last executing test programs: 4.528484025s ago: executing program 2 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001d000bcc000000000000000007000000c7"], 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r1, &(0x7f0000000100)="81a22b12e8780a9c96c82cca6137e8b6f4e1f77d75f007b314b41cc8cdcb975a6090c196b5c9630f35d4ffc94847c6e301a66748bca2e0aa770fdb0ff023c694c31cafe048128af8bd6ebfbfe1438e841b39ba3d752121875681063c3e485a7784448642303e2d6669ca62fcbe512cc395a0cf97f0d28e1b3132987f058d61d727b0b403da8c2b5ebff22b7aea7944279f6d69d83b70fd3a8f165ee7190f546f56395bc185b2412f1a5a910c929a686d667ae83419108da650e3be5125d5a6aa1475d33f329ca683acbe4b", 0xcb, 0x20000080, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x54, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0xe, 0xc, 0xe}, {0xbc, 0x0, 0x1, 0x8, 0x7, 0x7}, 0xff, 0x9, 0xd8e}}]}}]}, 0x80}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000000000001000004000000000000000001000100000000000000"], 0x0, 0x3e}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x180000000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.025150661s ago: executing program 2 (id=1508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffb}, {0xfff3, 0x2}, {0xffff, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x26, 0xa, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) 2.406585874s ago: executing program 2 (id=1516): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x1, @none, 0x28, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbf}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) 2.281182868s ago: executing program 4 (id=1520): bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r4, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x2d0, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x268, 0x8, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}]}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4}, 0x20040044) 1.920922681s ago: executing program 4 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}]}, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xfffffffd, 0x9, 0x1, 0x400}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x40, 0x12, 0x7fffffff, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0xd, [{@loopback, 0x5}, {@local, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x3, 0x1, {{0x3b, 0x4, 0x0, 0x3d, 0xec, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x14, 0xbd, 0x3, 0x4, [{@rand_addr=0x64010100, 0x9}, {@loopback, 0x604a}]}, @cipso={0x86, 0x76, 0x3, [{0x2, 0xb, "ff5ba0b19a5c73b294"}, {0x2, 0x12, "581406f54d42d6bfc2e2e94dd2681575"}, {0x6, 0x9, "c090e89d04ec16"}, {0x6, 0x5, "f5d8cf"}, {0x5, 0xe, "a7c65ef1d278fa1a412c5b27"}, {0x1, 0x10, "2384928e47f94d9d7dbe601ab001"}, {0x6, 0x10, "9eb11ee7fadd4edd4631b42aec6c"}, {0x7, 0x8, "c4e26f0ed13b"}, {0x5, 0xf, "7a2c7eeac1dc7e7d783ef42b6b"}]}, @end, @generic={0x89, 0x12, "03e06dc874a03e3adf39fe1a3d659265"}, @cipso={0x86, 0x32, 0x1, [{0x7, 0x6, "f3fb0a7f"}, {0x7, 0x9, "6a0acec28a9c32"}, {0x5, 0xe, "575869d62ab16bdccce1a9f6"}, {0x5, 0xa, "072eee5346578826"}, {0x6, 0x5, "0c0c03"}]}, @end, @generic={0x94, 0x6, "0b12e610"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x170, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004890) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x100000b, 0x13012, r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd006}, 0x94) 1.708505108s ago: executing program 3 (id=1525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x89, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x4c}}, 0x0) 1.409278695s ago: executing program 2 (id=1526): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x9, 0x0, &(0x7f0000001580)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r6, &(0x7f0000000180)={0x27}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x22, 0x2, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 1.408879096s ago: executing program 3 (id=1527): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd14, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x5, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.250631221s ago: executing program 3 (id=1529): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) (async) listen(r0, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r4, r3, 0xffffffffffffffff, 0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000034c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e22, @local}], 0x20) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000003500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0xbcade5ab43f6684b, 0x30, 0x30, 0x5f, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000002e40)=""/227, 0x2f, 0xe3, 0x0, 0xffffffff}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000032c0)={0xffffffffffffffff, 0xe0, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000003040)=[0x0], &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f00000030c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003100), &(0x7f0000003140), 0x8, 0x33, 0x8, 0x8, &(0x7f0000003180)}}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003400)={0x9, 0x19, &(0x7f0000002bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xed74}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @generic={0x9, 0x3, 0x6, 0xca13, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001740)='syzkaller\x00', 0x9, 0xfc, &(0x7f0000002cc0)=""/252, 0x41100, 0x69, '\x00', 0x0, @cgroup_sock=0x2, r6, 0x8, &(0x7f0000002f80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002fc0)={0x3, 0x1, 0x3a8, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000003380)=[r8, 0x1], &(0x7f00000033c0)=[{0x4, 0x1, 0x7, 0x9}, {0x4, 0x5, 0x9, 0xf}], 0x10, 0x4}, 0x94) ioctl$SIOCSIFMTU(r2, 0x8943, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c0000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000000000000000000000021722047f7d634a98acc989d44b000000000000000000000000000000020001060000000000000000480003006465666c61746500"/248], 0x140}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r14 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002dc0)=""/24, 0x18}, {&(0x7f0000000100)=""/206, 0xce}, {&(0x7f00000004c0)=""/4095, 0xfff}], 0x3, &(0x7f0000000240)=""/29, 0x1d}, 0x8}, {{&(0x7f0000000280)=@caif=@util, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/17, 0x11}], 0x2, &(0x7f00000014c0)=""/133, 0x85}, 0xbb88043}, {{&(0x7f0000001580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000001600)=""/175, 0xaf}], 0x2, &(0x7f0000001700)=""/60, 0x3c}, 0x88}, {{&(0x7f0000001780)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001800)=""/83, 0x53}, {&(0x7f0000001880)=""/16, 0x10}, {&(0x7f00000018c0)=""/62, 0x3e}, {&(0x7f0000001900)=""/193, 0xc1}, {&(0x7f0000001a00)=""/59, 0x3b}, {&(0x7f0000003600)=""/4094, 0xffe}], 0x6}, 0xa}], 0x4, 0x0, 0x0) 1.140504364s ago: executing program 2 (id=1530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x26, 0x1, 0x7) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x4a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='gretap0\x00', 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r11, 0x1d, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40880) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1a) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000100)='geneve0\x00', 0x10) sendto$inet6(r9, 0x0, 0xfffffdb3, 0x800, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r13) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r14, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c1012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 1.139906135s ago: executing program 0 (id=1531): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002b40)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 1.054805223s ago: executing program 3 (id=1532): syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x4e, 0x1, 0x36, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1b3a15419a03b651, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x8, 0x10001, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x66, 0x0, 0xf, 0x4, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x4, [{@multicast1, 0x9}]}, @ssrr={0x89, 0x23, 0x19, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x2}, {@broadcast, 0xfffffff9}, {@loopback, 0xffffa33b}, {@rand_addr=0x64010102, 0x54}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x88, 0xa, "ce1fe1cf53f25177"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x6, [{@broadcast, 0xf8000000}, {@multicast2, 0x3}, {@local, 0x4}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x8, 0x10001, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x66, 0x0, 0xf, 0x4, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x4, [{@multicast1, 0x9}]}, @ssrr={0x89, 0x23, 0x19, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x2}, {@broadcast, 0xfffffff9}, {@loopback, 0xffffa33b}, {@rand_addr=0x64010102, 0x54}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x88, 0xa, "ce1fe1cf53f25177"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x97, 0x1, 0x6, [{@broadcast, 0xf8000000}, {@multicast2, 0x3}, {@local, 0x4}, {@private=0xa010102, 0x2}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_getmulticast={0x14, 0x3a, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.016891708s ago: executing program 0 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1d, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 888.927999ms ago: executing program 4 (id=1534): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x1, 0x800}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc0}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x831) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x434, 0x3f3, 0x304, 0x70bd2c, 0x25dfdbfe, {0x0, 0x1, 0x34, [0xa7, 0x2, 0x2, 0x2, 0x6ca3, 0xc5, 0xd5, 0xffffffff, 0x401, 0x7ff, 0x1, 0x5, 0x27c6, 0x0, 0x4, 0x7, 0x475, 0x3800, 0xe, 0x3, 0x47, 0xfffffff7, 0x1, 0x0, 0x6, 0x6, 0x15941d09, 0x8, 0x0, 0xfffffffb, 0x9, 0xffffff14, 0xe62c, 0xfffffffc, 0x5, 0x10, 0x9, 0x5, 0xf, 0x80000001, 0x0, 0x5, 0x10000, 0x3ff, 0x0, 0x9c0, 0x7, 0x3, 0x7f, 0x0, 0x3, 0x7fffffff, 0x401, 0x3, 0xffffffff, 0x9, 0xd43, 0x3ff, 0x8, 0x1, 0x1, 0x40000, 0x9, 0x50], [0x2, 0x80000000, 0x9, 0x4, 0x6, 0x6, 0x2, 0x4, 0x9, 0x0, 0x7, 0x1, 0x3, 0x2, 0x1, 0x1, 0x7fff, 0xffff, 0x5, 0x5, 0x6, 0x7, 0x8, 0x4, 0x7, 0x4, 0x100, 0xffffff89, 0x0, 0x7, 0x0, 0x8, 0x336f, 0x1, 0x1, 0x7, 0x3, 0x3ff, 0xf6, 0x9, 0x6, 0x3, 0x1, 0x1, 0x7, 0x5, 0x1, 0xfff, 0x9, 0x9, 0x4, 0x3, 0x7f, 0x6, 0x101, 0xa3b, 0x2b17d2a2, 0x3, 0x14000, 0x8, 0x3, 0x5, 0x10000, 0x6], [0x526, 0x40100000, 0x1, 0x6, 0x5, 0x1ff, 0x2, 0xc, 0x0, 0x3, 0x4, 0x0, 0xb65304d1, 0x7, 0x4, 0x7, 0x1, 0xa, 0x29a8, 0x5, 0x40, 0x0, 0x2, 0x0, 0x8, 0x2, 0x5, 0x2, 0x10, 0x81, 0x2, 0x1471, 0x7, 0x800, 0x6, 0x1, 0x0, 0xed21, 0x503b, 0x4, 0x5, 0x1, 0x9, 0x7, 0x9, 0x8, 0x2, 0x0, 0x5, 0x49, 0x6, 0xfffffff7, 0x800, 0x6, 0x80000001, 0x9, 0x7, 0xffffffff, 0x6, 0x8001, 0x7ff, 0x401, 0xe, 0x5], [0x4, 0x4, 0x7, 0x7fffffff, 0xfe, 0x7c763c56, 0xfffff955, 0xfffffffb, 0x3, 0x100, 0x6, 0x80000001, 0x3ff, 0x1, 0x101, 0x7, 0x6, 0x3, 0x800, 0xb, 0x7, 0x101, 0xc, 0x6183, 0xc, 0x8, 0x3cd5, 0xffff, 0x5, 0x1, 0xd, 0xb, 0xfff, 0x1, 0x7, 0x4, 0x200, 0x8000, 0xa, 0x8, 0x3, 0x4, 0x1, 0x2, 0x0, 0xfffffffa, 0xfffffffb, 0x9, 0x10000, 0xfffffffd, 0x3, 0xa37, 0x7fffffff, 0x8, 0x80000001, 0x0, 0x5, 0x1, 0x8000, 0x874, 0x3, 0x4, 0x6, 0x2800000], 0x13, [',+\'^\x00', 'IPVS\x00', ',\x00', '!-\x00', '\x00', '#@\x00']}, ["", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008044) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x110, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x4000044) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x118, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x24}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ab2db82}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xca}]}]}, 0x118}}, 0x40000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001000)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x1a0, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40011}, 0x4004004) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, r7, 0x1, 0x6, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) read(r0, &(0x7f0000001180)=""/126, 0x7e) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000001200)={'security\x00', 0x69, "708d6f571889128fa82125442e9e965b8045d75ed47b5ffc1a38c27679b64b46e0efdc8c0d45b395266f818be9d470e5f47611ac81820313e377cd57e6b2a19dd1e114014157384dd70c204bc2ae5cd8e83605e68a5b4031ac00e68e4a75292a5cc8b636b4c26a7160"}, &(0x7f00000012c0)=0x8d) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000013c0)={'nat\x00', 0x0, 0x3, 0x62, [0x30a, 0x40, 0xd, 0x3, 0x200, 0x6], 0x3, &(0x7f0000001300)=[{}, {}, {}], &(0x7f0000001340)=""/98}, &(0x7f0000001440)=0x78) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001480), &(0x7f00000014c0)=0x8) r8 = socket$inet6(0xa, 0x2, 0x1) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000001500)={@mcast2, @mcast2, @mcast1, 0x4, 0x3, 0x8, 0x400, 0x9, 0x2200040, r4}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x178, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9575}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8000, 0x4, 0x5, 0xb6ce}, {0x76f2, 0xff, 0x1d, 0x100}, {0x5, 0x0, 0x9, 0x8}, {0xb, 0x2, 0x0, 0x5}, {0x0, 0xd1, 0x6d, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x804) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000018c0)={'syzkaller0\x00', 0x10}) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r9, 0x40089413, &(0x7f0000001900)=0x3) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001980), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x4c, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xaf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}}, 0x20040000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, 0x0, 0x204, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xad9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) getsockopt$bt_hci(r9, 0x0, 0x1, &(0x7f0000001c00)=""/181, &(0x7f0000001cc0)=0xb5) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001d00)) 888.210602ms ago: executing program 2 (id=1535): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff}}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=@allocspi={0x148, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@broadcast, {0x4, 0xfffffffffffffffe, 0x5}, {0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x50, 0x1b, [{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private2, 0x3c, 0x2, 0x0, 0x3502, 0xa}]}]}, 0x148}}, 0x4808) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) sendmmsg$alg(r3, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x100, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa5, 0x7, 0x1, 0x0, "f3c7766f944683b3356b9ebb68868eb47490d70cd5cc6e41a0a0fd8069d192a2459bbc0c912d419ff4a7f40ea35723b2c6247024959350f04da857676d6980cf5fc1cab1e283760b117b98f456a312f977e7a5733f1f24a20afc61831286288c025b8d166375e3b4ac5f2954eabed28c2dac69e4ae6d1c71bf2093809da737a404b4d5e347808d13f01c8d3956afc30be249aea952f3134247608dfef594c1474b"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x19, 0x7, 0x1, 0x0, "ed7180fbf71c993747fd82a7ab60545671a4b0f8b6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x804}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_emit_ethernet(0x70, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x2}}, {@ipv4={0x800, @igmp={{0x14, 0x4, 0x1, 0x2f, 0x5a, 0x67, 0x0, 0x4, 0x2, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x22, 0x2, [{0x0, 0xc, "f9e179750362c15a0d87"}, {0x1, 0x6, "14389c92"}, {0x2, 0xa, "95736c0559f86934"}]}, @end, @timestamp={0x44, 0x18, 0xf1, 0x0, 0x0, [0x9, 0x7, 0xff, 0x57, 0x4]}]}}, {0x1e, 0x4, 0x0, @remote, "9609"}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) 887.048442ms ago: executing program 0 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0x5}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @random="f8891ec5b4b5", 'gre0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000040)) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) shutdown(r3, 0x2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140), 0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, @rand_addr=0x64010100, 0x11, 0x1f}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 849.949363ms ago: executing program 1 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 673.159158ms ago: executing program 1 (id=1538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}}, 0x20000880) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 609.201828ms ago: executing program 4 (id=1539): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}}], 0x14, 0x0, 0x0) 508.804495ms ago: executing program 1 (id=1540): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48000) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48000) (async) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) 486.623427ms ago: executing program 3 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x9, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8080) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0), 0x4) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) (async) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x10, r3, 0x1, 0x8, 0x6, @remote}, 0x14) 429.278038ms ago: executing program 0 (id=1542): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdf3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffc0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x34}}, 0x0) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @bcast, 0x1, @bcast}, &(0x7f0000000140)=0x1c, 0x800) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000004c0)={0x1d, r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) pread64(r9, &(0x7f0000001840)=""/4096, 0x1003, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010000", 0x7) 428.994269ms ago: executing program 4 (id=1543): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r0, 0x2e, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000ffffffe500020000000000180000000000000000000000000000009500040000000000360a0200000000001801000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, r1, 0x3, 0x30, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x9, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) 332.699497ms ago: executing program 4 (id=1544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x17, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002040)={0x28, r3, 0x47918d5eb2b4e5e9, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x200408c4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000010073797a31000000000c0021aa3157829a38e20003"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0014"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 