last executing test programs: 4.285777998s ago: executing program 0 (id=2253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0xe, &(0x7f0000002e80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000001380)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000240)="26897d8c47a2b1e835", 0x9}, {&(0x7f0000000840)="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", 0x11b}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f0000001440)=ANY=[@ANYRESHEX=r1], 0xd0}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000001380)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000240)="26897d8c47a2b1e835", 0x9}, {&(0x7f0000000840)="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", 0x11b}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f0000001440)=ANY=[@ANYRESHEX=r1], 0xd0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000001480)=ANY=[@ANYBLOB="18240000", @ANYRES32, @ANYBLOB="00000000540b0000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="00000000000000faff0500000800000085000000a50000006a21380110000000eef7f50930cf430018700e1d4a232d31be33c174ed93b41386789b797d05e50ff8e16d489be937a3d17e417c3fe4f58072f9c5372f3094"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x4, 0x5, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4dc2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x64, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008008a576edddf1b8a82eeb3260423009969277b44b2a773023675b4", @ANYRES8=r0], 0x5c}, 0x1, 0xba01, 0x0, 0x4}, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'wg2\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0) close(0x4) (async) close(0x4) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'ipvlan1\x00', @ifru_settings={0x5, 0x8, @te1=&(0x7f0000001340)={0x476, 0xfffffffb, 0x7ff, 0xffffffff}}}) (async) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'ipvlan1\x00', @ifru_settings={0x5, 0x8, @te1=&(0x7f0000001340)={0x476, 0xfffffffb, 0x7ff, 0xffffffff}}}) 4.179322065s ago: executing program 3 (id=2256): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r5, 0x3, 0x80}) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001440)={'veth1_virt_wifi\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, [0x1000, 0x4d4e]}}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x80, 0x80, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0x5c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x58, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d8, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x1, 0x91, 0x5b11}, {0x4, 0x73, 0x0, 0x5}, {0x1f, 0x81, 0x79, 0x7ff}, {0xe, 0x9, 0x9b, 0xebc}, {0x401, 0x1, 0x8, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x48854}, 0x804) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) socket$key(0xf, 0x3, 0x2) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22051, r2, 0xfffff000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085980000000500000003ef00000000000000303061302e"], &(0x7f0000000f40)=""/4082, 0x37, 0xff2, 0x8, 0xbf81}, 0x28) 3.987896269s ago: executing program 0 (id=2259): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8001, @rand_addr=' \x01\x00', 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x37, {0x8}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1c00}}], 0x30}}], 0x1, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) (async) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x1a0000010}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x1a0000010}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0xd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0xd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x204, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 3.069531556s ago: executing program 2 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000840)=[@in6={0xa, 0x4e22, 0x3ff, @remote, 0x21}]}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400)={0x0}, &(0x7f0000000000)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000008c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'ip6gretap0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0xa, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@deltaction={0x1ac, 0x31, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa11}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x14, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r4, &(0x7f0000000540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="424b7c11eae505b9d4626a72a3e5486405b46a3c4b88c230def470f2b4", 0x1d}, {&(0x7f00000000c0)="7192a3f7034ce7e724ab8b5cc3283b9cfc9ffda068ca0668839a89b6d44ce1247e53f00c74841023af19cde136e775c0fe7da468dcc77ba8dacef5ec758803486bb193fd8334f548b52c699a7ad2d94ed32d0eff433314471a8731013915c97ce8d56dfca876edc8d043bd4f44a64382eac9d3d49a8adadbf608d9f3bd300046f31145d93d9603c0276f0ec31ecf788551951d709b579a13abbfb2071c3395e1e9663d1325ff025668efb9f2d87b81782dd7ab11d3c89679", 0xb8}, {&(0x7f0000000180)="54624ccfee72c43c56994e0daf40a9a1afca9be6df4114484850403a833a1a375a41aa399f2a55995fc0c28c0053a61f267fb4ce530a59be5cc2039dcafb78b530616c4f217bc68f82846e77b7", 0x4d}, {&(0x7f0000000240)="1ba1ddc6e44da8fac29f72d8a9eab20a47133e40c07f891a405e0b2e3063cbb59f3c79d843a90f610b6d2579f3042d59d4b55f2a72efd0cb19f1baaff49c7a9ecc781a743b7b4923901c6e314389612a34515280cecd4221d13c517db12657c5fc9d7544ba0840108b60392170dbc7f282c83358df7605f4646d01d69b3984a88fc94a90a5d365801b759f315bb0699e23cf1ecdcfd9b21d956b2e2bd656f8cee7143a7e4486", 0xa6}, {&(0x7f0000000300)="cd2062055673ef362fe9ec6f96ee25922af8cee4484eb7f807fab8f53abc30b4109076404ab4a18ecb9831c845fdeea097fa0653231f2140b4eefd98a251a7dd4459e4b372f7a1fc6e", 0x49}, {&(0x7f0000000380)="eb3b133b74126cc916d9a6e298f4652de4918b8043a13c0f743411956d508a79f6ccec94871ce8aebf2ba5af3215f902f478cc9f2f0ea02535efc705cb71971a8f25204cf073df4d566fa0fcb9fec330275a0c16a2b3ea8ee90d6c5364e1d3e6ce1e4027dd035656ef14bdee5c8cef7c6dcbe3899b43ba004bb00e99487e99c30ef94c840f705cd08aa8a828693df3575d1b6ed02be8aab16a2e711e17cc93fb566763044f6be8e688190419f6a96da1fde7b261c87f75465e87fa08fddeb6661af3ada0bfbbe8324814c334dd736cd7386ac2bf1c04d4c4ec224174290741ab07", 