tnl1: entered allmulticast mode [ 948.149866][ T4297] __nla_validate_parse: 7 callbacks suppressed [ 948.149885][ T4297] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.7801'. [ 948.177784][ T4297] openvswitch: netlink: Message has 16 unknown bytes. [ 949.747423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 949.755525][ C0] lec:lec_tx_timeout: lec0 [ 951.412462][ T4289] lo speed is unknown, defaulting to 1000 [ 951.518977][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7804'. [ 951.572883][ T4310] netlink: 404 bytes leftover after parsing attributes in process `syz.2.7803'. [ 951.606059][ T4310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7803'. [ 951.621496][ T4310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7803'. [ 951.631617][ T4310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7803'. [ 951.812786][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7809'. [ 952.075152][ T4337] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7812'. [ 952.095150][ T4337] openvswitch: netlink: Key type 769 is out of range max 32 [ 952.109021][ T4335] netlink: 'syz.1.7811': attribute type 2 has an invalid length. [ 952.290362][ T4345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7814'. [ 953.225783][ T4376] netlink: 'syz.3.7823': attribute type 9 has an invalid length. [ 953.445735][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7826'. [ 953.502291][ T4382] netlink: 'syz.2.7825': attribute type 10 has an invalid length. [ 953.961742][ T4399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7829'. [ 953.996278][ T4399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7829'. [ 954.014779][ T4398] lo speed is unknown, defaulting to 1000 [ 954.036707][ T4399] IPVS: sh: FWM 3 0x00000003 - no destination available [ 954.531861][ T4408] netlink: 'syz.1.7832': attribute type 21 has an invalid length. [ 954.563722][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7832'. [ 954.579905][ T4408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7832'. [ 954.891939][ T4425] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7839'. [ 955.034655][ T4435] sctp: [Deprecated]: syz.2.7839 (pid 4435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.034655][ T4435] Use struct sctp_sack_info instead [ 955.217916][ T4440] syzkaller0: entered promiscuous mode [ 955.223629][ T4440] syzkaller0: entered allmulticast mode [ 955.361148][ T4445] tipc: Enabling of bearer rejected, failed to enable media [ 956.959313][ T4485] lo speed is unknown, defaulting to 1000 [ 957.319672][ T4505] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 957.437179][ T4509] lo speed is unknown, defaulting to 1000 [ 957.573553][ T4518] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 957.742779][ T4528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7857'. [ 957.782170][ T4529] tipc: Enabled bearer , priority 10 [ 957.792201][ T4531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7857'. [ 958.154763][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7863'. [ 958.519903][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7868'. [ 958.884960][T23582] tipc: Node number set to 1492784477 [ 960.759324][ T4655] x_tables: duplicate underflow at hook 1 [ 960.798697][ T4658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7875'. [ 960.807873][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7875'. [ 960.817947][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7875'. [ 961.313030][ T4567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.863988][ T4676] lo speed is unknown, defaulting to 1000 [ 961.916720][ T4670] lo speed is unknown, defaulting to 1000 [ 962.038812][ T4663] netlink: 'syz.2.7876': attribute type 1 has an invalid length. [ 962.102037][ T4663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 962.127656][ T4694] bond5: (slave geneve4): making interface the new active one [ 962.160202][ T4694] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 962.206411][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7885'. [ 962.267680][T10875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.276068][T10875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.304090][ T4683] ip6gretap0: entered promiscuous mode [ 962.313080][ T4683] bridge0: port 3(syz_tun) entered blocking state [ 962.319667][ T4683] bridge0: port 3(syz_tun) entered forwarding state [ 962.331881][ T4683] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.342774][ T4683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.375998][T10875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.413622][T10875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.728815][ T4716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7890'. [ 962.790210][ T4713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7889'. [ 963.195634][ T4739] netlink: 'syz.4.7896': attribute type 4 has an invalid length. [ 963.246529][ T4735] netlink: 'syz.4.7896': attribute type 4 has an invalid length. [ 963.249736][ T4736] syz_tun: entered promiscuous mode [ 963.298240][ T4736] macvtap1: entered promiscuous mode [ 963.317384][ T4736] macvtap1: entered allmulticast mode [ 963.322820][ T4736] syz_tun: entered allmulticast mode [ 963.336404][ T4736] syz_tun: left allmulticast mode [ 963.341660][ T4736] syz_tun: left promiscuous mode [ 963.921244][ T4756] netlink: 'syz.4.7900': attribute type 2 has an invalid length. [ 963.932526][ T4756] netlink: 'syz.4.7900': attribute type 1 has an invalid length. [ 963.945338][ T4756] netlink: 'syz.4.7900': attribute type 2 has an invalid length. [ 963.988752][ T4756] netlink: 'syz.4.7900': attribute type 2 has an invalid length. [ 964.006785][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7901'. [ 964.014617][ T4756] netlink: 'syz.4.7900': attribute type 1 has an invalid length. [ 964.040436][ T4756] netlink: 'syz.4.7900': attribute type 2 has an invalid length. [ 964.074467][ T4763] tipc: Enabling of bearer rejected, already enabled [ 964.105432][ T4763] tipc: Resetting bearer [ 964.152872][ T4761] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7901'. [ 964.168862][ T4763] tipc: Resetting bearer [ 964.402336][ T4779] bond3: option lacp_active: invalid value (8) [ 964.411408][ T4779] bond3 (unregistering): Released all slaves [ 964.539888][ T4781] tipc: Enabled bearer , priority 0 [ 964.583911][ T4781] syzkaller0: entered promiscuous mode [ 964.600180][ T4781] syzkaller0: entered allmulticast mode [ 964.667722][ T4798] netlink: zone id is out of range [ 964.697060][ T4781] tipc: Resetting bearer [ 964.739413][ T4780] tipc: Resetting bearer [ 964.826083][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7912'. [ 964.827304][ T4780] tipc: Disabling bearer [ 964.998749][ T4805] netlink: 'syz.2.7913': attribute type 1 has an invalid length. [ 965.079227][ T4811] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 965.099765][ T4811] syzkaller1: entered promiscuous mode [ 965.107120][ T4811] syzkaller1: entered allmulticast mode [ 965.443771][ T4841] lo speed is unknown, defaulting to 1000 [ 965.614700][ T4853] delete_channel: no stack [ 966.155699][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7934'. [ 966.201269][ T4886] vlan3: entered allmulticast mode [ 966.215751][ T4886] vlan0: entered allmulticast mode [ 966.236856][ T4886] veth0_vlan: entered allmulticast mode [ 966.346243][ T4889] lo: left allmulticast mode [ 966.780007][ T4899] syzkaller0: entered promiscuous mode [ 966.802084][ T4899] syzkaller0: entered allmulticast mode [ 966.827208][ T4915] sctp: [Deprecated]: syz.0.7939 (pid 4915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.827208][ T4915] Use struct sctp_sack_info instead [ 966.831134][ T4917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7940'. [ 967.059464][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7945'. [ 967.139994][ T4935] xt_policy: output policy not valid in PREROUTING and INPUT [ 967.166535][ T4935] [ 967.168898][ T4935] ====================================================== [ 967.175910][ T4935] WARNING: possible circular locking dependency detected [ 967.182929][ T4935] syzkaller #0 Not tainted [ 967.187329][ T4935] ------------------------------------------------------ [ 967.194336][ T4935] syz.0.7947/4935 is trying to acquire lock: [ 967.200310][ T4935] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 967.209442][ T4935] [ 967.209442][ T4935] but task is already holding lock: [ 967.216794][ T4935] ffff888079edbd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 967.226021][ T4935] [ 967.226021][ T4935] which lock already depends on the new lock. [ 967.226021][ T4935] [ 967.236408][ T4935] [ 967.236408][ T4935] the existing dependency chain (in reverse order) is: [ 967.245417][ T4935] [ 967.245417][ T4935] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 967.253413][ T4935] _raw_spin_lock_bh+0x36/0x50 [ 967.258693][ T4935] nr_rt_ioctl+0x215/0xf90 [ 967.263622][ T4935] sock_do_ioctl+0x101/0x320 [ 967.268722][ T4935] sock_ioctl+0x5c6/0x7f0 [ 967.273564][ T4935] __se_sys_ioctl+0xfc/0x170 [ 967.278664][ T4935] do_syscall_64+0x15f/0xf80 [ 967.283767][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.290173][ T4935] [ 967.290173][ T4935] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 967.297989][ T4935] _raw_spin_lock_bh+0x36/0x50 [ 967.303291][ T4935] nr_rt_device_down+0xbe/0x860 [ 967.308672][ T4935] nr_device_event+0x137/0x150 [ 967.313961][ T4935] notifier_call_chain+0x1ad/0x3d0 [ 967.319594][ T4935] __dev_notify_flags+0x16d/0x310 [ 967.325135][ T4935] netif_change_flags+0xe8/0x1a0 [ 967.330594][ T4935] dev_change_flags+0x130/0x260 [ 967.335973][ T4935] dev_ioctl+0x7b4/0x1150 [ 967.340819][ T4935] sock_do_ioctl+0x23e/0x320 [ 967.345924][ T4935] sock_ioctl+0x5c6/0x7f0 [ 967.350766][ T4935] __se_sys_ioctl+0xfc/0x170 [ 967.355874][ T4935] do_syscall_64+0x15f/0xf80 [ 967.361001][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.367512][ T4935] [ 967.367512][ T4935] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 967.375453][ T4935] __lock_acquire+0x15a5/0x2cf0 [ 967.380828][ T4935] lock_acquire+0x106/0x350 [ 967.385843][ T4935] _raw_spin_lock_bh+0x36/0x50 [ 967.391163][ T4935] nr_del_node+0x57d/0xbb0 [ 967.396094][ T4935] nr_rt_ioctl+0xb34/0xf90 [ 967.401022][ T4935] sock_do_ioctl+0x101/0x320 [ 967.406122][ T4935] sock_ioctl+0x5c6/0x7f0 [ 967.410964][ T4935] __se_sys_ioctl+0xfc/0x170 [ 967.416060][ T4935] do_syscall_64+0x15f/0xf80 [ 967.421163][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.427568][ T4935] [ 967.427568][ T4935] other info that might help us debug this: [ 967.427568][ T4935] [ 967.437783][ T4935] Chain exists of: [ 967.437783][ T4935] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 967.437783][ T4935] [ 967.451594][ T4935] Possible unsafe locking scenario: [ 967.451594][ T4935] [ 967.459025][ T4935] CPU0 CPU1 [ 967.464373][ T4935] ---- ---- [ 967.469728][ T4935] lock(&nr_node->node_lock); [ 967.474483][ T4935] lock(nr_node_list_lock); [ 967.481626][ T4935] lock(&nr_node->node_lock); [ 967.488904][ T4935] lock(nr_neigh_list_lock); [ 967.493573][ T4935] [ 967.493573][ T4935] *** DEADLOCK *** [ 967.493573][ T4935] [ 967.501703][ T4935] 2 locks held by syz.0.7947/4935: [ 967.506802][ T4935] #0: ffffffff8ff4be78 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 967.516302][ T4935] #1: ffff888079edbd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 967.525952][ T4935] [ 967.525952][ T4935] stack backtrace: [ 967.531826][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: syz.0.7947 Not tainted syzkaller #0 PREEMPT(full) [ 967.531848][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 967.531858][ T4935] Call Trace: [ 967.531866][ T4935] [ 967.531874][ T4935] dump_stack_lvl+0xe8/0x150 [ 967.531895][ T4935] print_circular_bug+0x2e1/0x300 [ 967.531918][ T4935] check_noncircular+0x12e/0x150 [ 967.531940][ T4935] __lock_acquire+0x15a5/0x2cf0 [ 967.531965][ T4935] ? nr_del_node+0x57d/0xbb0 [ 967.531982][ T4935] lock_acquire+0x106/0x350 [ 967.531997][ T4935] ? nr_del_node+0x57d/0xbb0 [ 967.532016][ T4935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 967.532030][ T4935] ? nr_del_node+0x247/0xbb0 [ 967.532048][ T4935] ? nr_del_node+0x57d/0xbb0 [ 967.532065][ T4935] _raw_spin_lock_bh+0x36/0x50 [ 967.532079][ T4935] ? nr_del_node+0x57d/0xbb0 [ 967.532096][ T4935] nr_del_node+0x57d/0xbb0 [ 967.532116][ T4935] nr_rt_ioctl+0xb34/0xf90 [ 967.532137][ T4935] ? kasan_quarantine_put+0xbb/0x1f0 [ 967.532156][ T4935] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 967.532178][ T4935] ? apparmor_capable+0x126/0x170 [ 967.532195][ T4935] ? capable+0x88/0xe0 [ 967.532213][ T4935] ? nr_ioctl+0x1b1/0x3b0 [ 967.532228][ T4935] sock_do_ioctl+0x101/0x320 [ 967.532245][ T4935] ? __pfx_sock_do_ioctl+0x10/0x10 [ 967.532259][ T4935] ? do_futex+0x333/0x420 [ 967.532282][ T4935] sock_ioctl+0x5c6/0x7f0 [ 967.532297][ T4935] ? __pfx_sock_ioctl+0x10/0x10 [ 967.532311][ T4935] ? __fget_files+0x2a/0x420 [ 967.532327][ T4935] ? __fget_files+0x3a0/0x420 [ 967.532342][ T4935] ? __fget_files+0x2a/0x420 [ 967.532359][ T4935] ? bpf_lsm_file_ioctl+0x9/0x20 [ 967.532373][ T4935] ? __pfx_sock_ioctl+0x10/0x10 [ 967.532387][ T4935] __se_sys_ioctl+0xfc/0x170 [ 967.532399][ T4935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.532413][ T4935] do_syscall_64+0x15f/0xf80 [ 967.532429][ T4935] ? trace_irq_disable+0x3b/0x140 [ 967.532443][ T4935] ? clear_bhb_loop+0x40/0x90 [ 967.532457][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.532472][ T4935] RIP: 0033:0x7fd299f9c819 [ 967.532486][ T4935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.532498][ T4935] RSP: 002b:00007fd29ae2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.532513][ T4935] RAX: ffffffffffffffda RBX: 00007fd29a215fa0 RCX: 00007fd299f9c819 [ 967.532523][ T4935] RDX: 00002000000001c0 RSI: 000000000000890c RDI: 0000000000000005 [ 967.532532][ T4935] RBP: 00007fd29a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 967.532541][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.532550][ T4935] R13: 00007fd29a216038 R14: 00007fd29a215fa0 R15: 00007ffd28237c58 [ 967.532566][ T4935] [ 967.814857][ T4944] openvswitch: netlink: Flow actions may not be safe on all matching packets.