322.712796ms ago: executing program 0 (id=1545): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0a05e80f1e64"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1d6c41889e19"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="163e4d442809"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1f21054f9ee9"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0xfffffffffffffffc, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x3, 0x0, 0x0, 0x2, 0x5, 0x20, 0x61ed38db, r5}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000300)={r5, 0xe8, "ef10004a51b00084a8610b99f0c67f24b7dc577b91961d82a5ddf0a43b36b5bf550e0342f2337bfb30ec108b190ff9350f35e83992ef6be6b46ca277ae8b91008d62db9f8bad66d85f397c41d2114dedda7385ff7b8671436e5f3c1efc468c0789878d021ff6b17b19ab1ff262239ee7b615168fb3c99da20ee41bac25659a9370b0497f8064df8b9b4538a96aad4b3bad3d6c7a2e01ee4ff3c42e7352dc2cf5f78c6357638f9a4a63e0e9af3ab9fd9d3fb97c56a5f0e1fde8eed50ed643c67adb77fea6d26379f484ef977878101adb8b674b6f19ec97401de6ca1b1a30c5b276eae1367d1e5c5c"}, &(0x7f0000000400)=0xf0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x5}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000004c0)={r8, 0xc, 0x9}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0xd, 0x200, 0x0, @local, @loopback, 0x7, 0x0, 0x6, 0x5}}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/uts\x00') r12 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r12}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x1) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000800)=0x15d) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000840)={0x81, 0x7, 0x1, 0xee}, 0x8) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r12}, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r13, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r14, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r15 = socket$inet6(0xa, 0x80000, 0xffffffff) sendto$inet6(r15, &(0x7f0000000a00)="5c0954b81aaf34cda1c1667513c6c8fcf866019c0992f54c5b4ea38c64ca36bfb5c2079cb67875b646bb590093426b2655f5a4da14c08034b2c05d68b75a8b6c31e915869a6edbe0deb73e031fc88ced3eb425a293cf388ef1280a1cd055f5070a3e2569b3d889b07c7d7818bcfbea0608bba7158a73a40de4e51d70a9f2e42e59d26e682b7f72e382fdfd8909a1c5d7eabc8f040cbb44d7dd078103e9c6e536da57dafd336dd1675835289192256c4cb753f3a17ac84217a0c2bd297abf4a80c9b20b9efc2177d0f86a797a708d6c6c3fc148a14b89b45b821c3872f2d0aedc96df0b", 0xe3, 0x40000, &(0x7f0000000b00)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}, 0x1c) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r16, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x735893a54105bac0}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004010}, 0x8001) 233.042288ms ago: executing program 1 (id=1546): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x5, 0x1, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x180000, 0x6, &(0x7f0000000680)=""/6, 0x1f00, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xe, 0x440, 0x4}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000008c0)=[{0x5, 0x5, 0xc, 0x6}, {0x2, 0x2, 0x8, 0x1}, {0x5, 0x2, 0x4, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup=r5, r3, 0x33, 0x1, r3, @void, @value=r6, @void, @void, r4}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)={0x3, 'rose0\x00', {0x6}, 0x5}) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r2, 0x3, 0x8, 0x5}) write$cgroup_pid(r9, &(0x7f0000000180)=0xffffffffffffffff, 0x12) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) recvmsg(r10, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c0d0}, 0x0) 232.487404ms ago: executing program 3 (id=1547): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="d35c9bb7d3863c2052b4bc9a3cea3c087e6866c1b6f40ba1f6b4322b9ac65b85feb0b3930e10c59e3404edfcf61a181fc13aafbc792203bf09da8cc5d3126cafb8d521a7f85ff008deb7a5dc121948b0b9db5cdf79b63ab551c1007e362bf14ceb71dbe63d1ad37ce44d50441fcbe0ec1dec1a45b311e3566727e49b5532417c2631b1a1911d8ff41b30dd65e8f38331c400a6a70487f89d0142a29e57115b0fd9a3ef91f2151aa8c88fcf9e31f5eb2a2555ca1d2fe4d4802316fd4aecd13816cc4a2705c524edebda504649650189df0ad6fa3682ef4144bff5f9e8782f61a44c2f376382", 0xe5) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xd0732ca5fafe6f0e, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r10, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000002"], 0x1c}}, 0x0) 112.021352ms ago: executing program 1 (id=1548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) 105.675551ms ago: executing program 0 (id=1549): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x13, &(0x7f0000000140)={0x0}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x5, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 0s ago: executing program 1 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x644c305dd3b79e10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x8, 0x2, @mcast1, @private2, 0x7800, 0x8, 0x0, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000380)={0x17ac, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb1}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x77e2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '6$\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "b61b29377f5d0df0837b58a6786409d80f5bc314d055bb76fbba2880f734a0f6a1443288b2f4011def4ca55ebf39e4cae65b3df611ea9f266155f5729ea790d638bee36d9ca5517461f18738666ad4404082e453a490fa9f7fcbab5946de9d167b8cdb1bccb2e04eba261a1d266d13c9dd41d12f28c8997e0f241bc1e4389ccf1ffdfda9a816efdf9161d1a73f4adf1873713f"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xb2, 0x5, "15e4a1b7b87c35242b4d6782b22b927f5fd808b55004bd71aba1c6dad1344c9b1a96ef66e3a742e8df7eb901211ed21c5147b6f022a06ed4a1f85b9ef11fb4617c0efa8747ed003dba946131f356a70a4df4272b79372c07c6c6e83dc3e65443812edc3ff34adf7d83066c5432244295e67d1804c2419fb72beef5af250c221834de2da610db7162d399be277f0c631df13a3e63e715cbaff6d65e0af425fac79ae1816c07cb30ee5156491e0ad3"}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "6fc6612649e9"}, @ETHTOOL_A_BITSET_VALUE={0xa8, 0x4, "849edbd728c1730ee4921875275f61caa564ac37604b7fdee8f10a194f94793f6a57c57ef847568183cd86c3c1bcdff1c512ef8fe8e5e881fcb7987a9eb19c39bf50ca50bcb2a6fdd052df827208a98a54ffabe3c0e654f41fa67efdffbb1e3da93764cff617e7dddf6226c3ee608e4bd7e9246d475fe6202db40f78585edd502f1740032bd139dee0294dbaf6ed40e455c180505501a18c9a57d404cc6a45a240a929b5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1384, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "c0134081fcd83daf770fcd5d0950b202750931f5a8e5237b36606470c8fdd1d2fc848a3af65ea91fb2041b717900d3afa46142a19c4f1d8adcb8e647a1d08b87fe8c983543dacd991b25283107877936ff1fdf815cee864285d2982b1af6e62216f076d600be16e12097a9bc69a38880b246262de61aa5e1cf8a9c55c9f67939cc8b26cdd901d987305feaa57a485e7abaf39d6b7c2df233ff369a071696713a0309ab7e1534927e2fc97eeb76100d0dd3f37e460360eeee5e8186f37e37b65e33e6a3a26b7fdf5e8a34611be3dbb996b7edd9236f2f5c05490dcfaadd9268"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@:}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xbd, 0x5, "cda6f7834cf1042d4f075d758abb0341995dabd3243652c1deb9a9a00f55d7fc7018702733b5c445ea3d838cab4d08ebd27e6b80264df31c2d95649288cc06717d55a1624fe2b248ff65c45d3e0a86cf07ff72738e9838b492bdd0680d34f444325944f67fc69c17ea7815f15474d9391f217f467458ffd8424e9d94ddde185491a2d07ccda3f1e0938e8171f03b03b99ae92ad93324adeadd0d1aae02b71338df0dd25f6f511be4dc9e65dbb4fe870c60d5733df94083acc9"}, @ETHTOOL_A_BITSET_MASK={0x95, 0x5, "eec277c8403bd0fa4603378d76b533ee30c32a86ea7abefa39a1cf9d8acd4adb50a104e8ac9e594b48b01c2ce68705f0217163337998347795221c47f112587e6c61513509559abe9bbeff218c914bccceab34017371590230c818e9ed3cbfd94030bcccc2a089cfec5202c9263409f5c2f58747f50780f6b9657e3e45d4532cc9fe13ff685963fd6b2cfbf36ee33bcf7b"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "5ee8a863d58c5a10dd8253913a68d137b8ebb9ae2e4a68e1e399a574fae1469d5079d0d1c0b6c2e0fcd8c6b756c22041f11bfd6a80a41b5614177470232d6b54e576b32cb99c68d75d1aaa10c02b984906cd8286ca84518b38c67f063ab9791533eb6f79f42ed22e38549786a24c3fd2c7b40b"}, @ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "4be160e3456d2d03f97c9e3ea40c276ef1396fa89b1f0c3d290320bb149ada58af44204aeb0d8c48aac9370faa1d3e64240814059ff8789301ca84372acdcbef365a3b75a439b19f08a88daafe1ff94b57be1a1e635cb299379ef8c8489507b6391ed70b29cf1c1474a9fc5ab7d06e13701f51711038104c4413a3037a4580e32155c14957c33c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x60, 0x4, "36be9a1cb77b875dc9b9e24d6e8bf21d927b6a8d292ce193d3c24f6f542bbeeea189cfb7fdf3fac875401d90c2a58d2ceef2cd052b44b17f0f68f61b21123a759292bd09d8116038cc0a10c99d330aec38ba7b180e38d114df96a9ef"}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "c469b3bd366acbcc396d4faf4ec38f38f36675"}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "f5b47041bdef4305999977379bc63cd2b5f1ce42658d94dc50bcd9d8ce5bbab3d8f6cd299be6181f99e42c77374ffa3e7c3e9cf7a69553879c562c10a2d5561f26cbd5"}]}]}, 0x17ac}}, 0x4c000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001bc0)=[@in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x84) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0x4048100) close(r5) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000001d80)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e00), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, r7, 0xe02, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r8 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001f00)={0x0, 0x1ff, 0x30}, &(0x7f0000001f40)=0xc) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000001f80)={r9, 0x8, 0x5}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000002000)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000002240)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002040)=@delqdisc={0x1a4, 0x25, 0x0, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5, 0x8}, {0xb, 0xb}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffff763f}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x40, 0x4, 0x7fffffff, 0x2, 0x5, 0x24}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x6, 0x5, 0x5, 0x1, 0x6, 0x6, 0x3}}, {0xa, 0x2, [0x65, 0x1, 0x5]}}, {{0x1c, 0x1, {0x8, 0xfb, 0x6, 0x0, 0x1, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xa, 0xc4, 0xff58, 0x699, 0x1, 0x5, 0x400, 0x2}}, {0x8, 0x2, [0xd, 0xb9]}}, {{0x1c, 0x1, {0x22, 0x3, 0x5, 0xa, 0x0, 0xff, 0x80000000, 0x3}}, {0xa, 0x2, [0xfffd, 0x6, 0x300b]}}, {{0x1c, 0x1, {0x6, 0xd4, 0x9, 0x8, 0x1, 0x5, 0x1000, 0x2}}, {0x8, 0x2, [0x400, 0x8]}}, {{0x1c, 0x1, {0xfa, 0x2, 0x1, 0x6, 0x0, 0x800, 0x49, 0x6}}, {0x10, 0x2, [0x6, 0x2, 0x7fff, 0x5, 0x4, 0xfff]}}, {{0x1c, 0x1, {0x80, 0x2, 0x6, 0x6, 0x2, 0x7, 0x7fffffff, 0x3}}, {0xa, 0x2, [0x4, 0x3ff, 0xfff9]}}]}, @TCA_RATE={0x6, 0x5, {0xce, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe3}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r12, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}]}, 0x1c}}, 0x20040000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000002400)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0xffffffffffffffff}, 0x4) getsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000002440), &(0x7f0000002480)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000002500)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)=@bridge_setlink={0x3c, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r13, 0x3001, 0x80}, [@IFLA_IFNAME={0x14, 0x3, 'pimreg1\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x40050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 84.300587][ T5818] cgroup: Unknown subsys name 'net' [ 84.453677][ T5818] cgroup: Unknown subsys name 'cpuset' [ 84.463268][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.204694][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.418846][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.429719][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.437448][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.448813][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.470095][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.545474][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.560312][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.568257][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.577247][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.585372][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.612460][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.639618][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.650376][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.670778][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.678612][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.679733][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.694450][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.702589][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.711840][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.718942][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.719670][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.737293][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.745958][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.757792][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.766633][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.296238][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.484037][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.604520][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.618507][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.626042][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.633634][ T5832] bridge_slave_0: entered allmulticast mode [ 91.642312][ T5832] bridge_slave_0: entered promiscuous mode [ 91.656182][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.664930][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.672352][ T5832] bridge_slave_1: entered allmulticast mode [ 91.679717][ T5832] bridge_slave_1: entered promiscuous mode [ 91.708709][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.739089][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.822132][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.867232][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.975105][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.982477][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.990346][ T5837] bridge_slave_0: entered allmulticast mode [ 91.997660][ T5837] bridge_slave_0: entered promiscuous mode [ 92.015749][ T24] cfg80211: failed to load regulatory.db [ 92.035455][ T5832] team0: Port device team_slave_0 added [ 92.042783][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.050112][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.057480][ T5837] bridge_slave_1: entered allmulticast mode [ 92.065379][ T5837] bridge_slave_1: entered promiscuous mode [ 92.090254][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.097468][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.104816][ T5843] bridge_slave_0: entered allmulticast mode [ 92.112351][ T5843] bridge_slave_0: entered promiscuous mode [ 92.121869][ T5832] team0: Port device team_slave_1 added [ 92.128023][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.135291][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.143324][ T5843] bridge_slave_1: entered allmulticast mode [ 92.150867][ T5843] bridge_slave_1: entered promiscuous mode [ 92.273792][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.281416][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.288825][ T5836] bridge_slave_0: entered allmulticast mode [ 92.296384][ T5836] bridge_slave_0: entered promiscuous mode [ 92.306280][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.313397][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.340516][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.357786][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.369965][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.379278][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.386598][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.393902][ T5839] bridge_slave_0: entered allmulticast mode [ 92.401424][ T5839] bridge_slave_0: entered promiscuous mode [ 92.410412][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.417583][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.425071][ T5839] bridge_slave_1: entered allmulticast mode [ 92.432352][ T5839] bridge_slave_1: entered promiscuous mode [ 92.439182][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.446506][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.453811][ T5836] bridge_slave_1: entered allmulticast mode [ 92.461117][ T5836] bridge_slave_1: entered promiscuous mode [ 92.468213][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.475294][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.501283][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.523183][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.534774][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.570655][ T5841] Bluetooth: hci0: command tx timeout [ 92.666957][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.681315][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.694000][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.718034][ T5843] team0: Port device team_slave_0 added [ 92.727692][ T5837] team0: Port device team_slave_0 added [ 92.748391][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.775337][ T5832] hsr_slave_0: entered promiscuous mode [ 92.782261][ T5832] hsr_slave_1: entered promiscuous mode [ 92.791332][ T5843] team0: Port device team_slave_1 added [ 92.798754][ T5837] team0: Port device team_slave_1 added [ 92.809996][ T5841] Bluetooth: hci4: command tx timeout [ 92.810366][ T5848] Bluetooth: hci3: command tx timeout [ 92.815760][ T5841] Bluetooth: hci1: command tx timeout [ 92.821463][ T5835] Bluetooth: hci2: command tx timeout [ 92.852693][ T5836] team0: Port device team_slave_0 added [ 92.897240][ T5839] team0: Port device team_slave_0 added [ 92.905023][ T5836] team0: Port device team_slave_1 added [ 92.946329][ T5839] team0: Port device team_slave_1 added [ 