0xe1}, {&(0x7f0000000480)="4b14509eb05877bf5e431d825d626e8af8320eb112d5273e7349d0e7fee065cddd46b04da22ce97a78ef8a34b8974ce7040b8b5897642e082e68e2d8f121e825cf51517cb916e3db31542fcb8d3f143dd4c19f22c9f685e65a6bb524578ed78d62bb0ef4cb5480c544bfc4a274", 0x6d}, {&(0x7f00000005c0)="508d3edac60b9f026909203ff6b6dc90851a6b44cf90280e312bc6208ec8e1e09ab5ad4008fa5cd12c9c4c6e06880b4194c9731ecc014f4a1320c143d37005baaa896461fde37d5e8893afe32729355f8adbdd472c09fbe9398c070e457af77f7381ae7147b34d556b76773be31eb9efb246309b9d2383977d4299bfa62a7e0ddae12bc3f93a968b673553e2dc2cce30c1f3a00e4895b20bbfb9ac1511879b0b0d7d6f00074e7b47de2b13f7357bf8d9b8240865aae1bd3c78f18e5698f62933ed3f4c07c192631963655e2122de2976dfd2efd4a74f5d3503e75d1d9421d6f8b545", 0xe2}, {&(0x7f0000000500)="5ba5ae74621c74c97ce0ac37db14c241ea373ad558035775ff6b1ce7466f81eb6d51eed74ba0b0dd8788f6f5bc5754b46d", 0x31}], 0x1000000000000089, &(0x7f0000000900)=ANY=[@ANYBLOB="40000000000000000801000202000000e078e025965ebba4bcec7a5c68fc82636c6bada98ee7259f41e6d2273b5035efa90d94071abcab3b5000000000000000b0000000000000001501000009000000df375d4bc4d63d3340d7137569c654985c60cb0c72d52d85a1d583c9d79e8605a1a9e25bf3e506c7a854326d467c4cacbdcc161706a7b8f2af8e7e36b1b56ca26300c95a8cb1fd4bfcf9196ca50a3db9b4cad852b5037c748ceb76f563f81a0c687105f04ccd10dee8dcc1592d6a66eda4e9bb1a2e58a84a4597e9eed672941b84c6408cd03c978be59d467bb496dcf6e9c4863d4593649d2a8f222c06e300000037ce2adceccc"], 0xf0}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2c020680) getsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045000024fffd000000119078ac1e0001e0000001000017c10010907862000000d482449a"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001006e756d67656e000014000280080001400000000208000240000008b50900010073797a30000000000900020073797a320000000000000000000000000000000a"], 0x7c}}, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000bd7000fedbdf2502000000", @ANYRES32=r12, @ANYBLOB="aea400020a000100bbbbbbbbbbbb0000"], 0x28}}, 0x4000004) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r13, @ANYBLOB="30003080140004e73d7d9e838196f61c9b54c9c6b8bd5d48050002"], 0x4c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000007c0)={r3, 0x1000, 0x8b28}, 0x8) 3.066872247s ago: executing program 3 (id=2266): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x9, 0x4) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}}) (async) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="65dff03a39d1f5aa7de7468f0dc008142de1aea0a47999f499fff470948d6e0e48eba5429c67f3714412bd6b7bdc03c53b9f1669037c70ea77100a42c4c84699630711fd00448c0851d49991475a2aca6880b0c0caa454aeae31f82e1e76f3a8ab704f5f560ef7800ad9f1ff6f9a023912cdcd8217cff3bdc26129d858037c2a1a67789d3054d73d37211ca904cb065e2ac8d75171f9aa3acd721d6974cbc4e3e4567cc282ccb6734a20f92cddf726599cb4cba4c81c47a6c12c3d3d6c00847fb8196b227eb9538674a4fa23342591a245cb0ddb76058a90550e61f2ed18afb53c83559fbe0a43919fc0790935268a0b", 0xf0}], 0x1}, 0x4005) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x6, 0x7, [0x1600, 0x8001, 0x8001, 0xfffc, 0x6, 0xed3, 0x8000]}, &(0x7f0000000280)=0x16) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x7fff}}, 0xffffffff, 0x88, 0x200, 0x8, 0x5}, &(0x7f0000000380)=0x98) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000003c0)={0x11, 0x19, '\x00', [@generic={0x2, 0x92, "7f56ed4b02f5f9920b2d7c94b3eaa4f9291ee236c66248230cfb2de6d4e6c01fa4b2cdafe39d226017f3c2d9235dd3077ef5a703815c9269750de48e5f2297732411d5ba3d2c48b3bfde88de24665a53c8b29a6b64cc577f271c32e770bc7c39974fae546548844a1557a29ee42294be231c0312a33644342a2153e276db8b745519623c319bcc290846cd442db06b0d76d2"}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x596837cc}, @hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @enc_lim={0x4, 0x1, 0x9}]}, 0xd8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@RTM_GETMDB={0x18, 0x56, 0x8, 0x70bd2d, 0x25dfdbfd, {0x7, r4}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4c081}, 0x10) (async, rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', r4, r0, 0x5, 0x5}, 0x50) (rerun: 32) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', r4, r1, 0x0, 0x0, 0x5}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffff3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf929}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x7ff, 0x6f, &(0x7f00000007c0)=""/111, 0x41100, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0xf, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r7, r0, r8, r9, r0], &(0x7f0000000b00)=[{0x0, 0x3, 0x7, 0x2}], 0x10, 0x2}, 0x94) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r10, 0x29, 0x46, &(0x7f0000000c00)=0x3, 0x4) (async, rerun: 32) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) (rerun: 32) ioctl$TUNGETVNETBE(r11, 0x800454df, &(0x7f0000000c80)=0x1) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r12, 0x5000940c, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@ifindex=r4, 0x31, 0x1, 0xffffffff, &(0x7f0000000cc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000e00)={r2, 0x9}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000e80)={r13, 0xbc, "7d242b9429e903bcaca59dfb20e6e42a79deda7a97eaa5806622d3ebe708f0797551bd33f64b40a504c7bd031d53c282d6855a5c8526391419a2a1a39dfe07cf1959338c5cfc13a72df5bb53bd55c92e96cc2151a87910a5751654b588888f2c596e55c58c259b4cd88ba298ab684f51c711995bdcc8b95608da1d7b8b2e00079b67feb80f761507a32eed4c6093678690e240b94a22b12fea141de0945bdd36c2b99086a77d071e238f8dd97ecd681c979de2513ddf4f96e8af5cc6"}, &(0x7f0000000f80)=0xc4) close(0xffffffffffffffff) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r14, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xbc, r15, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8adbedee3d54"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x55, 0x2a, [@mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x10, "efb4560516d4b0917785107cc8b7e180"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0x9, @device_a, 0xfffffffe, @value=@broadcast, 0x100, 0x8, @device_b, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_chsw={0x76, 