92.977462][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.984818][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.010814][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.022624][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.029656][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.055650][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.100115][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.107198][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.133722][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.145921][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.152992][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.179776][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.203919][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.211054][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.237825][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.269217][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.276306][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.302519][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.314399][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.321510][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.347705][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.375409][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.382579][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.408570][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.499086][ T5843] hsr_slave_0: entered promiscuous mode [ 93.505651][ T5843] hsr_slave_1: entered promiscuous mode [ 93.512153][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 93.518021][ T5843] Cannot create hsr debugfs directory [ 93.580926][ T5837] hsr_slave_0: entered promiscuous mode [ 93.587362][ T5837] hsr_slave_1: entered promiscuous mode [ 93.594085][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 93.599936][ T5837] Cannot create hsr debugfs directory [ 93.679145][ T5836] hsr_slave_0: entered promiscuous mode [ 93.685682][ T5836] hsr_slave_1: entered promiscuous mode [ 93.692719][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 93.698484][ T5836] Cannot create hsr debugfs directory [ 93.734596][ T5839] hsr_slave_0: entered promiscuous mode [ 93.741475][ T5839] hsr_slave_1: entered promiscuous mode [ 93.747664][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 93.753586][ T5839] Cannot create hsr debugfs directory [ 94.187690][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.218001][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.235412][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.254949][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.325563][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.338030][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.348655][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.362832][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.450573][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.472282][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.487370][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.502637][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.625234][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.637980][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.653121][ T5835] Bluetooth: hci0: command tx timeout [ 94.679071][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.691369][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.703564][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.771351][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.782712][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.792585][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.823684][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.831143][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.841034][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.854833][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.868057][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.886866][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.894077][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.902008][ T5835] Bluetooth: hci2: command tx timeout [ 94.903161][ T5848] Bluetooth: hci3: command tx timeout [ 94.907437][ T5835] Bluetooth: hci1: command tx timeout [ 94.916853][ T5847] Bluetooth: hci4: command tx timeout [ 94.926386][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.955102][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.962304][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.015306][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.022494][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.123733][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.175401][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.235518][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.269038][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.307594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.314879][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.327739][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.334989][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.349156][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.356396][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.372338][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.379569][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.564167][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.613378][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.710271][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.731888][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.755051][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.762276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.822509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.829801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.952658][ T5837] veth0_vlan: entered promiscuous mode [ 95.994786][ T5837] veth1_vlan: entered promiscuous mode [ 96.018933][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.167438][ T5837] veth0_macvtap: entered promiscuous mode [ 96.195332][ T5837] veth1_macvtap: entered promiscuous mode [ 96.212817][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.227215][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.307859][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.382619][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.419577][ T4503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429185][ T4503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.461098][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.470386][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.485219][ T5836] veth0_vlan: entered promiscuous mode [ 96.502715][ T5836] veth1_vlan: entered promiscuous mode [ 96.522970][ T5843] veth0_vlan: entered promiscuous mode [ 96.531496][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.546537][ T5832] veth0_vlan: entered promiscuous mode [ 96.574470][ T5832] veth1_vlan: entered promiscuous mode [ 96.595483][ T5843] veth1_vlan: entered promiscuous mode [ 96.686933][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.697250][ T5836] veth0_macvtap: entered promiscuous mode [ 96.698949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.728803][ T5836] veth1_macvtap: entered promiscuous mode [ 96.736831][ T5848] Bluetooth: hci0: command tx timeout [ 96.767360][ T5843] veth0_macvtap: entered promiscuous mode [ 96.803779][ T5839] veth0_vlan: entered promiscuous mode [ 96.814939][ T5843] veth1_macvtap: entered promiscuous mode [ 96.826284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.834651][ T5832] veth0_macvtap: entered promiscuous mode [ 96.840496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.849213][ T5832] veth1_macvtap: entered promiscuous mode [ 96.866171][ T5839] veth1_vlan: entered promiscuous mode [ 96.906492][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.918855][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.929183][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.944983][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.953808][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.970297][ T5847] Bluetooth: hci2: command tx timeout [ 96.975819][ T5848] Bluetooth: hci1: command tx timeout [ 96.982748][ T5847] Bluetooth: hci3: command tx timeout [ 96.982768][ T5835] Bluetooth: hci4: command tx timeout [ 96.997133][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.031487][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.044050][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.113675][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127523][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.164320][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.178372][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.189008][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.220275][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.248384][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.276437][ T5839] veth0_macvtap: entered promiscuous mode [ 97.288713][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.298396][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.316108][ T5839] veth1_macvtap: entered promiscuous mode [ 97.330242][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.340582][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.368166][ T5951] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.393226][ T5950] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 97.401753][ T5950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6'. [ 97.420795][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.428867][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.433408][ T5950] dummy0: entered promiscuous mode [ 97.446824][ T5950] bridge0: port 3(dummy0) entered blocking state [ 97.454227][ T5950] bridge0: port 3(dummy0) entered disabled state [ 97.461092][ T5950] dummy0: entered allmulticast mode [ 97.468432][ T5950] bridge0: port 3(dummy0) entered blocking state [ 97.475089][ T5950] bridge0: port 3(dummy0) entered forwarding state [ 97.492931][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.534414][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.602638][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.605800][ T4503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.619800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.624299][ T4503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653076][ T4503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.667110][ T4503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.707337][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.734186][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.743120][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.766238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.881271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.892058][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.994078][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.006684][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.079641][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.087523][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.157799][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.194934][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.336770][ T5966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.393028][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.512693][ T5974] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 98.570507][ T5966] Zero length message leads to an empty skb [ 98.598173][ T5979] trusted_key: syz.4.11 sent an empty control message without MSG_MORE. [ 98.654031][ T5974] team0: Device ipvlan1 failed to register rx_handler [ 98.677315][ T5981] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 98.695502][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.711299][ T5984] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.811188][ T5835] Bluetooth: hci0: command tx timeout [ 99.051671][ T5835] Bluetooth: hci1: command tx timeout [ 99.054807][ T5848] Bluetooth: hci3: command tx timeout [ 99.057140][ T5835] Bluetooth: hci2: command tx timeout [ 99.063056][ T5847] Bluetooth: hci4: command tx timeout [ 99.558386][ T6017] warning: `syz.3.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.640559][ T6026] netlink: 'syz.2.23': attribute type 32 has an invalid length. [ 99.875337][ T6014] syzkaller0: entered promiscuous mode [ 99.933071][ T6014] syzkaller0: entered allmulticast mode [ 99.954344][ T6033] netlink: 'syz.0.25': attribute type 13 has an invalid length. [ 100.030404][ T6038] netlink: 'syz.1.27': attribute type 19 has an invalid length. [ 100.140784][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 100.933985][ T6033] gretap0: refused to change device tx_queue_len [ 100.941974][ T6033] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.988749][ T6040] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 101.005100][ T6040] bond1 (unregistering): Released all slaves [ 101.126399][ T6042] : entered promiscuous mode [ 101.471190][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.35'. [ 102.102781][ T10] IPVS: starting estimator thread 0... [ 102.200567][ T6103] IPVS: using max 35 ests per chain, 84000 per kthread [ 102.728826][ T6128] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 102.788911][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.230149][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.62'. [ 103.450013][ T6156] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 103.490230][ T6159] syz.0.65: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.558247][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 103.558274][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.558294][ T6159] Call Trace: [ 103.558304][ T6159] [ 103.558313][ T6159] dump_stack_lvl+0x189/0x250 [ 103.558359][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.558387][ T6159] ? __pfx__printk+0x10/0x10 [ 103.558409][ T6159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.558438][ T6159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.558476][ T6159] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 103.558507][ T6159] warn_alloc+0x214/0x310 [ 103.558538][ T6159] ? stack_depot_save_flags+0x41b/0x860 [ 103.558575][ T6159] ? __pfx_warn_alloc+0x10/0x10 [ 103.558607][ T6159] ? kasan_save_track+0x3e/0x80 [ 103.558634][ T6159] ? __kasan_kmalloc+0x93/0xb0 [ 103.558664][ T6159] ? xsk_setsockopt+0x4dc/0x8d0 [ 103.558688][ T6159] ? do_sock_setsockopt+0x17c/0x1b0 [ 103.558706][ T6159] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 103.558725][ T6159] ? do_syscall_64+0xfa/0xfa0 [ 103.558752][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.558783][ T6159] __vmalloc_node_range_noprof+0x125/0x12d0 [ 103.558846][ T6159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.558881][ T6159] ? __kasan_kmalloc+0x93/0xb0 [ 103.558918][ T6159] vmalloc_user_noprof+0xad/0xf0 [ 103.558948][ T6159] ? xskq_create+0xbf/0x170 [ 103.558976][ T6159] xskq_create+0xbf/0x170 [ 103.559006][ T6159] xsk_init_queue+0xb0/0x110 [ 103.559035][ T6159] xsk_setsockopt+0x4dc/0x8d0 [ 103.559068][ T6159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.559097][ T6159] ? __pfx_aa_sk_perm+0x10/0x10 [ 103.559128][ T6159] ? aa_sock_opt_perm+0xff/0x1b0 [ 103.559162][ T6159] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 103.559182][ T6159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 103.559209][ T6159] do_sock_setsockopt+0x17c/0x1b0 [ 103.559235][ T6159] __x64_sys_setsockopt+0x13f/0x1b0 [ 103.559262][ T6159] do_syscall_64+0xfa/0xfa0 [ 103.559290][ T6159] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.559319][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.559338][ T6159] ? clear_bhb_loop+0x60/0xb0 [ 103.559364][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.559383][ T6159] RIP: 0033:0x7f7abc38f6c9 [ 103.559413][ T6159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.559429][ T6159] RSP: 002b:00007f7abd290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.559456][ T6159] RAX: ffffffffffffffda RBX: 00007f7abc5e5fa0 RCX: 00007f7abc38f6c9 [ 103.559471][ T6159] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000021 [ 103.559482][ T6159] RBP: 00007f7abc411f91 R08: 0000000000000004 R09: 0000000000000000 [ 103.559493][ T6159] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.559505][ T6159] R13: 00007f7abc5e6038 R14: 00007f7abc5e5fa0 R15: 00007ffd5777c808 [ 103.559540][ T6159] [ 103.911440][ T6159] Mem-Info: [ 103.914710][ T6159] active_anon:5524 inactive_anon:0 isolated_anon:0 [ 103.914710][ T6159] active_file:2632 inactive_file:39876 isolated_file:0 [ 103.914710][ T6159] unevictable:768 dirty:422 writeback:1075 [ 103.914710][ T6159] slab_reclaimable:10445 slab_unreclaimable:95043 [ 103.914710][ T6159] mapped:29012 shmem:1356 pagetables:1108 [ 103.914710][ T6159] sec_pagetables:0 bounce:0 [ 103.914710][ T6159] kernel_misc_reclaimable:0 [ 103.914710][ T6159] free:1326889 free_pcp:24087 free_cma:0 [ 104.074195][ T6159] Node 0 active_anon:22468kB inactive_anon:0kB active_file:10528kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116228kB dirty:1668kB writeback:24kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11888kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.108034][ T6159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.112944][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 104.140185][ T6159] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.197414][ T6159] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 104.249395][ T6159] Node 0 DMA32 free:1406892kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22568kB inactive_anon:0kB active_file:10628kB inactive_file:159308kB unevictable:1536kB writepending:1692kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:73824kB local_pcp:48756kB free_cma:0kB [ 104.287225][ T6159] lowmem_reserve[]: 0 0 0 0 0 [ 104.292766][ T6159] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.323737][ T6159] lowmem_reserve[]: 0 0 0 0 0 [ 104.328605][ T6159] Node 1 Normal free:3889060kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18336kB local_pcp:9472kB free_cma:0kB [ 104.364143][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 104.374854][ T6159] lowmem_reserve[]: 0 0 0 0 0 [ 104.392309][ T6159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.400498][ T6191] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 104.405397][ T6169] bridge_slave_1: left allmulticast mode [ 104.439609][ T6169] bridge_slave_1: left promiscuous mode [ 104.444903][ T6159] Node 0 DMA32: 1095*4kB (UM) 132*8kB (UME) 29*16kB (UME) 3*32kB (UME) 4*64kB (UM) 1*128kB (U) 3*256kB (UM) 3*512kB (UM) 3*1024kB (M) 5*2048kB (UME) 338*4096kB (M) = 1406444kB [ 104.468848][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.493956][ T6159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.515720][ T6159] Node 1 Normal: 215*4kB (UE) 51*8kB (UME) 45*16kB (UME) 57*32kB (UME) 15*64kB (UME) 14*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889060kB [ 104.518101][ T6169] bridge_slave_0: left allmulticast mode [ 104.542638][ T6159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.542664][ T6159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.542682][ T6159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.542700][ T6159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.542717][ T6159] 43912 total pagecache pages [ 104.542740][ T6159] 0 pages in swap cache [ 104.542749][ T6159] Free swap = 124996kB [ 104.542759][ T6159] Total swap = 124996kB [ 104.542769][ T6159] 2097051 pages RAM [ 104.542778][ T6159] 0 pages HighMem/MovableOnly [ 104.542787][ T6159] 424119 pages reserved [ 104.542796][ T6159] 0 pages cma reserved [ 104.635512][ T6169] bridge_slave_0: left promiscuous mode [ 104.641523][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.121730][ T6213] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.79'. [ 105.174902][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 105.389289][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.405937][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.738831][ T1156] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.770832][ T1156] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.813003][ T1156] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.832340][ T1156] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.948586][ T6243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.991679][ T6250] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET) [ 106.091178][ T6250] syzkaller1: entered promiscuous mode [ 106.096710][ T6250] syzkaller1: entered allmulticast mode [ 106.236030][ T6263] team0: Cannot enslave team device to itself [ 106.332387][ T6268] netlink: 512 bytes leftover after parsing attributes in process `syz.2.94'. [ 106.621240][ T6280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.025363][ T6307] gtp0: entered promiscuous mode [ 107.041109][ T6307] gtp0: entered allmulticast mode [ 107.065207][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.104790][ T6312] gtp1: entered promiscuous mode [ 107.112610][ T6312] gtp1: entered allmulticast mode [ 107.556916][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 107.586119][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 107.603030][ T6334] : entered allmulticast mode [ 107.635161][ T6339] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 107.703354][ T6342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.121'. [ 107.973705][ T6355] syzkaller1: entered promiscuous mode [ 107.985385][ T6355] syzkaller1: entered allmulticast mode [ 108.287102][ T6375] __nla_validate_parse: 1 callbacks suppressed [ 108.287124][ T6375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.131'. [ 108.454052][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 108.829661][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 108.894812][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 108.931975][ T6408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.142'. [ 109.018370][ T6417] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 109.134954][ T6422] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 109.150021][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'. [ 109.215145][ T6429] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 109.224128][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 109.322934][ T6434] sctp: [Deprecated]: syz.2.150 (pid 6434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.322934][ T6434] Use struct sctp_sack_info instead [ 109.388424][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 109.425990][ T6441] IPv6: sit1: Disabled Multicast RS [ 109.432777][ T6441] sit1: entered allmulticast mode [ 109.440687][ T6437] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 109.562993][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 109.624631][ T6448] macvtap1: entered promiscuous mode [ 109.630141][ T6448] vlan0: entered promiscuous mode [ 109.635636][ T6448] macvtap1: entered allmulticast mode [ 109.643977][ T6448] vlan0: entered allmulticast mode [ 109.649163][ T6448] veth0_vlan: entered allmulticast mode [ 109.692957][ T6448] macvtap2: entered promiscuous mode [ 109.698715][ T6448] macvtap2: entered allmulticast mode [ 109.813270][ T6459] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 109.867760][ T6459] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 109.893192][ T6459] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 109.964074][ T6464] gretap1: entered promiscuous mode [ 110.004169][ T6464] bond2: (slave gretap1): making interface the new active one [ 110.024847][ T6464] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 110.097698][ T6459] macvlan2: entered promiscuous mode [ 110.115550][ T6459] macvlan2: entered allmulticast mode [ 110.128966][ T6459] bond2: entered promiscuous mode [ 110.142971][ T6459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.192047][ T6475] ip6t_rpfilter: unknown options [ 110.198155][ T6459] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 110.220638][ T6459] bond2: left promiscuous mode [ 110.306112][ T6481] netlink: 48 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.775225][ T6491] syzkaller0: entered promiscuous mode [ 110.781270][ T6491] syzkaller0: entered allmulticast mode [ 111.057788][ T6524] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 111.245807][ T6536] netlink: 'syz.3.172': attribute type 21 has an invalid length. [ 111.267591][ T6538] netlink: 'syz.4.176': attribute type 15 has an invalid length. [ 111.767127][ T6551] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 111.779271][ T6551] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 111.793144][ T6551] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 111.801623][ T6551] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 111.810447][ T6551] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 112.466292][ T6527] syz_tun: entered allmulticast mode [ 112.515387][ T6524] bond2: entered promiscuous mode [ 112.526153][ T6524] bond2: entered allmulticast mode [ 112.531976][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.629108][ T6527] syz_tun: left allmulticast mode [ 112.963213][ T6595] Bluetooth: MGMT ver 1.23 [ 114.212612][ T6620] Cannot find set identified by id 65534 to match [ 114.754693][ T6645] nbd: must specify a size in bytes for the device [ 114.807414][ T6648] __nla_validate_parse: 6 callbacks suppressed [ 114.807432][ T6648] netlink: 165 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.898166][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 115.753029][ T6646] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 115.780200][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 115.780499][ T6646] bond3 (unregistering): Released all slaves [ 115.826160][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 115.834999][ T6653] bond_slave_0: entered promiscuous mode [ 115.835065][ T6653] bond_slave_1: entered promiscuous mode [ 115.835241][ T6653] macvtap1: entered promiscuous mode [ 115.835257][ T6653] bond0: entered promiscuous mode [ 115.835836][ T6653] macvtap1: entered allmulticast mode [ 115.864618][ T6653] bond0: entered allmulticast mode [ 115.870344][ T6653] bond_slave_0: entered allmulticast mode [ 115.877190][ T6653] bond_slave_1: entered allmulticast mode [ 115.887898][ T6653] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 115.985612][ T6665] tipc: Started in network mode [ 116.021020][ T6665] tipc: Node identity aa827d64a3f1, cluster identity 4711 [ 116.029830][ T6665] tipc: Enabled bearer , priority 0 [ 116.053889][ T6665] syzkaller0: entered promiscuous mode [ 116.088689][ T6665] syzkaller0: entered allmulticast mode [ 116.116010][ T6665] tipc: Resetting bearer [ 116.139834][ T6660] tipc: Resetting bearer [ 116.173821][ T6660] tipc: Disabling bearer [ 116.280613][ T6680] sctp: [Deprecated]: syz.4.210 (pid 6680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.280613][ T6680] Use struct sctp_sack_info instead [ 116.306744][ T6689] sch_fq: defrate 0 ignored. [ 116.306823][ T6680] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 116.320642][ T6680] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 117.203417][ T6726] validate_nla: 28 callbacks suppressed [ 117.203461][ T6726] netlink: 'syz.3.223': attribute type 83 has an invalid length. [ 117.223717][ T6723] bond1: ARP target 1.0.0.0 is already present [ 117.230105][ T6723] bond1: option arp_ip_target: invalid value (1) [ 117.238422][ T6723] bond1 (unregistering): Released all slaves [ 117.494847][ T6737] netlink: 5 bytes leftover after parsing attributes in process `syz.3.226'. [ 117.505738][ T6737] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 117.513759][ T6738] netlink: 108 bytes leftover after parsing attributes in process `syz.0.225'. [ 117.534310][ T6737] netlink: 72 bytes leftover after parsing attributes in process `syz.3.226'. [ 117.543706][ T6737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.226'. [ 117.837975][ T6745] tipc: Started in network mode [ 117.869654][ T6745] tipc: Node identity ae55a79254ba, cluster identity 4711 [ 117.880984][ T6745] tipc: Enabled bearer , priority 0 [ 117.921348][ T6750] syzkaller0: entered promiscuous mode [ 117.933594][ T6750] syzkaller0: entered allmulticast mode [ 117.943117][ T6755] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 118.023218][ T6755] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 118.047061][ T6755] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 118.073557][ T6755] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.126817][ T6750] tipc: Resetting bearer [ 118.200517][ T6744] tipc: Resetting bearer [ 118.247243][ T6744] tipc: Disabling bearer [ 118.298764][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 118.621711][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 118.802535][ T6796] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 118.889629][ T5847] Bluetooth: hci4: command tx timeout [ 119.073530][ T6805] bond3: (slave gre0): Device is not bonding slave [ 119.106662][ T6805] bond3: option active_slave: invalid value (gre0) [ 119.131443][ T6805] bond3 (unregistering): Released all slaves [ 119.451186][ T6814] netlink: 'syz.3.249': attribute type 11 has an invalid length. [ 119.490433][ T6831] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20003 [ 119.530339][ T6835] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20003 [ 120.151134][ T6861] syzkaller0: entered promiscuous mode [ 120.156682][ T6861] syzkaller0: entered allmulticast mode [ 120.165451][ T6861] __nla_validate_parse: 5 callbacks suppressed [ 120.165468][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 120.210298][ T6863] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.259'. [ 120.573360][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'. [ 120.584827][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 120.618499][ T6886] tipc: Started in network mode [ 120.627355][ T6886] tipc: Node identity , cluster identity 4711 [ 120.635463][ T6886] tipc: Failed to obtain node identity [ 120.642121][ T6886] tipc: Enabling of bearer rejected, failed to enable media [ 120.647770][ T6888] can: request_module (can-proto-0) failed. [ 120.785653][ T6886] syzkaller0: entered promiscuous mode [ 120.802948][ T6886] syzkaller0: entered allmulticast mode [ 120.829151][ T6897] SET target dimension over the limit! [ 121.063422][ T6908] netlink: 104 bytes leftover after parsing attributes in process `syz.3.275'. [ 122.224631][ T6923] syzkaller0: entered promiscuous mode [ 122.242483][ T6932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.278'. [ 122.251896][ T6923] syzkaller0: entered allmulticast mode [ 122.317455][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 122.615677][ T6953] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 122.685100][ T6961] netlink: 'syz.4.288': attribute type 8 has an invalid length. [ 122.710523][ T6954] veth3: entered promiscuous mode [ 122.728834][ T6953] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.758267][ T6964] netlink: 176 bytes leftover after parsing attributes in process `syz.3.289'. [ 122.777113][ T6964] netlink: 176 bytes leftover after parsing attributes in process `syz.3.289'. [ 123.030108][ T6973] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 123.048088][ T6973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.291'. [ 123.662521][ T6993] lo: entered allmulticast mode [ 123.915418][ T7008] vlan2: entered allmulticast mode [ 123.966001][ T7008] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 124.107440][ T7020] Cannot find add_set index 1 as target [ 124.173864][ T7020] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 124.247407][ T7020] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 124.525760][ T7040] lo: left allmulticast mode [ 124.665567][ T7040] netlink: 'syz.0.311': attribute type 3 has an invalid length. [ 124.774073][ T7051] netlink: 'syz.2.313': attribute type 13 has an invalid length. [ 124.814528][ T7018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.816762][ T7051] gretap0: refused to change device tx_queue_len [ 124.839696][ T7018] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.841002][ T7051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.906737][ T7018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.959584][ T7018] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 125.059910][ T7068] netlink: 'syz.3.317': attribute type 15 has an invalid length. [ 125.081851][ T7018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.115585][ T7018] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 125.285596][ T7018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.305063][ T7018] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 125.395402][ T7080] __nla_validate_parse: 6 callbacks suppressed [ 125.395420][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 125.427816][ T7018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.479598][ T7018] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 125.507175][ T7082] syzkaller0: entered promiscuous mode [ 125.513254][ T7082] syzkaller0: entered allmulticast mode [ 125.707558][ T7081] delete_channel: no stack [ 125.723218][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'. [ 125.807642][ T7100] netlink: 165 bytes leftover after parsing attributes in process `syz.0.327'. [ 125.839021][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.268450][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 126.293173][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 126.614583][ T7147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 126.730389][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 126.795412][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 126.809942][ T116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.881296][ T7158] tipc: Started in network mode [ 126.902565][ T7158] tipc: Node identity a2611ceba044, cluster identity 4711 [ 126.926277][ T7158] tipc: Enabled bearer , priority 0 [ 126.951596][ T7160] syzkaller0: entered promiscuous mode [ 126.977617][ T7160] syzkaller0: entered allmulticast mode [ 127.099147][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 127.139870][ T7160] tipc: Resetting bearer [ 127.196119][ T7160] tipc: Disabling bearer [ 127.405354][ T7188] netlink: 'syz.0.346': attribute type 26 has an invalid length. [ 127.459526][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 127.496250][ T7197] lo speed is unknown, defaulting to 1000 [ 127.499603][ T7188] netlink: 'syz.0.346': attribute type 26 has an invalid length. [ 127.505972][ T7197] lo speed is unknown, defaulting to 1000 [ 127.523072][ T7197] lo speed is unknown, defaulting to 1000 [ 127.929825][ T7197] infiniband sz1: set down [ 127.934609][ T7197] infiniband sz1: added lo [ 127.948190][ T10] lo speed is unknown, defaulting to 1000 [ 128.017911][ T7197] RDS/IB: sz1: added [ 128.022806][ T7197] smc: adding ib device sz1 with port count 1 [ 128.030088][ T7197] smc: ib device sz1 port 1 has no pnetid [ 128.040860][ T7197] lo speed is unknown, defaulting to 1000 [ 128.054635][ T116] lo speed is unknown, defaulting to 1000 [ 128.590110][ T7197] lo speed is unknown, defaulting to 1000 [ 129.005557][ T7233] x_tables: unsorted entry at hook 3 [ 129.034940][ T7233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.133244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.693061][ T7197] lo speed is unknown, defaulting to 1000 [ 129.701447][ T7264] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 129.873867][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.234560][ T7289] dvmrp0: entered allmulticast mode [ 130.573746][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.671573][ T7197] lo speed is unknown, defaulting to 1000 [ 131.135998][ T7331] __nla_validate_parse: 6 callbacks suppressed [ 131.136016][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 131.265743][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 131.680784][ T7197] lo speed is unknown, defaulting to 1000 [ 131.886092][ T7360] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 131.898469][ T7362] netlink: 104 bytes leftover after parsing attributes in process `syz.4.387'. [ 132.049246][ T7372] delete_channel: no stack [ 132.230912][ T7379] netlink: 'syz.4.394': attribute type 21 has an invalid length. [ 132.270566][ T7379] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 132.373199][ T7386] openvswitch: netlink: Flow key attr not present in new flow. [ 132.411441][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 132.521861][ T7386] bond3: option xmit_hash_policy: invalid value (64) [ 132.557731][ T7386] bond3 (unregistering): Released all slaves [ 132.814205][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 132.842377][ T7407] netlink: 2 bytes leftover after parsing attributes in process `syz.0.403'. [ 133.008100][ T7410] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 133.155475][ T7420] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 133.225305][ T7420] bond2 (unregistering): Released all slaves [ 133.656240][ T7454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.416'. [ 133.670163][ T7455] openvswitch: netlink: Key 25 has unexpected