0x6, {0xd, 0x2, 0x19, 0x4}}]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.817002095s ago: executing program 3 (id=2269): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x1300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 2.659695571s ago: executing program 3 (id=2270): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000001d00000008000000050000000000000c0200000000612e30002e0e00"], 0x0, 0x2c, 0x0, 0x1, 0xc}, 0x28) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom(r0, &(0x7f0000000000)=""/67, 0x43, 0x40000100, &(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80) 2.211848952s ago: executing program 0 (id=2274): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e1a", 0x7}], 0x1}, 0x20000001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x60338, 0x20240}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000001700000002000000000000040000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r8 = socket(0x0, 0x2, 0x2000000) bind$unix(r8, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000006c0)=0x0) r10 = getuid() r11 = getgid() sendmsg$unix(r6, &(0x7f00000007c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)="d4667fde1fc3b1180999d1d3a5314d456947f62134a50895f2626f619291de8c5f20c4196f69af4dc565689160d27194fd1757e5033519abb2f2e45dacc5031eca05fa2325beb05d3ed5f101fad33b36ca0fe31a24d76410e7993288", 0x5c}, {&(0x7f00000002c0)="53e3dac4862299385b77e43eccab7e109851a37594a47245457578d21ddf510b9f3787990514f1ce230cdf7b8b13dbb8592796d4625d605e6b81b3df6de18281b9029bc00ded1c45eebfdc56469b9e451b9805fd3bd5b3b541ed2db80d7fddfe36a3bfdd00b6d07e8ef3c7d2a4e028b399b2b31d7f6cb5bc327c6ecbd8a535a092a038489e70c89ce737ab1908c6bb417ed412f658d26a6ec543a5fb20120c8e58c6", 0xa2}, {&(0x7f0000000980)="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", 0x161}, {&(0x7f0000000480)="56006b1edb21c3e586260350228d3a8ecbd8db7dba825221d82aa1eb1cef53c14fe6f875b9a9fc72ca1bff5bdfae4a7247a9fc6fc0153b2adf11c7c9aae37f909e8a3cc16259415a2f8245bf90416cff562cf576e6d40ed849acd2d97707a8f6004d58b6e361781689b12f6dbb1306b61c44e9e57b617b4da1a98e74d3e5e81f03ebbe0feeffc99f7e645d4ce21ba70f", 0x90}, {&(0x7f0000000800)="c29cc40bd91cacc9ef335dc7f77aa8a590742a1d1237889fb7814b9705be56b1439c6c818e527667df65028eb712b44f5843a257e3f7460e9f30000267b6f0dcde2edcbb793a2777e1817dd6759bf4d9aa4898a39c09", 0x56}, {&(0x7f0000000540)="753dc87c4bc34983f001d4d701330ade0ffefb8808accb453b5a12e3afec548954db1004f936399c6603ae2891ab7d6d6a19efc5dc01d42d42f4954ad9696e327072fc60d7dc2eaf6021bfaf6f60e0124d24d089fed645c0487421bd622aa1bf084e5d63ed440dc50936c7012f1f0ecd61c91ca6233fddd9c0485d89242663ceb2795f1b002f79266b3a99ba71cb72b200124853472c85c1e8da6a20fc9bad5757b6e814d76d1b6f9b7106e71a67a173cbff664d237e51dfd1009dcf970aae3e1b7156000b85a59184833cf29d25081dc650279e3a3ecb39435a01f7", 0xdc}], 0x6, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [r7, r7, r0]}}, @rights={{0x20, 0x1, 0x1, [r6, r0, r7, r6]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}, @rights={{0x1c, 0x1, 0x1, [r7, r6, r7]}}], 0x98, 0x14}, 0x1) 2.103646214s ago: executing program 1 (id=2275): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='snd_soc_jack_report\x00', r3}, 0x18) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xfafcb95038e05319, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1a9bee44c7e24d10}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000380)="ee16b686abe67e424b2a9090e3d9d08884560113ab924e79d349f07cc2d2c6c87b42caab077a9fd2068868b896e6f08b53706bbf6276b3a30b2695056336a5e2f0c452de18198f349ffabb6f75bcb95043a5c6ce9387d9955010e3b09f4c88786e1df992d81f817c4ad3ac6c0ff3c510f1201e84fefed9138d919321627ea4a2544df27fc647f01feb3e7c589ae073f7c56ead33c8acafdf1558be0cb065d8735a79d872b29097e284594de58eb31dffe3c0597b0093d98264e6", &(0x7f0000000440)=""/3, 0x4}, 0x20) (async) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$netlink(0x10, 0x3, 0x10) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'wg2\x00'}) 2.070524558s ago: executing program 2 (id=2276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c4}, 0x20048811) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='contention_end\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xf, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010d9d4fb5bbf33489adffbe97d003b15b9d3606cc854b21d55d262c9543895ee5dfecb8cde63670a74312ba382ec3418e14e", @ANYRES32=0x0, @ANYBLOB="0012000000800000"], 0x20}}, 0x8000) 1.983832749s ago: executing program 0 (id=2278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x201}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.875872759s ago: executing program 0 (id=2280): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8001, 0x5a, 0x4, 0xfffffff7}, {0x9, 0x9, 0x2, 0xc59e}, {0xe, 0x54, 0xc5}, {0x8, 0x2, 0xff, 0xfffffff9}]}, 0x10) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x50}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r7, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003c00)=""/4090, 0xffa}], 0x1}}], 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r8, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', r10, 0x1, 0x1, 0x4, 0x8, {{0xf, 0x4, 0x1, 0x2, 0x3c, 0x464, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @generic={0x89, 0x2}, @ssrr={0x89, 0x7, 0x11, [@local]}, @timestamp_addr={0x44, 0x14, 0x39, 0x1, 0x3, [{@loopback}, {@local, 0x8}]}]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) readv(r12, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r11, &(0x7f0000000140)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) 1.815357817s ago: executing program 1 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020506030e000000000000000000000005000600000000000a004e220000f570fe8000000000000000000000000000bb0f000000000000000200010000000000002a4e37a11667e0914a3926e943c10000000000000005000500000000000a004e2400000006fcfba300000000000000000000000000feffffff00000000"], 