len 4096 expected 16 [ 133.781315][ T7467] sctp: [Deprecated]: syz.2.421 (pid 7467) Use of int in max_burst socket option. [ 133.781315][ T7467] Use struct sctp_assoc_value instead [ 133.808523][ T7454] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 133.841815][ T7454] bond1 (unregistering): Released all slaves [ 133.921851][ T7459] netlink: 'syz.1.419': attribute type 12 has an invalid length. [ 134.163972][ T7484] netlink: 256 bytes leftover after parsing attributes in process `syz.3.424'. [ 134.165441][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 134.352822][ T7493] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 134.373516][ T7493] SET target dimension over the limit! [ 134.414813][ T7493] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 134.698502][ T7508] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 134.706856][ T7509] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 135.281053][ T7532] tipc: Enabled bearer , priority 0 [ 135.308704][ T7532] 0: reclassify loop, rule prio 0, protocol 800 [ 135.327642][ T7531] tipc: Resetting bearer [ 135.388859][ T7531] tipc: Disabling bearer [ 135.612948][ T7556] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 135.669345][ T7556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.703264][ T7556] bond2: entered allmulticast mode [ 136.267860][ T7584] __nla_validate_parse: 2 callbacks suppressed [ 136.267881][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 136.313588][ T7584] syzkaller1: entered promiscuous mode [ 136.319129][ T7584] syzkaller1: entered allmulticast mode [ 136.575174][ T7605] netlink: 'syz.3.455': attribute type 2 has an invalid length. [ 136.896184][ T7626] nbd: must specify a device to reconfigure [ 136.919257][ T7616] GUP no longer grows the stack in syz.0.459 (7616): 200000003000-20000000a000 (200000001000) [ 136.939891][ T7616] CPU: 1 UID: 0 PID: 7616 Comm: syz.0.459 Not tainted syzkaller #0 PREEMPT(full) [ 136.939921][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.939934][ T7616] Call Trace: [ 136.939942][ T7616] [ 136.939951][ T7616] dump_stack_lvl+0x189/0x250 [ 136.940003][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.940032][ T7616] ? __pfx__printk+0x10/0x10 [ 136.940051][ T7616] ? find_vma+0xe7/0x160 [ 136.940094][ T7616] __get_user_pages+0x2470/0x2a00 [ 136.940128][ T7616] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 136.940179][ T7616] ? rcu_is_watching+0x15/0xb0 [ 136.940218][ T7616] __gup_longterm_locked+0xde4/0x1660 [ 136.940253][ T7616] ? try_grab_folio_fast+0x1bf/0x6a0 [ 136.940295][ T7616] ? gup_fast_fallback+0x1b86/0x22d0 [ 136.940327][ T7616] gup_fast_fallback+0x1d65/0x22d0 [ 136.940397][ T7616] ? __pfx_gup_fast_fallback+0x10/0x10 [ 136.940492][ T7616] ? __mutex_lock+0x335/0x1350 [ 136.940543][ T7616] ? is_valid_gup_args+0x11f/0x200 [ 136.940574][ T7616] ? get_user_pages_fast+0x4d/0xb0 [ 136.940605][ T7616] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 136.940642][ T7616] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 136.940664][ T7616] ? wait_for_space+0x248/0x2d0 [ 136.940685][ T7616] iov_iter_get_pages2+0x5e/0xa0 [ 136.940716][ T7616] __se_sys_vmsplice+0x548/0x10d0 [ 136.940761][ T7616] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 136.940786][ T7616] ? __pfx_futex_wake+0x10/0x10 [ 136.940810][ T7616] ? restore_signal_shadow_stack+0x3b7/0x480 [ 136.940845][ T7616] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 136.940936][ T7616] ? do_syscall_64+0xbe/0xfa0 [ 136.940971][ T7616] do_syscall_64+0xfa/0xfa0 [ 136.940999][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.941029][ T7616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.941050][ T7616] ? clear_bhb_loop+0x60/0xb0 [ 136.941075][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.941095][ T7616] RIP: 0033:0x7f7abc38f6c9 [ 136.941130][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.941154][ T7616] RSP: 002b:00007f7abd290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 136.941185][ T7616] RAX: ffffffffffffffda RBX: 00007f7abc5e5fa0 RCX: 00007f7abc38f6c9 [ 136.941200][ T7616] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 136.941213][ T7616] RBP: 00007f7abc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.941226][ T7616] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 136.941237][ T7616] R13: 00007f7abc5e6038 R14: 00007f7abc5e5fa0 R15: 00007ffd5777c808 [ 136.941275][ T7616] [ 137.215603][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 137.383454][ T7636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.500203][ T7641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.467'. [ 137.532761][ T7636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.572051][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.469'. [ 137.594641][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.469'. [ 137.677361][ T7636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.726205][ T7648] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 137.838980][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'. [ 137.860444][ T7662] openvswitch: netlink: EtherType a is less than min 600 [ 137.871056][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 137.880947][ T7659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.893275][ T7659] bond3: (slave bond4): making interface the new active one [ 137.901573][ T7659] bond3: (slave bond4): Enslaving as an active interface with an up link [ 137.904394][ T7663] netlink: 240 bytes leftover after parsing attributes in process `syz.2.470'. [ 137.934423][ T7655] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 137.958499][ T7636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.988627][ T7648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.013461][ T7662] gtp0: entered promiscuous mode [ 138.018593][ T7662] gtp0: entered allmulticast mode [ 138.100470][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.107373][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.126180][ T7669] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 138.137062][ T7636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.149343][ T7669] netlink: 272 bytes leftover after parsing attributes in process `syz.3.474'. [ 138.219005][ T7673] netlink: 'syz.2.475': attribute type 2 has an invalid length. [ 138.367670][ T4503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.404794][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 138.448845][ T3498] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.471819][ T3498] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.531524][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.790455][ T7708] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 138.800316][ T7708] netlink: 'syz.1.482': attribute type 2 has an invalid length. [ 139.003911][ T7718] netlink: 'syz.4.487': attribute type 3 has an invalid length. [ 139.012795][ T7718] netlink: 'syz.4.487': attribute type 2 has an invalid length. [ 139.620307][ T7749] netlink: 'syz.4.497': attribute type 1 has an invalid length. [ 139.638693][ T7749] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 140.052273][ T7770] Bluetooth: MGMT ver 1.23 [ 140.527414][ T7798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.128230][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.140767][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.160803][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.168343][ T7828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.573320][ T7848] only policy match revision 0 supported [ 141.573343][ T7848] unable to load match [ 141.631928][ T7852] __nla_validate_parse: 13 callbacks suppressed [ 141.631943][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'. [ 141.797979][ T7861] netlink: 80 bytes leftover after parsing attributes in process `syz.2.531'. [ 142.615612][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 142.675584][ T7897] vlan2: entered allmulticast mode [ 142.684646][ T7897] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 142.848598][ T7905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.126943][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 143.164216][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 143.184226][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'. [ 143.548034][ T7949] netlink: 168 bytes leftover after parsing attributes in process `syz.4.558'. [ 144.218739][ T7979] x_tables: duplicate underflow at hook 1 [ 144.693631][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.569'. [ 144.727735][ T7990] x_tables: duplicate underflow at hook 1 [ 144.898253][ T7997] netlink: 100 bytes leftover after parsing attributes in process `syz.4.572'. [ 145.122081][ T30] audit: type=1804 audit(1763430880.818:2): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.576" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=562 res=1 errno=0 [ 145.155260][ T30] audit: type=1800 audit(1763430880.818:3): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name="cgroup.controllers" dev="tmpfs" ino=562 res=0 errno=0 [ 145.296437][ T8015] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20003 [ 146.346403][ T8025] syz_tun: entered allmulticast mode [ 146.385306][ T8025] pimreg: entered allmulticast mode [ 146.447818][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 146.516166][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.549649][ T8024] syz_tun: left allmulticast mode [ 146.566738][ T1097] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.590863][ T1097] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.620300][ T1097] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.679718][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 146.742134][ T8047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'. [ 146.894307][ T8050] sctp: [Deprecated]: syz.2.590 (pid 8050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.894307][ T8050] Use struct sctp_sack_info instead [ 146.951123][ T8054] validate_nla: 1 callbacks suppressed [ 146.951145][ T8054] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 147.039597][ T8054] netlink: 'syz.1.591': attribute type 2 has an invalid length. [ 147.190290][ T8060] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.594'. [ 147.777279][ T8087] x_tables: duplicate underflow at hook 2 [ 147.957677][ T8102] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.603'. [ 147.997084][ T8102] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.603'. [ 148.060048][ T8107] lo: entered allmulticast mode [ 148.103032][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 148.180782][ T8102] netlink: 'syz.2.603': attribute type 2 has an invalid length. [ 148.188741][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 148.207104][ T8102] : entered promiscuous mode [ 149.108209][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.621'. [ 149.450963][ T8191] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.628'. [ 149.654261][ T8202] netlink: 'syz.4.630': attribute type 27 has an invalid length. [ 149.706059][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 150.120333][ T8232] tipc: Can't bind to reserved service type 2 [ 150.475228][ T8247] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 150.487952][ T8249] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.498753][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 150.559322][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 150.600421][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 151.056635][ T8282] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 151.253909][ T8248] infiniband syz2: set active [ 151.254128][ T8298] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 151.266586][ T8248] infiniband syz2: added vxcan1 [ 151.283254][ T8291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.293307][ T8248] syz2: qp#16 rxe_init_sq: Unable to allocate send queue [ 151.294634][ T8291] bond3: (slave bond4): making interface the new active one [ 151.312026][ T8291] bond3: (slave bond4): Enslaving as an active interface with an up link [ 151.318589][ T8248] syz2: rxe_create_qp: returned err = -12 [ 151.321742][ T939] vxcan1 speed is unknown, defaulting to 1000 [ 151.351632][ T8248] infiniband syz2: Couldn't create ib_mad QP1 [ 151.359067][ T8248] infiniband syz2: Couldn't open port 1 [ 151.398474][ T8298] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 151.519813][ T8248] RDS/IB: syz2: added [ 151.564592][ T8248] smc: adding ib device syz2 with port count 1 [ 151.629042][ T8248] smc: ib device syz2 port 1 has no pnetid [ 151.649375][ T984] vxcan1 speed is unknown, defaulting to 1000 [ 151.698302][ T8319] __nla_validate_parse: 9 callbacks suppressed [ 151.698323][ T8319] netlink: 256 bytes leftover after parsing attributes in process `syz.3.661'. [ 151.721736][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 151.979748][ T8333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.665'. [ 152.154773][ T8343] netlink: 248 bytes leftover after parsing attributes in process `syz.1.667'. [ 152.606634][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 152.661446][ T8357] netlink: 68 bytes leftover after parsing attributes in process `syz.0.670'. [ 152.691913][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 152.746199][ T8358] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 152.881903][ T8358] team1: entered promiscuous mode [ 152.887091][ T8358] team1: entered allmulticast mode [ 153.153453][ T8380] gtp2: entered promiscuous mode [ 153.211952][ T8380] gtp2: entered allmulticast mode [ 153.447586][ T8399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.680'. [ 153.567991][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 153.743569][ T8419] netlink: 666 bytes leftover after parsing attributes in process `syz.4.682'. [ 153.812187][ T8424] netlink: 'syz.0.683': attribute type 13 has an invalid length. [ 153.824973][ T8419] netlink: 666 bytes leftover after parsing attributes in process `syz.4.682'. [ 153.971821][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.196617][ T8435] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 154.292899][ T8424] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 154.311848][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.349882][ T8424] macvtap1: left promiscuous mode [ 154.355302][ T8424] macvtap1: left allmulticast mode [ 154.367963][ T8424] macvtap2: left promiscuous mode [ 154.373818][ T8424] vlan0: left promiscuous mode [ 154.379122][ T8424] macvtap2: left allmulticast mode [ 154.385983][ T8424] vlan0: left allmulticast mode [ 154.392118][ T8424] veth0_vlan: left allmulticast mode [ 154.404864][ T8424] syzkaller0: left promiscuous mode [ 154.410491][ T8424] syzkaller0: left allmulticast mode [ 154.418609][ T8424] vlan2: left allmulticast mode [ 154.424988][ T8424] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 154.438199][ T8424] gtp0: left promiscuous mode [ 154.443134][ T8424] gtp0: left allmulticast mode [ 154.452087][ T8424] team1: left promiscuous mode [ 154.457032][ T8424] team1: left allmulticast mode [ 154.466419][ T8419] netlink: 666 bytes leftover after parsing attributes in process `syz.4.682'. [ 154.556763][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 154.598209][ T8419] netlink: 666 bytes leftover after parsing attributes in process `syz.4.682'. [ 154.766816][ T8447] lo: entered promiscuous mode [ 154.795650][ T8447] tunl0: entered promiscuous mode [ 154.816752][ T8447] gre0: entered promiscuous mode [ 154.863738][ T8447] gretap0: entered promiscuous mode [ 154.879580][ T8447] erspan0: entered promiscuous mode [ 154.896950][ T8447] ip_vti0: entered promiscuous mode [ 154.900286][ T8455] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 154.910689][ T8455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.914045][ T8447] ip6_vti0: entered promiscuous mode [ 154.930826][ T8447] sit0: entered promiscuous mode [ 154.942582][ T8447] ip6tnl0: entered promiscuous mode [ 154.954835][ T8447] ip6gre0: entered promiscuous mode [ 154.964546][ T8447] syz_tun: entered promiscuous mode [ 154.983598][ T8447] ip6gretap0: entered promiscuous mode [ 154.996138][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.004026][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.014559][ T8447] bridge0: entered promiscuous mode [ 155.121728][ T8248] vxcan1 speed is unknown, defaulting to 1000 [ 155.275244][ T8464] vlan0: entered promiscuous mode [ 155.317331][ T8464] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 155.608913][ T8478] x_tables: duplicate underflow at hook 1 [ 157.093083][ T8499] __nla_validate_parse: 3 callbacks suppressed [ 157.093105][ T8499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.701'. [ 157.351146][ T8516] netlink: 'syz.1.707': attribute type 6 has an invalid length. [ 157.422014][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.708'. [ 157.432373][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.448702][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.456791][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'. [ 157.494729][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.580101][ T8534] gre0: entered promiscuous mode [ 157.621737][ T8521] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.713905][ T8521] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.769975][ T8540] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 157.827156][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.873471][ T8547] bond5: option resend_igmp: invalid value (32767) [ 157.884940][ T8547] bond5: option resend_igmp: allowed values 0 - 255 [ 157.897274][ T8547] bond5 (unregistering): Released all slaves [ 157.944275][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.953434][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.958280][ T8548] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 157.968506][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 157.984111][ T8521] wlan0 speed is unknown, defaulting to 1000 [ 158.302901][ T8569] netlink: 10 bytes leftover after parsing attributes in process `syz.1.718'. [ 158.327052][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 158.372419][ T8569] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 158.456760][ T8583] netlink: 332 bytes leftover after parsing attributes in process `syz.0.722'. [ 158.652896][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.724'. [ 158.793076][ T8594] netlink: 'syz.4.726': attribute type 83 has an invalid length. [ 158.801446][ T8599] netlink: 'syz.4.726': attribute type 83 has an invalid length. [ 159.060141][ T8611] tipc: Enabled bearer , priority 13 [ 159.067423][ T8611] netlink: 108 bytes leftover after parsing attributes in process `syz.4.730'. [ 159.162261][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 159.287835][ T8618] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 159.307638][ T8618] bond4 (unregistering): Released all slaves [ 159.352756][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 159.418258][ T8623] syzkaller0: entered promiscuous mode [ 159.424088][ T8623] syzkaller0: entered allmulticast mode [ 160.200259][ T10] tipc: Node number set to 35986667 [ 160.411457][ T8677] tipc: Started in network mode [ 160.424860][ T8677] tipc: Node identity 7267aa646f31, cluster identity 4711 [ 160.450071][ T8677] tipc: Enabled bearer , priority 0 [ 160.457823][ T8677] syzkaller0: entered promiscuous mode [ 160.471552][ T8677] syzkaller0: entered allmulticast mode [ 160.576007][ T8677] tipc: Resetting bearer [ 160.656310][ T8694] netlink: 'syz.4.757': attribute type 6 has an invalid length. [ 160.667839][ T8676] tipc: Resetting bearer [ 160.717761][ T8676] tipc: Disabling bearer [ 160.914648][ T8706] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 161.088528][ T8706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.187371][ T8712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.210556][ T8712] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.257012][ T8712] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 161.314430][ T8715] veth5: entered promiscuous mode [ 161.325098][ T8715] bond5: (slave veth5): Enslaving as an active interface with a down link [ 161.347330][ T8706] vlan3: entered allmulticast mode [ 161.352963][ T8706] bond5: entered allmulticast mode [ 161.958643][ T8763] netlink: 'syz.4.778': attribute type 4 has an invalid length. [ 162.350279][ T8777] __nla_validate_parse: 11 callbacks suppressed [ 162.350299][ T8777] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 162.411612][ T8777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.785'. [ 162.444798][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 162.519049][ T8789] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 162.542484][ T8788] Driver unsupported XDP return value 0 on prog (id 183) dev N/A, expect packet loss! [ 162.716311][ T8801] lo: entered promiscuous mode [ 162.749886][ T8801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.031229][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'. [ 163.042831][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.201354][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 163.251188][ T8828] block nbd1: not configured, cannot reconfigure [ 163.257863][ T8833] lo: left allmulticast mode [ 163.267519][ T8833] pimreg: left allmulticast mode [ 163.437958][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 163.448704][ T8840] netlink: 'syz.4.802': attribute type 28 has an invalid length. [ 163.457042][ T8840] netlink: 'syz.4.802': attribute type 3 has an invalid length. [ 163.459304][ T8835] bond5 (unregistering): Released all slaves [ 163.465188][ T8840] netlink: 132 bytes leftover after parsing attributes in process `syz.4.802'. [ 163.554186][ T3498] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.554404][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 163.564039][ T3498] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.623529][ T3498] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.647431][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 163.671819][ T3498] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.851843][ T8855] netlink: 88 bytes leftover after parsing attributes in process `syz.0.806'. [ 163.878966][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 164.164021][ T8883] Bluetooth: hci3: Opcode 0x0c20 failed: -22 [ 164.524478][ T8902] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 165.168993][ T8925] lo speed is unknown, defaulting to 1000 [ 165.518824][ T8951] netlink: 'syz.4.829': attribute type 21 has an invalid length. [ 165.609923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.622209][ T8954] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.898523][ T8925] vxcan1 speed is unknown, defaulting to 1000 [ 165.930094][ T5847] Bluetooth: hci0: command tx timeout [ 166.170583][ T5847] Bluetooth: hci3: command tx timeout [ 166.764092][ T8925] wlan0 speed is unknown, defaulting to 1000 [ 167.113165][ T9021] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 167.808286][ T9053] __nla_validate_parse: 13 callbacks suppressed [ 167.808308][ T9053] netlink: 808 bytes leftover after parsing attributes in process `syz.3.862'. [ 168.100571][ T9066] netlink: 'syz.1.864': attribute type 2 has an invalid length. [ 168.109830][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 168.187023][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 168.238645][ T9077] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.867'. [ 168.325791][ T9084] netlink: 108 bytes leftover after parsing attributes in process `syz.4.869'. [ 168.559949][ T9095] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 168.568410][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.568805][ T9093] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 168.607917][ T9095] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 168.667897][ T9095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.676983][ T9099] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 168.750240][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 168.772275][ T9099] bond4: entered promiscuous mode [ 168.777769][ T9099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.813910][ T9098] bond6: (slave geneve2): making interface the new active one [ 168.824714][ T9098] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 168.889249][ T9106] bond4: (slave bridge1): making interface the new active one [ 168.922386][ T9106] bridge1: entered promiscuous mode [ 168.928738][ T9106] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 169.016205][ T9116] net veth1_virt_wifi .: renamed from virt_wifi0 [ 169.276578][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d5bc00: rx timeout, send abort [ 169.289065][ T9137] macvtap3: entered promiscuous mode [ 169.295489][ T9137] vlan0: entered promiscuous mode [ 169.306889][ T9137] macvtap3: entered allmulticast mode [ 169.313017][ T9137] vlan0: entered allmulticast mode [ 169.320985][ T9137] veth0_vlan: entered allmulticast mode [ 169.341441][ T9140] macvtap4: entered promiscuous mode [ 169.346810][ T9140] macvtap4: entered allmulticast mode [ 169.362383][ T9141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'. [ 169.777722][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d5b400: rx timeout, send abort [ 169.786620][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d5bc00: abort rx timeout. Force session deactivation [ 170.286181][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d5b400: abort rx timeout. Force session deactivation [ 170.676655][ T9203] block nbd3: not configured, cannot reconfigure [ 170.717340][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 171.011929][ T9225] netlink: 'syz.2.904': attribute type 23 has an invalid length. [ 171.055284][ T9228] x_tables: unsorted entry at hook 2 [ 171.162519][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.907'. [ 171.213928][ T9240] x_tables: duplicate underflow at hook 2 [ 171.465578][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.914'. [ 171.540774][ T9261] tipc: Started in network mode [ 171.546566][ T9261] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 171.567850][ T9261] tipc: Enabled bearer , priority 10 [ 172.488270][ T9313] netlink: 'syz.2.928': attribute type 10 has an invalid length. [ 172.543965][ T9316] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 172.573892][ T9316] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 172.641529][ T9325] sctp: [Deprecated]: syz.3.931 (pid 9325) Use of int in max_burst socket option. [ 172.641529][ T9325] Use struct sctp_assoc_value instead [ 172.801010][ T9313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.815758][ T939] tipc: Node number set to 10005162 [ 173.066072][ T9347] __nla_validate_parse: 2 callbacks suppressed [ 173.066090][ T9347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.937'. [ 173.085729][ T9348] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 173.221389][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 173.244915][ T9354] netlink: 165 bytes leftover after parsing attributes in process `syz.4.940'. [ 173.302354][ T9360] vlan1: entered promiscuous mode [ 173.743733][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.948'. [ 173.782454][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.795633][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 173.902466][ T9367] "syz.4.944" (9367) uses obsolete ecb(arc4) skcipher [ 173.985182][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 174.030005][ T9400] veth1_macvtap: left promiscuous mode [ 174.085090][ T9400] tipc: Enabling of bearer rejected, failed to enable media [ 174.087364][ T9403] netlink: 5 bytes leftover after parsing attributes in process `syz.3.955'. [ 174.122561][ T9403] 0ªî{X¹¦: renamed from gretap0 [ 174.212226][ T9403] 0ªî{X¹¦: entered allmulticast mode [ 174.255506][ T9403] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 174.310511][ T9416] openvswitch: netlink: Flow key attribute not present in set flow. [ 174.516253][ T9422] netlink: 220 bytes leftover after parsing attributes in process `syz.4.959'. [ 174.526604][ T9422] netlink: 'syz.4.959': attribute type 2 has an invalid length. [ 174.576839][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.960'. [ 174.989630][ T9449] netlink: 'syz.0.967': attribute type 30 has an invalid length. [ 175.376498][ T9477] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 175.462965][ T9477] bond5: (slave geneve2): making interface the new active one [ 175.498698][ T9477] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 175.544113][ T3498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 175.557728][ T3498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 175.711161][ T9491] bond4: entered promiscuous mode [ 175.718209][ T9491] bond4: entered allmulticast mode [ 175.725316][ T9491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.740395][ T3498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 175.768718][ T3498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 175.821370][ T9498] hsr_slave_0: left promiscuous mode [ 175.828107][ T9498] hsr_slave_1: left promiscuous mode [ 175.951305][ T9508] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 176.029507][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.077857][ T9516] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 176.099773][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.139161][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.174708][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.325339][ T9529] block nbd2: not configured, cannot reconfigure [ 176.364081][ T9529] x_tables: duplicate underflow at hook 2 [ 176.662622][ T9550] syzkaller0: entered promiscuous mode [ 176.678599][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.696597][ T9556] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 176.699940][ T9550] syzkaller0: entered allmulticast mode [ 176.802378][ T9550] lo speed is unknown, defaulting to 1000 [ 177.055278][ T9569] vlan3: entered allmulticast mode [ 177.250920][ T9550] vxcan1 speed is unknown, defaulting to 1000 [ 177.417022][ T9587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.457377][ T9587] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.745244][ T9550] wlan0 speed is unknown, defaulting to 1000 [ 177.944832][ T9601] netlink: 'syz.3.1014': attribute type 39 has an invalid length. [ 178.416413][ T9610] __nla_validate_parse: 11 callbacks suppressed [ 178.416432][ T9610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1017'. [ 178.764633][ T9626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1022'. [ 178.805296][ T9623] netlink: 'syz.2.1021': attribute type 12 has an invalid length. [ 179.003628][ T9635] C: renamed from team_slave_0 (while UP) [ 179.016987][ T9635] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 179.029680][ T9635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 179.170092][ T9642] syzkaller0: entered promiscuous mode [ 179.194622][ T9642] syzkaller0: entered allmulticast mode [ 179.429705][ T9651] bridge0: port 3(dummy0) entered disabled state [ 179.847765][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 179.859865][ T9675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.945707][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1037'. [ 180.433913][ T9697] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 180.437499][ T9700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.538614][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1049'. [ 180.558510][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 180.611599][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 180.646983][ T9707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.677447][ T9707] bond5: (slave bond6): making interface the new active one [ 180.691730][ T9707] bond5: (slave bond6): Enslaving as an active interface with an up link [ 180.708590][ T9697] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.722308][ T9697] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 180.765066][ T9717] syzkaller0: left promiscuous mode [ 180.771740][ T9717] syzkaller0: left allmulticast mode [ 180.949717][ T9728] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.360751][ T9750] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 181.401605][ T9744] bond7: option mode: invalid value (133) [ 181.418192][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 181.431491][ T9744] bond7 (unregistering): Released all slaves [ 181.649301][ T9752] netlink: 'syz.3.1063': attribute type 13 has an invalid length. [ 182.077117][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 182.256759][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 182.922527][ T9820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.040476][ T9829] xt_hashlimit: size too large, truncated to 1048576 [ 183.073193][ T9823] tipc: Enabled bearer , priority 0 [ 183.370304][ T5847] Bluetooth: hci0: command tx timeout [ 183.402496][ T9823] tipc: Resetting bearer [ 183.419838][ T9843] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 183.452363][ T9846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.700559][ T9823] tipc: Disabling bearer [ 184.712630][ T9843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 184.736264][ T9848] dvmrp6: entered allmulticast mode [ 184.780050][ T10] tipc: Node number set to 4210010002 [ 185.054461][ T9872] __nla_validate_parse: 8 callbacks suppressed [ 185.054480][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 185.100833][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 185.997219][ T9919] x_tables: duplicate underflow at hook 3 [ 186.111138][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 186.191901][ T1097] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.212086][ T1097] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.237523][ T1097] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.277012][ T1097] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.315208][ T9935] team_slave_0: entered promiscuous mode [ 186.321147][ T9935] team_slave_1: entered promiscuous mode [ 186.348927][ T9935] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 186.366184][ T9935] team0: Device macvtap2 is already an upper device of the team interface [ 186.384609][ T9935] team_slave_0: left promiscuous mode [ 186.390216][ T9935] team_slave_1: left promiscuous mode [ 186.659121][ T9955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'. [ 186.753822][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'. [ 186.764589][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.783323][ T9948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.030097][ T3498] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.040522][ T3498] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.070158][ T3498] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.094890][ T3498] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.120760][ T3498] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.141205][ T3498] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.185669][ T9973] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1126'. [ 187.277331][ T3498] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.317574][ T3498] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.348087][ T3498] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.392171][ T3498] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.401859][ T3498] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.412436][ T3498] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.430230][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'. [ 187.926888][T10002] tipc: Enabled bearer , priority 0 [ 187.956014][T10002] syzkaller0: entered promiscuous mode [ 187.969525][T10002] syzkaller0: entered allmulticast mode [ 187.990507][T10002] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.003029][T10013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.221090][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 188.240380][T10023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1142'. [ 188.310264][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 188.359052][T10000] tipc: Resetting bearer [ 188.395640][T10000] tipc: Disabling bearer [ 188.408612][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.417764][T10026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.427277][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.437149][T10026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.552270][T10029] lo: left promiscuous mode [ 188.567989][T10029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.049869][T10054] macvtap1: entered promiscuous mode [ 189.062600][T10054] macvtap1: entered allmulticast mode [ 189.073703][T10054] vlan0: entered allmulticast mode [ 189.083394][T10054] veth0_vlan: entered allmulticast mode [ 189.246732][T10068] syzkaller0: entered promiscuous mode [ 189.253508][T10068] syzkaller0: entered allmulticast mode [ 