0x70}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="db759468e36580b453bad0fff41b0fce2d798f4ed0edfe0b870218cb6150a619f0d5aa4b7aaa168f6daf96e4da86703c0be8e115990eed93de4175fe693f2d530c8ae575d48ef4aeedd9eeafd728975cd1c555a7f53a4b018bb8ed151b4a99e637903e9f92520db9c7c57c4119602c00000005048cbf5c262e6ccf42600fc795782ff8a24cda5e8ccc224532fa6cf800"/155, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)="ffff", 0x5}, 0xfffffee0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x1c, r5, 0x411, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffff9e4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002d00010026bd7000fcdbdf250800000004000d80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000000)={0x6, @private=0xa010101, 0x4e21, 0x4, 'ovf\x00', 0x22, 0x3, 0x5e}, 0x2c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x0, &(0x7f0000000040)=0xf5, 0x4) 1.813752081s ago: executing program 2 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xfffffe35, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="f00000001000130728bd700000000000ff020000000000000000000000000001200100000000000000000000000000000000000800000002020080003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d232000000ac1e0001000000000000000000000000020000000000000000000000000000000000000004000000020000000000000000000000000000000000000000c0010000000000000000000000000000000000df1100000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000029bd7000000000000a0001000000001000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf25050004000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES8=r5, @ANYRESOCT=r3, @ANYRES16=r10, @ANYRES32=r11], 0x128}, 0x0) recvmsg$unix(r10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009007100000007000600727200000800080000000000"], 0x54}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000195a434bbebf9e409239d42b46f856aa288278f3784915ff468fe7711a6ddda2e1b8f26d6354abd0ba6384854599ea54f731b3e99fe69fd9989c497b178c09fb01d6d93f69c6eb8687eac815754bf", @ANYRES16=r13, @ANYBLOB="b5b227bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$alg(0x26, 0x5, 0x0) 1.722016751s ago: executing program 3 (id=2283): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000200001030000000000000000020000000000000000000000cbb7ca856d3004733acf69da99742dcd84dfa1109a300662004772d303c4484b4353bc41e4eafbee8f16926ee0a851d29ecc54f1c2a2558187d22fe6b5a31f82c1cba529638fdc97b5ec7953d68fe87c62116ac1d10c344148be2bb06e0e7bf6000e097a53a84a7450db89fdf3cbf799f61c3df7b26b2544387aae808840f51be261eb2f03724304b2b3bc6beb93"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2c}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.707165431s ago: executing program 1 (id=2284): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001f40), &(0x7f00000022c0)=0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.706962169s ago: executing program 4 (id=2285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e28", 0x13}], 0x1}}], 0x1, 0x4000040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/300], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a8080"], 0x44}}, 0x0) 1.575754082s ago: executing program 1 (id=2286): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xffffffffffffffc4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x36070140) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x61e2, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="0033ad09", 0x4}], 0x2}}], 0x1, 0x4000040) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000280)=0x101, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e007f810000000003000000ffffffff0000000093b46300b6f5e072bfc06ab88b0e42406f6067eb9a29b25dbbf169ce24efd0dd04b3274d41d24789471edd980b6cf53cca72a26868946429630f37289833c24f31ed9b7f824b5c110fe8ef59d34759f3ce7a8cdfeabf34f0c5b37f5027558fd54de3b464b21df41c52", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28, @ANYRESHEX=r5], 0x48) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58bb0000627cc4df86ccc8098f50314659956f4a8f3cc77d22355e24c26645f3eb847c7df6430dad7b9be500cfee6fa7824751da67b0427b8791b450e480a4262e88f1c884ad2f2f1e3b66a07f174e69b9540d4fb0ae0e21", @ANYRES16=r8, @ANYBLOB="050427bd273f26c17000fedbdfff01000000", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) 1.520950517s ago: executing program 4 (id=2287): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r4, 0x1, 0x0, 0x10}, 0x14}}, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4f}, {0xa, 0x4e20, 0xc, @remote, 0x5a8}, 0x1, {[0x0, 0x80, 0x0, 0xd, 0xfffffff7, 0x400, 0xff, 0x7]}}, 0x5c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="39e7ff04", @ANYRES16=r6, @ANYBLOB="0100fdffffff000000000c000000200001801400020073797a5f74756e00000000000000000008000300030000000800038004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003801000008008000300000204000a800000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.356197827s ago: executing program 1 (id=2288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x1, 0x8000, 0x101, 0x7, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x66, 0x0, 0x2b, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp={0x44, 0xc, 0x6d, 0x0, 0x7, [0x3ff, 0x0]}, @cipso={0x86, 0x38, 0x3, [{0x7, 0x9, "77512e715afbfc"}, {0x0, 0x4, 'ec'}, {0x0, 0x11, "ebd5776b800e6a7fc58f70c0907275"}, {0x0, 0x9, "c0291c5a4c0f4d"}, {0x1, 0xb, "51580605200ad3ddf5"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8200040}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x170, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x10040000) 1.243727643s ago: executing program 4 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x74, 0x38, 0x1, 0x70bd25, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @nested={0x5c, 0x102, 0x0, 0x1, [@nested={0x58, 0x36, 0x0, 0x1, [@nested={0x4, 0xea}, @generic="a1dd0573b2b0760c2629b8893472cc4012571e4a374b14cc7c5754f7f0a5b271fff2e725b2777d1b2bfd02996f3ca05f4fbb64a7b2a46db3eaa5ed600b084b8db6d204aada858f52e4c948218093eb5e"]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket(0x3, 0xa, 0xffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003147df8fdfffffff9dbdf250900020073797a320000000008004100734f7700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900"], 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="dd2000000012000111f969e2ce0000"], 