189.264742][T10068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.313077][T10073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.522869][ T24] IPVS: starting estimator thread 0... [ 189.578690][T10088] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 189.586203][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 189.611322][T10085] IPVS: using max 26 ests per chain, 62400 per kthread [ 189.654055][T10089] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 189.676316][ T30] audit: type=1804 audit(1763430925.368:4): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1167" name="/newroot/226/cgroup.controllers" dev="tmpfs" ino=1172 res=1 errno=0 [ 189.677675][T10092] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 189.718582][ T30] audit: type=1800 audit(1763430925.368:5): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1167" name="cgroup.controllers" dev="tmpfs" ino=1172 res=0 errno=0 [ 189.876323][T10099] raw_sendmsg: syz.2.1170 forgot to set AF_INET. Fix it! [ 189.938148][T10095] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.963514][T10095] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 189.975257][T10095] bond8: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode [ 190.021380][T10089] bond8: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.034768][T10089] bond8: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 190.248174][T10116] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 190.283294][T10113] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 190.387531][T10122] bond1: (slave geneve2): making interface the new active one [ 190.402333][T10122] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 190.411583][ T1156] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.461625][ T1156] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.493561][ T1156] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.520525][ T1156] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.588635][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.683709][T10131] netlink: 'syz.3.1179': attribute type 4 has an invalid length. [ 190.957945][T10154] __nla_validate_parse: 7 callbacks suppressed [ 190.957964][T10154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1184'. [ 190.981287][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1184'. [ 191.194150][T10161] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1186'. [ 191.230620][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'. [ 191.286464][T10164] netlink: 'syz.1.1187': attribute type 20 has an invalid length. [ 191.308034][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.317635][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.327203][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'. [ 191.338131][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.347762][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.357083][T10164] netlink: 'syz.1.1187': attribute type 20 has an invalid length. [ 191.618349][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 191.670492][T10177] netlink: 'syz.1.1191': attribute type 7 has an invalid length. [ 191.679099][T10177] netlink: 'syz.1.1191': attribute type 8 has an invalid length. [ 191.688115][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 191.739335][T10177] erspan0: entered promiscuous mode [ 191.747695][T10177] batadv_slave_1: entered promiscuous mode [ 191.757725][T10177] erspan0: left promiscuous mode [ 191.766076][T10177] batadv_slave_1: left promiscuous mode [ 191.923859][T10189] syzkaller0: entered promiscuous mode [ 191.941546][T10189] syzkaller0: entered allmulticast mode [ 192.064325][T10199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1197'. [ 192.237844][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 192.455097][T10222] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1202'. [ 192.506500][T10226] tipc: Enabled bearer , priority 0 [ 192.524880][T10226] syzkaller0: entered promiscuous mode [ 192.534713][T10226] syzkaller0: entered allmulticast mode [ 192.542576][T10226] tipc: Resetting bearer [ 192.573619][T10226] tipc: Resetting bearer [ 192.866979][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.886181][T10242] openvswitch: netlink: Missing valid actions attribute. [ 192.932023][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.075714][T10252] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 193.155131][T10252] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 193.170579][T10252] bond6 (unregistering): Released all slaves [ 193.521810][T10272] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 193.552369][T10272] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 193.569937][T10272] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 193.599231][T10272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 193.683810][T10281] lo speed is unknown, defaulting to 1000 [ 194.023307][T10303] sctp: [Deprecated]: syz.1.1229 (pid 10303) Use of int in maxseg socket option. [ 194.023307][T10303] Use struct sctp_assoc_value instead [ 194.296303][T10281] vxcan1 speed is unknown, defaulting to 1000 [ 194.582551][T10333] syzkaller1: entered promiscuous mode [ 194.623739][T10333] syzkaller1: entered allmulticast mode [ 194.744496][T10341] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.768249][T10281] wlan0 speed is unknown, defaulting to 1000 [ 194.906670][T10348] macvtap1: entered allmulticast mode [ 194.916290][T10348] veth0_macvtap: entered allmulticast mode [ 194.972100][T10352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.624976][ T116] IPVS: starting estimator thread 0... [ 195.729577][T10381] IPVS: using max 26 ests per chain, 62400 per kthread [ 195.977690][T10395] tipc: Enabling of bearer rejected, failed to enable media [ 196.070405][T10399] validate_nla: 2 callbacks suppressed [ 196.070424][T10399] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 196.118139][T10399] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 196.159055][T10403] __nla_validate_parse: 14 callbacks suppressed [ 196.159077][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1261'. [ 196.391906][T10416] IPv6: NLM_F_CREATE should be specified when creating new route [ 196.577662][T10425] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 196.684266][T10425] bond5: entered promiscuous mode [ 196.714970][T10425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.858749][T10425] bond5: (slave bridge2): making interface the new active one [ 196.870439][T10425] bridge2: entered promiscuous mode [ 196.877270][T10425] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 196.953427][T10440] netlink: 'syz.2.1271': attribute type 32 has an invalid length. [ 196.990221][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 197.035868][T10450] netlink: 'syz.0.1274': attribute type 5 has an invalid length. [ 197.066680][T10440] bond7: Setting coupled_control to off (0) [ 197.111599][T10459] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.454147][T10479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1282'. [ 198.444986][T10530] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1300'. [ 198.695207][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 198.956304][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 199.032250][T10565] v: renamed from vlan0 [ 199.049032][T10563] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.528217][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 199.531536][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 199.551595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.596535][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 199.640407][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1317'. [ 201.000989][T10672] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 201.090511][T10672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.183350][T10672] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.429836][T10694] netlink: 'syz.2.1341': attribute type 3 has an invalid length. [ 202.132325][T10725] syzkaller1: entered promiscuous mode [ 202.158394][T10725] syzkaller1: entered allmulticast mode [ 202.326230][T10738] __nla_validate_parse: 1 callbacks suppressed [ 202.326251][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 202.349580][T10738] netlink: 'syz.4.1350': attribute type 8 has an invalid length. [ 202.622021][T10747] geneve4: entered promiscuous mode [ 202.627299][T10747] geneve4: entered allmulticast mode [ 202.639077][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.701799][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.726082][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.760428][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.772382][T10753] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 202.789839][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 202.800678][T10749] lo speed is unknown, defaulting to 1000 [ 202.807720][T10753] netlink: 'syz.1.1354': attribute type 2 has an invalid length. [ 202.827309][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1354'. [ 203.076242][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 203.246983][T10768] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 203.338171][T10768] bond6: entered promiscuous mode [ 203.356371][T10768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.411935][T10772] bond6: (slave bridge3): making interface the new active one [ 203.421876][T10772] bridge3: entered promiscuous mode [ 203.428092][T10772] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 203.454451][T10749] vxcan1 speed is unknown, defaulting to 1000 [ 203.706617][T10790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.714309][T10790] IPv6: NLM_F_CREATE should be set when creating new route [ 203.775874][T10794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.991143][T10803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1371'. [ 204.073053][T10813] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1371'. [ 204.100570][T10807] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 204.119972][T10807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.135393][T10812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.296077][T10749] wlan0 speed is unknown, defaulting to 1000 [ 204.633042][T10835] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 204.648782][T10836] xt_l2tp: invalid flags combination: 0 [ 204.712944][T10842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 204.932676][T10850] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1385'. [ 204.957723][T10850] nbd: illegal input index -8454144 [ 204.976951][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 205.516290][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 205.895838][T10896] netlink: 'syz.3.1399': attribute type 21 has an invalid length. [ 205.906374][T10896] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 206.384853][T10916] bond8 (unregistering): Released all slaves [ 206.778234][T10946] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 206.797645][T10946] netlink: 'syz.1.1412': attribute type 12 has an invalid length. [ 206.826095][T10946] netlink: 'syz.1.1412': attribute type 29 has an invalid length. [ 206.905716][T10955] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 206.965348][T10958] IPv6: sit1: Disabled Multicast RS [ 206.983097][T10958] sit1: entered allmulticast mode [ 207.039646][T10960] netlink: 'syz.2.1417': attribute type 3 has an invalid length. [ 207.048803][T10960] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 207.566030][T10995] __nla_validate_parse: 9 callbacks suppressed [ 207.566048][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1430'. [ 207.687639][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 207.944741][T11013] netlink: 'syz.2.1433': attribute type 13 has an invalid length. [ 208.057637][T11024] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 208.121041][T11013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.166711][ T5953] lo speed is unknown, defaulting to 1000 [ 208.189692][ T5953] sz1: Port: 1 Link ACTIVE [ 208.224649][ T5953] lo speed is unknown, defaulting to 1000 [ 208.247344][T11029] lo speed is unknown, defaulting to 1000 [ 208.485205][T11029] vxcan1 speed is unknown, defaulting to 1000 [ 208.629006][T11045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1441'. [ 208.712828][T11029] wlan0 speed is unknown, defaulting to 1000 [ 208.919420][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 209.028661][T11064] sctp: [Deprecated]: syz.4.1448 (pid 11064) Use of int in maxseg socket option. [ 209.028661][T11064] Use struct sctp_assoc_value instead [ 209.074272][T11051] syzkaller0: entered promiscuous mode [ 209.083209][T11051] syzkaller0: entered allmulticast mode [ 209.125736][T11067] xt_cluster: node mask cannot exceed total number of nodes [ 209.441193][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 209.897342][ T6322] udevd[6322]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 211.036979][T11093] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 211.047049][T11091] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1455'. [ 211.633679][T11126] tipc: Enabled bearer , priority 0 [ 211.643929][T11124] tipc: Enabling of bearer rejected, already enabled [ 211.656938][T11126] tipc: Resetting bearer [ 211.736694][T11123] tipc: Disabling bearer [ 211.831691][T11131] x_tables: unsorted underflow at hook 2 [ 211.907381][T11135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1466'. [ 212.118502][T11148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1468'. [ 212.158657][T11148] unsupported nlmsg_type 40 [ 212.325628][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 212.597339][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1480'. [ 212.608029][T11169] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1478'. [ 212.641489][T11169] xt_policy: neither incoming nor outgoing policy selected [ 212.804804][T11177] netlink: 'syz.0.1481': attribute type 4 has an invalid length. [ 212.815800][T11177] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 212.875363][T11183] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1484'. [ 212.976959][T11187] vlan2: entered promiscuous mode [ 212.995646][T11187] vlan2: entered allmulticast mode [ 213.026088][T11187] hsr_slave_1: entered allmulticast mode [ 213.141795][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 213.172738][T11197] netlink: 'syz.4.1490': attribute type 42 has an invalid length. [ 213.328835][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'. [ 213.803180][T11236] sch_tbf: peakrate 7 is lower than or equals to rate 14 ! [ 214.177089][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.184634][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.790142][T11237] bond0: left allmulticast mode [ 214.796621][T11237] bond_slave_0: left allmulticast mode [ 214.809911][T11237] bond_slave_1: left allmulticast mode [ 214.818579][T11237] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 214.892247][ T10] lo speed is unknown, defaulting to 1000 [ 214.898215][ T10] sz1: Port: 1 Link DOWN [ 214.927719][T11245] ip6gre1: entered promiscuous mode [ 214.939669][T11245] ip6gre1: entered allmulticast mode [ 214.992148][T11276] vxcan1 speed is unknown, defaulting to 1000 [ 214.998289][T11276] syz2: Port: 1 Link DOWN [ 215.009604][ T37] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.018538][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.070346][ T3498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.078895][ T3498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.103015][ T939] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.161852][ T37] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.206765][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.234365][ T37] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.268752][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.297459][T11307] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1509'. [ 215.309114][ T5894] lo speed is unknown, defaulting to 1000 [ 215.316025][T11253] vxcan1 speed is unknown, defaulting to 1000 [ 215.347487][T11307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1509'. [ 215.369320][ T37] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.419062][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.559977][T11261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.589024][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 215.608108][T11315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.640610][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 215.821270][T11324] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 215.852626][T11261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.871808][T11327] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 215.880515][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 215.920878][T11330] netlink: 'syz.0.1519': attribute type 11 has an invalid length. [ 215.928779][T11330] netlink: 'syz.0.1519': attribute type 11 has an invalid length. [ 216.483443][T11348] lo speed is unknown, defaulting to 1000 [ 216.775529][T11360] netlink: 'syz.3.1527': attribute type 6 has an invalid length. [ 216.851778][T11366] netlink: 'syz.0.1528': attribute type 28 has an invalid length. [ 216.888242][T11366] netlink: 'syz.0.1528': attribute type 3 has an invalid length. [ 216.950548][T11369] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 216.970553][T11369] netlink: 'syz.3.1529': attribute type 11 has an invalid length. [ 217.010938][T11375] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 217.128552][T11377] gretap1: entered promiscuous mode [ 217.252059][T11380] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 217.317406][T11380] bond7 (unregistering): Released all slaves [ 217.433941][T11379] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 217.456703][T11379] bond7 (unregistering): Released all slaves [ 217.711160][T11408] __nla_validate_parse: 7 callbacks suppressed [ 217.711179][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1540'. [ 217.950521][T11428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.187706][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.199002][T11441] [ 218.201391][T11441] ====================================================== [ 218.208429][T11441] WARNING: possible circular locking dependency detected [ 218.215569][T11441] syzkaller #0 Not tainted [ 218.220009][T11441] ------------------------------------------------------ [ 218.227140][T11441] syz.0.1549/11441 is trying to acquire lock: [ 218.233229][T11441] ffff88807a3f3a18 