0x26}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000010000100100614ac282cb3cb6dfa2300000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c00028008000140000000010800fd0500000014080002400000000a0900010073797a30000000000900020073797a3200000000140000001100010000"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xe8}, 0x8) 1.038363807s ago: executing program 1 (id=2290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="7c003307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000280), 0x2, 0x0) read(r3, &(0x7f0000001c40)=""/4096, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.027021094s ago: executing program 4 (id=2291): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x2f, 0x0, @multicast2, @local, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@local}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x8, 0x8, 0x0, 0x1, 0x20, @private0, @empty, 0x700, 0x40, 0x4, 0x800}}) r2 = socket$inet(0x2, 0x1, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070280000f00", 0x33a) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x90) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000050) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) shutdown(r2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x9}, 0x4) 850.388371ms ago: executing program 0 (id=2292): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}]}, 0x28}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x303, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r8, @ANYBLOB="08000a00ac7f7b55d279010570bd1831486301ce44afdc4c8a469cf568aa67f6495e46557ccf32e077f8b0f2a253a6a93ea29846df664e0e70f041e5f7dcb8bc5a2ef3761b25eff90df02059624e28da845259864197a0ed", @ANYRES32], 0x54}}, 0x0) 849.532718ms ago: executing program 2 (id=2293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x2d8, @loopback, 0x5}}, 0x0, 0x0, 0x4b, 0x0, "cc9a08759f30b417b3ec7a8d8180e6beaf0fbb6fe2e1eda593b22621c055a16dfd6040729b8c9811adb297ad2610197522df1a8c62870881c09e5ca8901fa3c1b5313532840ebf32bd25963566a7ac99"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20040041, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 792.019258ms ago: executing program 4 (id=2294): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$inet6_buf(r0, 0x29, 0x17, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000000840)={0xa, 0x4e23, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 603.651499ms ago: executing program 4 (id=2295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000200000000000000000000a200000000b0a0102000000000000000000048fbc8b3301ac8f637b810101cde60900010073797a3000000000140000001100010000000000000000000300000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x884) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) 585.892538ms ago: executing program 2 (id=2296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000340)="48ba726919fba06e7f81b616", &(0x7f0000000400)=""/170}, 0x20) 226.394578ms ago: executing program 2 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) close(r1) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r0, @ANYBLOB="fe221520b10e55eb6fddb3aff651e97744631fe92531ecddd46c6a0a2693945887f0c0c437c7596568b0934e3c550767fb7712260ff4f91a73c83822348e5c50c2766d37b1194a6a30ed1693fbacbdc57f6853d04e4734920ebfcba8eb9c12e52816991031"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x3, 0xa, 0xffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003147df8fdfffffff9dbdf250900020073797a320000000008004100734f7700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES32=r3], 0x184}}, 0x20000050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x7fffffff, @loopback, 0x5}, 0x1c) r10 = socket$kcm(0x29, 0x7, 0x0) sendmmsg$inet(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r10) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="fff500001400030007000000000000000000009fcd1c970014000100ff"], 0x44}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000010000100100614ac282cb3cb6dfa2300000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c00028008000140000000010800fd0500000014080002400000000a0900010073797a30000000000900020073797a3200000000140000001100010000"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmmsg$inet6(r4, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xe8}, 0x8) 0s ago: executing program 3 (id=2298): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2e}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 10/0x10 [ 236.015340][ T8824] ? rcu_is_watching+0x15/0xb0 [ 236.015380][ T8824] ? do_syscall_64+0xbe/0x3b0 [ 236.015418][ T8824] do_syscall_64+0xfa/0x3b0 [ 236.015448][ T8824] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.015478][ T8824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.015506][ T8824] ? clear_bhb_loop+0x60/0xb0 [ 236.015533][ T8824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.015555][ T8824] RIP: 0033:0x7f5ee8b8eb69 [ 236.015574][ T8824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.015592][ T8824] RSP: 002b:00007f5ee9a9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.015617][ T8824] RAX: ffffffffffffffda RBX: 00007f5ee8db5fa0 RCX: 00007f5ee8b8eb69 [ 236.015633][ T8824] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 236.015646][ T8824] RBP: 00007f5ee9a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.015659][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.015671][ T8824] R13: 0000000000000000 R14: 00007f5ee8db5fa0 R15: 00007ffd8cb837b8 [ 236.015706][ T8824] [ 236.639599][ T5912] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.781124][ T8833] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 237.047180][ T8841] lo speed is unknown, defaulting to 1000 [ 237.152410][ T8850] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 237.252113][ T8854] macsec1: entered promiscuous mode [ 237.343232][ T8850] bridge_slave_0: left allmulticast mode [ 237.349291][ T8850] bridge_slave_0: left promiscuous mode [ 237.355863][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.371796][ T8850] bridge_slave_1: left allmulticast mode [ 237.377772][ T8850] bridge_slave_1: left promiscuous mode [ 237.384843][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.400581][ T8850] bond0: (slave bond_slave_0): Releasing backup interface [ 237.437936][ T8850] bond0: (slave bond_slave_1): Releasing backup interface [ 237.459247][ T8850] team0: Port device team_slave_0 removed [ 237.475139][ T8850] team0: Port device team_slave_1 removed [ 237.482302][ T8850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.491501][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.501907][ T8850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.509575][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.535922][ T8850] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 237.543486][ T8850] batman_adv: batadv0: Removing interface: ip6gretap1 [ 237.557151][ T8850] bond0: (slave veth3): Releasing backup interface [ 237.702312][ T8867] __nla_validate_parse: 2 callbacks suppressed [ 237.702332][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 237.988111][ T8863] geneve0: left allmulticast mode [ 238.019398][ T8863] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 238.120492][ T138] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.179530][ T138] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.325296][ T138] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.356941][ T138] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.554766][ T8888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.559491][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 238.631375][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 238.711499][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 239.426132][ T8937] gretap1: entered promiscuous mode [ 239.445223][ T8937] gretap1: entered allmulticast mode [ 239.463339][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.469056][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 239.494233][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 239.503124][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.503386][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.503562][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.503738][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.544853][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.565865][ T8943] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 239.578213][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.628582][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.758383][ T8939] netlink: 'syz.3.777': attribute type 29 has an invalid length. [ 239.773988][ T8951] netlink: 56 bytes leftover after parsing attributes in process `syz.4.779'. [ 239.935445][ T8960] team0: Port device dummy0 added [ 240.765132][ T8998] netlink: 160 bytes leftover after parsing attributes in process `syz.1.795'. [ 240.774645][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 240.787628][ T8998] NCSI netlink: No device for ifindex 0 [ 241.071761][ T9010] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 241.213877][ T9014] bridge_slave_0: left allmulticast mode [ 241.226486][ T9014] bridge_slave_0: left promiscuous mode [ 241.241079][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.269503][ T9014] bridge_slave_1: left allmulticast mode [ 241.291328][ T9014] bridge_slave_1: left promiscuous mode [ 241.317348][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.343849][ T9014] bond0: (slave bond_slave_0): Releasing backup interface [ 241.354933][ T9014] bond0: (slave bond_slave_1): Releasing backup interface [ 241.370819][ T9014] team0: Port device team_slave_1 removed [ 241.378005][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.387363][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.457456][ T9026] netlink: 772 bytes leftover after parsing attributes in process `syz.0.803'. [ 241.486148][ T9024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.507438][ T9026] tipc: Enabling of bearer rejected, failed to enable media [ 241.525602][ T9021] lo speed is unknown, defaulting to 1000 [ 242.028655][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.042254][ T9046] lo speed is unknown, defaulting to 1000 [ 242.997424][ T9088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.008855][ T9088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.121345][ T9088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.150604][ T9088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.335627][ T9088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.365350][ T9111] __nla_validate_parse: 3 callbacks suppressed [ 243.365372][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 243.394654][ T9088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.564856][ T9088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.624019][ T9088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.627422][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.827'. [ 243.934436][ T25] lo speed is unknown, defaulting to 1000 [ 243.940936][ T25] syz1: Port: 1 Link DOWN [ 244.003657][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 244.103614][ T138] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.127314][ T138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.195230][ T3484] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.207331][ T9137] sctp: [Deprecated]: syz.3.834 (pid 9137) Use of int in max_burst socket option. [ 244.207331][ T9137] Use struct sctp_assoc_value instead [ 244.237962][ T3484] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.275384][ T138] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.292130][ T138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.336747][ T9146] FAULT_INJECTION: forcing a failure. [ 244.336747][ T9146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.355004][ T138] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.368198][ T138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.394716][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.3.835 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 