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 218.245470][T11441] [ 218.245470][T11441] but task is already holding lock: [ 218.252865][T11441] ffff8880217ed158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 218.262823][T11441] [ 218.262823][T11441] which lock already depends on the new lock. [ 218.262823][T11441] [ 218.273236][T11441] [ 218.273236][T11441] the existing dependency chain (in reverse order) is: [ 218.282263][T11441] [ 218.282263][T11441] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 218.290539][T11441] lock_acquire+0x120/0x360 [ 218.295575][T11441] _raw_spin_lock+0x2e/0x40 [ 218.300609][T11441] sch_direct_xmit+0x153/0x4b0 [ 218.305925][T11441] __dev_queue_xmit+0x1857/0x3b50 [ 218.311485][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.317136][T11441] ip6_output+0x340/0x550 [ 218.322003][T11441] NF_HOOK+0x9e/0x380 [ 218.326527][T11441] mld_sendpack+0x8d4/0xe60 [ 218.331572][T11441] mld_ifc_work+0x83e/0xd60 [ 218.336609][T11441] process_scheduled_works+0xae1/0x17b0 [ 218.342685][T11441] worker_thread+0x8a0/0xda0 [ 218.347824][T11441] kthread+0x711/0x8a0 [ 218.352433][T11441] ret_from_fork+0x4bc/0x870 [ 218.357558][T11441] ret_from_fork_asm+0x1a/0x30 [ 218.362975][T11441] [ 218.362975][T11441] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 218.373334][T11441] validate_chain+0xb9b/0x2140 [ 218.378632][T11441] __lock_acquire+0xab9/0xd20 [ 218.383838][T11441] lock_acquire+0x120/0x360 [ 218.388900][T11441] _raw_spin_lock+0x2e/0x40 [ 218.393944][T11441] __dev_queue_xmit+0x22b7/0x3b50 [ 218.399514][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.405294][T11441] ip6_output+0x340/0x550 [ 218.410179][T11441] ndisc_send_skb+0xbce/0x1510 [ 218.415481][T11441] ndisc_solicit+0x444/0x610 [ 218.420622][T11441] __neigh_event_send+0xf70/0x1560 [ 218.426277][T11441] neigh_resolve_output+0x198/0x750 [ 218.432024][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.437667][T11441] ip6_output+0x340/0x550 [ 218.442538][T11441] ip6_send_skb+0x1d5/0x390 [ 218.447663][T11441] icmp6_send+0x12c6/0x1940 [ 218.452695][T11441] ip6_link_failure+0x3b/0x4c0 [ 218.457986][T11441] ip_tunnel_xmit+0x175b/0x2390 [ 218.463374][T11441] __gre_xmit+0x19a/0x240 [ 218.468235][T11441] erspan_xmit+0xa04/0x1220 [ 218.473273][T11441] dev_hard_start_xmit+0x2d7/0x830 [ 218.478915][T11441] sch_direct_xmit+0x241/0x4b0 [ 218.484219][T11441] __qdisc_run+0xaa0/0x1540 [ 218.489273][T11441] __dev_queue_xmit+0x1056/0x3b50 [ 218.494830][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.500485][T11441] ip6_output+0x340/0x550 [ 218.505360][T11441] ip6_mr_output+0x4e9/0x1100 [ 218.510587][T11441] rawv6_send_hdrinc+0xe16/0x17a0 [ 218.516174][T11441] rawv6_sendmsg+0x12ee/0x1830 [ 218.521490][T11441] __sock_sendmsg+0x19c/0x270 [ 218.526736][T11441] ____sys_sendmsg+0x505/0x830 [ 218.532065][T11441] ___sys_sendmsg+0x21f/0x2a0 [ 218.537296][T11441] __x64_sys_sendmsg+0x19b/0x260 [ 218.542780][T11441] do_syscall_64+0xfa/0xfa0 [ 218.547852][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.554288][T11441] [ 218.554288][T11441] other info that might help us debug this: [ 218.554288][T11441] [ 218.564534][T11441] Possible unsafe locking scenario: [ 218.564534][T11441] [ 218.571998][T11441] CPU0 CPU1 [ 218.577377][T11441] ---- ---- [ 218.582756][T11441] lock(&qdisc_xmit_lock_key#4); [ 218.587809][T11441] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 218.597471][T11441] lock(&qdisc_xmit_lock_key#4); [ 218.605047][T11441] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 218.612183][T11441] [ 218.612183][T11441] *** DEADLOCK *** [ 218.612183][T11441] [ 218.620343][T11441] 12 locks held by syz.0.1549/11441: [ 218.625648][T11441] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc9f/0x17a0 [ 218.635440][T11441] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 218.645069][T11441] #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 218.654247][T11441] #3: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 218.664343][T11441] #4: ffff8880217ed158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 218.674770][T11441] #5: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 218.683951][T11441] #6: ffff88814cc10a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 218.693392][T11441] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 218.702663][T11441] #8: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 218.711754][T11441] #9: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 218.721274][T11441] #10: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 218.730450][T11441] #11: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 218.740597][T11441] [ 218.740597][T11441] stack backtrace: [ 218.746499][T11441] CPU: 1 UID: 0 PID: 11441 Comm: syz.0.1549 Not tainted syzkaller #0 PREEMPT(full) [ 218.746523][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.746535][T11441] Call Trace: [ 218.746543][T11441] [ 218.746552][T11441] dump_stack_lvl+0x189/0x250 [ 218.746584][T11441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.746610][T11441] ? __pfx__printk+0x10/0x10 [ 218.746631][T11441] ? print_lock_name+0xde/0x100 [ 218.746650][T11441] print_circular_bug+0x2ee/0x310 [ 218.746676][T11441] check_noncircular+0x134/0x160 [ 218.746702][T11441] validate_chain+0xb9b/0x2140 [ 218.746736][T11441] __lock_acquire+0xab9/0xd20 [ 218.746757][T11441] ? __dev_queue_xmit+0x22b7/0x3b50 [ 218.746780][T11441] lock_acquire+0x120/0x360 [ 218.746797][T11441] ? __dev_queue_xmit+0x22b7/0x3b50 [ 218.746820][T11441] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 218.746844][T11441] ? check_noncircular+0xe0/0x160 [ 218.746869][T11441] _raw_spin_lock+0x2e/0x40 [ 218.746893][T11441] ? __dev_queue_xmit+0x22b7/0x3b50 [ 218.746915][T11441] __dev_queue_xmit+0x22b7/0x3b50 [ 218.746942][T11441] ? __dev_queue_xmit+0x27b/0x3b50 [ 218.746970][T11441] ? neigh_resolve_output+0x438/0x750 [ 218.746999][T11441] ? __pfx___dev_queue_xmit+0x10/0x10 [ 218.747021][T11441] ? read_seqbegin+0x122/0x250 [ 218.747046][T11441] ? neigh_resolve_output+0x438/0x750 [ 218.747073][T11441] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.747101][T11441] ? read_seqbegin+0x1ac/0x250 [ 218.747127][T11441] ? __pfx_read_seqbegin+0x10/0x10 [ 218.747153][T11441] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.747187][T11441] ? eth_header+0x11b/0x200 [ 218.747206][T11441] ? __asan_memcpy+0x40/0x70 [ 218.747239][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.747272][T11441] ? __pfx_ip6_finish_output2+0x10/0x10 [ 218.747298][T11441] ? ip6_mtu+0x7d/0x490 [ 218.747320][T11441] ? ip6_mtu+0x38c/0x490 [ 218.747342][T11441] ? ip6_finish_output+0x2ef/0x4e0 [ 218.747365][T11441] ? ip6_output+0x126/0x550 [ 218.747392][T11441] ip6_output+0x340/0x550 [ 218.747416][T11441] ndisc_send_skb+0xbce/0x1510 [ 218.747437][T11441] ? ndisc_send_skb+0x1e4/0x1510 [ 218.747459][T11441] ? __pfx_ndisc_send_skb+0x10/0x10 [ 218.747478][T11441] ? __pfx_dst_output+0x10/0x10 [ 218.747500][T11441] ? ipv6_get_lladdr+0x2b/0x3f0 [ 218.747516][T11441] ? ipv6_get_lladdr+0x2b/0x3f0 [ 218.747531][T11441] ? ipv6_get_lladdr+0x2b/0x3f0 [ 218.747547][T11441] ? ipv6_get_lladdr+0x378/0x3f0 [ 218.747563][T11441] ? ipv6_get_lladdr+0x2b/0x3f0 [ 218.747580][T11441] ndisc_solicit+0x444/0x610 [ 218.747603][T11441] ? __pfx_ndisc_solicit+0x10/0x10 [ 218.747626][T11441] ? __neigh_event_send+0xf08/0x1560 [ 218.747652][T11441] ? __pfx_ndisc_solicit+0x10/0x10 [ 218.747671][T11441] __neigh_event_send+0xf70/0x1560 [ 218.747699][T11441] ? ___neigh_create+0x1c83/0x2260 [ 218.747723][T11441] neigh_resolve_output+0x198/0x750 [ 218.747755][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.747786][T11441] ? __pfx_ip6_finish_output2+0x10/0x10 [ 218.747812][T11441] ? ip6_mtu+0x7d/0x490 [ 218.747832][T11441] ? ip6_mtu+0x38c/0x490 [ 218.747855][T11441] ? ip6_finish_output+0x2ef/0x4e0 [ 218.747877][T11441] ? ip6_output+0x126/0x550 [ 218.747910][T11441] ip6_output+0x340/0x550 [ 218.747932][T11441] ? ip6_send_skb+0x10f/0x390 [ 218.747957][T11441] ip6_send_skb+0x1d5/0x390 [ 218.747983][T11441] icmp6_send+0x12c6/0x1940 [ 218.748001][T11441] ? icmp6_send+0x1e9/0x1940 [ 218.748026][T11441] ? __pfx_icmp6_send+0x10/0x10 [ 218.748043][T11441] ? __lock_acquire+0xab9/0xd20 [ 218.748066][T11441] ? ip6_neigh_lookup+0x14e/0x470 [ 218.748086][T11441] ? ip6_neigh_lookup+0x14e/0x470 [ 218.748103][T11441] ? ip6_neigh_lookup+0x397/0x470 [ 218.748121][T11441] ? ip6_neigh_lookup+0x14e/0x470 [ 218.748139][T11441] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 218.748159][T11441] ip6_link_failure+0x3b/0x4c0 [ 218.748228][T11441] ip_tunnel_xmit+0x175b/0x2390 [ 218.748255][T11441] ? desc_read+0x1b8/0x3f0 [ 218.748274][T11441] ? ip_tunnel_xmit+0x110/0x2390 [ 218.748300][T11441] ? _prb_read_valid+0xa07/0xa90 [ 218.748318][T11441] ? console_flush_all+0x13a/0xb10 [ 218.748344][T11441] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 218.748368][T11441] ? gre_build_header+0x31c/0xa40 [ 218.748395][T11441] ? __pfx_gre_build_header+0x10/0x10 [ 218.748417][T11441] ? __console_unlock+0x14c/0x1a0 [ 218.748440][T11441] ? __pfx___console_unlock+0x10/0x10 [ 218.748462][T11441] ? __pfx_skb_network_protocol+0x10/0x10 [ 218.748482][T11441] __gre_xmit+0x19a/0x240 [ 218.748506][T11441] ? __pfx___gre_xmit+0x10/0x10 [ 218.748527][T11441] ? __asan_memset+0x22/0x50 [ 218.748548][T11441] ? erspan_build_header+0x19c/0x370 [ 218.748576][T11441] erspan_xmit+0xa04/0x1220 [ 218.748605][T11441] ? __pfx_erspan_xmit+0x10/0x10 [ 218.748628][T11441] ? __lock_acquire+0xab9/0xd20 [ 218.748647][T11441] dev_hard_start_xmit+0x2d7/0x830 [ 218.748673][T11441] sch_direct_xmit+0x241/0x4b0 [ 218.748700][T11441] ? __pfx_sch_direct_xmit+0x10/0x10 [ 218.748724][T11441] ? gred_dequeue+0x4a6/0x680 [ 218.748749][T11441] __qdisc_run+0xaa0/0x1540 [ 218.748781][T11441] __dev_queue_xmit+0x1056/0x3b50 [ 218.748809][T11441] ? register_lock_class+0x51/0x320 [ 218.748828][T11441] ? __dev_queue_xmit+0x27b/0x3b50 [ 218.748853][T11441] ? __pfx___dev_queue_xmit+0x10/0x10 [ 218.748873][T11441] ? read_seqbegin+0x122/0x250 [ 218.748896][T11441] ? neigh_resolve_output+0x438/0x750 [ 218.748920][T11441] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.748944][T11441] ? read_seqbegin+0x1ac/0x250 [ 218.748967][T11441] ? __pfx_read_seqbegin+0x10/0x10 [ 218.748990][T11441] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.749007][T11441] ? eth_header+0x11b/0x200 [ 218.749024][T11441] ? __asan_memcpy+0x40/0x70 [ 218.749057][T11441] ip6_finish_output2+0xfb3/0x1480 [ 218.749093][T11441] ? __pfx_ip6_finish_output2+0x10/0x10 [ 218.749119][T11441] ? ip6_mtu+0x7d/0x490 [ 218.749140][T11441] ? ip6_mtu+0x38c/0x490 [ 218.749163][T11441] ? ip6_finish_output+0x2ef/0x4e0 [ 218.749192][T11441] ? ip6_output+0x126/0x550 [ 218.749213][T11441] ip6_output+0x340/0x550 [ 218.749237][T11441] ip6_mr_output+0x4e9/0x1100 [ 218.749266][T11441] ? ip6_mr_output+0x1ca/0x1100 [ 218.749293][T11441] ? __pfx_ip6_mr_output+0x10/0x10 [ 218.749322][T11441] ? ip6t_do_table+0x1db/0x1560 [ 218.749348][T11441] ? __pfx_ip6t_do_table+0x10/0x10 [ 218.749387][T11441] ? skb_dst+0x4f/0xd0 [ 218.749406][T11441] ? dst_output+0x17b/0x1c0 [ 218.749426][T11441] ? rawv6_send_hdrinc+0xc9f/0x17a0 [ 218.749448][T11441] rawv6_send_hdrinc+0xe16/0x17a0 [ 218.749479][T11441] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 218.749499][T11441] ? txopt_get+0x335/0x3f0 [ 218.749519][T11441] ? __pfx_dst_output+0x10/0x10 [ 218.749538][T11441] ? __pfx_txopt_get+0x10/0x10 [ 218.749563][T11441] rawv6_sendmsg+0x12ee/0x1830 [ 218.749593][T11441] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 218.749626][T11441] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.749657][T11441] ? sock_rps_record_flow+0x19/0x410 [ 218.749691][T11441] ? inet_sendmsg+0x2f4/0x370 [ 218.749707][T11441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.749730][T11441] __sock_sendmsg+0x19c/0x270 [ 218.749759][T11441] ____sys_sendmsg+0x505/0x830 [ 218.749784][T11441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.749810][T11441] ? import_iovec+0x74/0xa0 [ 218.749837][T11441] ___sys_sendmsg+0x21f/0x2a0 [ 218.749860][T11441] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.749901][T11441] ? __fget_files+0x2a/0x420 [ 218.749920][T11441] ? __fget_files+0x3a0/0x420 [ 218.749944][T11441] __x64_sys_sendmsg+0x19b/0x260 [ 218.749966][T11441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.749996][T11441] ? do_syscall_64+0xbe/0xfa0 [ 218.750028][T11441] do_syscall_64+0xfa/0xfa0 [ 218.750055][T11441] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.750083][T11441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.750103][T11441] ? clear_bhb_loop+0x60/0xb0 [ 218.750126][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.750146][T11441] RIP: 0033:0x7f7abc38f6c9 [ 218.750166][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.750192][T11441] RSP: 002b:00007f7abd290038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.750214][T11441] RAX: ffffffffffffffda RBX: 00007f7abc5e5fa0 RCX: 00007f7abc38f6c9 [ 218.750230][T11441] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 218.750243][T11441] RBP: 00007f7abc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 218.750256][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.750269][T11441] R13: 00007f7abc5e6038 R14: 00007f7abc5e5fa0 R15: 00007ffd5777c808 [ 218.750293][T11441] [ 219.569675][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.581588][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.589419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.603886][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 219.612884][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 219.622597][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'. [ 219.773829][T11441] syz.0.1549 (11441) used greatest stack depth: 17928 bytes left [ 220.225836][ T1156] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.236476][ T1156] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.323329][ T1156] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.333577][ T1156] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.412848][ T1156] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.423592][ T1156] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.462521][ T1156] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.473093][ T1156] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.552247][ T1156] dummy0: left allmulticast mode [ 220.557254][ T1156] dummy0: left promiscuous mode [ 220.562352][ T1156] bridge0: port 3(dummy0) entered disabled state [ 220.571149][ T1156] bridge_slave_1: left allmulticast mode [ 220.576820][ T1156] bridge_slave_1: left promiscuous mode [ 220.582785][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.591182][ T1156] bridge_slave_0: left promiscuous mode [ 220.596831][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.649640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.783770][ T1156] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 220.792053][ T1156] bridge2 (unregistering): left promiscuous mode [ 220.857164][ T1156] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 220.865411][ T1156] bridge3 (unregistering): left promiscuous mode [ 220.920588][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.931191][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.941173][ T1156] bond0 (unregistering): Released all slaves [ 220.951856][ T1156] bond1 (unregistering): Released all slaves [ 221.046438][ T1156] bond2 (unregistering): Released all slaves [ 221.056417][ T1156] bond3 (unregistering): Released all slaves [ 221.139173][ T1156] bond4 (unregistering): Released all slaves [ 221.153202][ T1156] bond5 (unregistering): Released all slaves [ 221.166730][ T1156] bond6 (unregistering): Released all slaves [ 221.215764][ T1156] tipc: Left network mode [ 221.485456][ T1156] veth0_macvtap: left allmulticast mode [ 221.492047][ T1156] veth1_macvtap: left promiscuous mode [ 221.497593][ T1156] veth0_macvtap: left promiscuous mode [ 221.504628][ T1156] veth1_vlan: left promiscuous mode [ 221.714622][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 221.738707][ T1156] team0 (unregistering): Port device C removed [ 222.088475][ T1156] IPVS: stop unused estimator thread 0... [ 222.149006][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 222.208547][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 222.269062][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 222.339678][ T1156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 222.425249][ T1156] bridge_slave_1: left allmulticast mode [ 222.431252][ T1156] bridge_slave_1: left promiscuous mode [ 222.437068][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.446622][ T1156] bridge_slave_0: left allmulticast mode [ 222.452467][ T1156] bridge_slave_0: left promiscuous mode [ 222.458175][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.597482][ T1156] dvmrp6 (unregistering): left allmulticast mode [ 222.637022][ T1156] bond7 (unregistering): (slave geneve3): Releasing backup interface [ 222.654564][ T1156] bond6 (unregistering): (slave geneve2): Releasing active interface [ 222.962614][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.973687][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.983321][ T1156] bond0 (unregistering): Released all slaves [ 223.076221][ T1156] bond1 (unregistering): Released all slaves [ 223.156710][ T1156] bond2 (unregistering): Released all slaves [ 223.167410][ T1156] bond3 (unregistering): (slave bond4): Releasing backup interface [ 223.176409][ T1156] bond3 (unregistering): Released all slaves [ 223.253747][ T1156] bond4 (unregistering): Released all slaves [ 223.332553][ T1156] bond5 (unregistering): (slave veth5): Releasing active interface [ 223.341104][ T1156] bond5 (unregistering): Released all slaves [ 223.425060][ T1156] bond6 (unregistering): Released all slaves [ 223.434769][ T1156] bond7 (unregistering): Released all slaves [ 223.444657][ T1156] bond8 (unregistering): Released all slaves [ 223.454214][ T1156] bond9 (unregistering): Released all slaves [ 223.526569][ T1156] tipc: Disabling bearer [ 223.536651][ T1156] tipc: Left network mode [ 223.786610][ T1156] hsr_slave_0: left promiscuous mode [ 223.792506][ T1156] hsr_slave_1: left promiscuous mode [ 223.798889][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.806946][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.061584][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 224.090195][ T1156] team0 (unregistering): Port device team_slave_0 removed