244.394749][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.394777][ T9146] Call Trace: [ 244.394786][ T9146] [ 244.394796][ T9146] dump_stack_lvl+0x189/0x250 [ 244.394825][ T9146] ? __pfx____ratelimit+0x10/0x10 [ 244.394857][ T9146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.394880][ T9146] ? __pfx__printk+0x10/0x10 [ 244.394922][ T9146] should_fail_ex+0x414/0x560 [ 244.394963][ T9146] _copy_to_user+0x31/0xb0 [ 244.394996][ T9146] simple_read_from_buffer+0xe1/0x170 [ 244.395035][ T9146] proc_fail_nth_read+0x1b3/0x220 [ 244.395064][ T9146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.395093][ T9146] ? rw_verify_area+0x258/0x650 [ 244.395123][ T9146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.395151][ T9146] vfs_read+0x1fd/0x980 [ 244.395180][ T9146] ? fdget_pos+0x247/0x320 [ 244.395206][ T9146] ? __pfx___mutex_lock+0x10/0x10 [ 244.395240][ T9146] ? __pfx_vfs_read+0x10/0x10 [ 244.395272][ T9146] ? __fget_files+0x2a/0x420 [ 244.395298][ T9146] ? __fget_files+0x3a0/0x420 [ 244.395317][ T9146] ? __fget_files+0x2a/0x420 [ 244.395349][ T9146] ksys_read+0x145/0x250 [ 244.395383][ T9146] ? __pfx_ksys_read+0x10/0x10 [ 244.395412][ T9146] ? rcu_is_watching+0x15/0xb0 [ 244.395453][ T9146] ? do_syscall_64+0xbe/0x3b0 [ 244.395489][ T9146] do_syscall_64+0xfa/0x3b0 [ 244.395519][ T9146] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.395549][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.395571][ T9146] ? clear_bhb_loop+0x60/0xb0 [ 244.395598][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.395625][ T9146] RIP: 0033:0x7f5ee8b8d57c [ 244.395644][ T9146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.395662][ T9146] RSP: 002b:00007f5ee9a9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.395686][ T9146] RAX: ffffffffffffffda RBX: 00007f5ee8db5fa0 RCX: 00007f5ee8b8d57c [ 244.395707][ T9146] RDX: 000000000000000f RSI: 00007f5ee9a9c0a0 RDI: 0000000000000004 [ 244.395720][ T9146] RBP: 00007f5ee9a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.395733][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.395746][ T9146] R13: 0000000000000000 R14: 00007f5ee8db5fa0 R15: 00007ffd8cb837b8 [ 244.395786][ T9146] [ 244.827330][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 244.836780][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 244.846667][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 244.863611][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 244.902153][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 245.542119][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 245.578939][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 246.043663][ T9210] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 246.059973][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.102624][ T9213] lo speed is unknown, defaulting to 1000 [ 246.353424][ T9228] validate_nla: 21 callbacks suppressed [ 246.353446][ T9228] netlink: 'syz.3.853': attribute type 7 has an invalid length. [ 246.380705][ T9223] block nbd1: server does not support multiple connections per device. [ 246.424370][ T9223] block nbd1: shutting down sockets [ 246.487918][ T9227] tipc: Enabled bearer , priority 0 [ 246.613034][ T9234] netlink: 'syz.4.856': attribute type 10 has an invalid length. [ 246.709074][ T9227] syzkaller0: entered promiscuous mode [ 246.715536][ T9227] syzkaller0: entered allmulticast mode [ 246.762911][ T9234] team0: Port device geneve0 added [ 246.777959][ T9226] tipc: Resetting bearer [ 246.837881][ T9226] tipc: Disabling bearer [ 246.854686][ T9245] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 247.020316][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 247.721700][ T9275] lo speed is unknown, defaulting to 1000 [ 247.777584][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.815899][ T9281] team0: Failed to send options change via netlink (err -105) [ 247.839317][ T9281] team0: Port device batadv1 added [ 248.054079][ T9294] FAULT_INJECTION: forcing a failure. [ 248.054079][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.075417][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.2.873 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 248.075449][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.075463][ T9294] Call Trace: [ 248.075470][ T9294] [ 248.075479][ T9294] dump_stack_lvl+0x189/0x250 [ 248.075507][ T9294] ? __pfx____ratelimit+0x10/0x10 [ 248.075538][ T9294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.075560][ T9294] ? __pfx__printk+0x10/0x10 [ 248.075586][ T9294] ? __might_fault+0xb0/0x130 [ 248.075630][ T9294] should_fail_ex+0x414/0x560 [ 248.075668][ T9294] _copy_from_iter+0x1db/0x16f0 [ 248.075701][ T9294] ? rcu_is_watching+0x15/0xb0 [ 248.075736][ T9294] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 248.075771][ T9294] ? __pfx__copy_from_iter+0x10/0x10 [ 248.075800][ T9294] ? __build_skb_around+0x257/0x3e0 [ 248.075839][ T9294] ? netlink_sendmsg+0x642/0xb30 [ 248.075870][ T9294] ? skb_put+0x11b/0x210 [ 248.075894][ T9294] netlink_sendmsg+0x6b2/0xb30 [ 248.075937][ T9294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.075972][ T9294] ? aa_sock_msg_perm+0x94/0x160 [ 248.076003][ T9294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.076027][ T9294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.076074][ T9294] __sock_sendmsg+0x219/0x270 [ 248.076106][ T9294] ____sys_sendmsg+0x505/0x830 [ 248.076135][ T9294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.076168][ T9294] ? import_iovec+0x74/0xa0 [ 248.076202][ T9294] ___sys_sendmsg+0x21f/0x2a0 [ 248.076227][ T9294] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.076294][ T9294] ? __fget_files+0x2a/0x420 [ 248.076315][ T9294] ? __fget_files+0x3a0/0x420 [ 248.076347][ T9294] __x64_sys_sendmsg+0x19b/0x260 [ 248.076373][ T9294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.076407][ T9294] ? __pfx_ksys_write+0x10/0x10 [ 248.076436][ T9294] ? rcu_is_watching+0x15/0xb0 [ 248.076475][ T9294] ? do_syscall_64+0xbe/0x3b0 [ 248.076512][ T9294] do_syscall_64+0xfa/0x3b0 [ 248.076543][ T9294] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.076573][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.076594][ T9294] ? clear_bhb_loop+0x60/0xb0 [ 248.076621][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.076641][ T9294] RIP: 0033:0x7f16b6d8eb69 [ 248.076661][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.076679][ T9294] RSP: 002b:00007f16b7b8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.076703][ T9294] RAX: ffffffffffffffda RBX: 00007f16b6fb5fa0 RCX: 00007f16b6d8eb69 [ 248.076718][ T9294] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 248.076732][ T9294] RBP: 00007f16b7b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.076745][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.076758][ T9294] R13: 0000000000000000 R14: 00007f16b6fb5fa0 R15: 00007ffc26bbc598 [ 248.076792][ T9294] [ 248.443861][ T9302] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 248.453582][ T9301] __nla_validate_parse: 15 callbacks suppressed [ 248.453601][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 248.505196][ T9301] bridge0: entered allmulticast mode [ 248.698309][ T9301] pim6reg: entered allmulticast mode [ 249.098469][ T9333] netlink: 204 bytes leftover after parsing attributes in process `syz.2.884'. [ 249.112702][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 249.132154][ T9333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.884'. [ 249.146123][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 249.166397][ T9333] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 249.176419][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.885'. [ 249.192173][ T9333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.429954][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 249.431466][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 249.442537][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 249.611283][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.887'. [ 249.758143][ T1144] wlan0: Trigger new scan to find an IBSS to join [ 250.422580][ T9392] netlink: 564 bytes leftover after parsing attributes in process `syz.2.897'. [ 250.433194][ T9392] netlink: 171 bytes leftover after parsing attributes in process `syz.2.897'. [ 250.442675][ T9392] netlink: 5 bytes leftover after parsing attributes in process `syz.2.897'. [ 250.640893][ T9394] lo speed is unknown, defaulting to 1000 [ 250.650151][ T9397] IPv6: Can't replace route, no match found [ 251.263088][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.525764][ T9432] lo speed is unknown, defaulting to 1000 [ 251.554356][ T9434] team0: Port device dummy0 removed [ 251.601266][ T847] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.622703][ T9434] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 251.636218][ T9434] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 251.652173][ T9434] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.138836][ T9456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.225152][ T9456] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 252.237206][ T9456] NCSI netlink: No device for ifindex 0 [ 252.621250][ T6745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.355779][ T9486] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 253.376188][ T9486] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 253.391484][ T9486] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 253.406712][ T9489] syzkaller0: entered promiscuous mode [ 253.418157][ T9489] syzkaller0: entered allmulticast mode [ 253.628989][ T9495] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 253.645843][ T9495] __nla_validate_parse: 10 callbacks suppressed [ 253.645864][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.3.926'. [ 253.670715][ T9501] netlink: 'syz.2.927': attribute type 16 has an invalid length. [ 253.678809][ T9501] netlink: 'syz.2.927': attribute type 3 has an invalid length. [ 253.688599][ T9501] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.927'. [ 253.794634][ T9495] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.926'. [ 253.816592][ T9505] netlink: 14 bytes leftover after parsing attributes in process `syz.1.930'. [ 253.878530][ T9512] netlink: 14 bytes leftover after parsing attributes in process `syz.1.930'. [ 253.900598][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 253.915066][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 253.924902][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 253.941403][ T9505] hsr_slave_0: left promiscuous mode [ 253.954704][ T9505] hsr_slave_1: left promiscuous mode [ 253.963548][ T9509] netlink: 'syz.2.932': attribute type 5 has an invalid length. [ 254.015774][ T9519] openvswitch: netlink: Missing valid actions attribute. [ 254.034058][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.057186][ T9520] netlink: 68 bytes leftover after parsing attributes in process `syz.3.933'. [ 254.202628][ T9524] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 254.285862][ T9524] !: left allmulticast mode [ 254.291738][ T9532] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 254.341519][ T9524] !: left promiscuous mode [ 254.401112][ T9524] bridge0: port 3(0!) entered disabled state [ 254.434025][ T9529] netlink: 'syz.4.937': attribute type 10 has an invalid length. [ 254.474579][ T9524] bridge_slave_0: left allmulticast mode [ 254.486696][ T9524] bridge_slave_0: left promiscuous mode [ 254.516921][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.554903][ T9524] bridge_slave_1: left allmulticast mode [ 254.561296][ T9524] bridge_slave_1: left promiscuous mode [ 254.567290][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.582049][ T9549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.941'. [ 254.598228][ T9524] team0: Port device bond_slave_1 removed [ 254.616972][ T9524] team0: Port device team_slave_0 removed [ 254.638914][ T9524] team0: Port device team_slave_1 removed [ 254.678199][ T9524] team0: Port device geneve0 removed [ 254.698174][ T9524] bond0: (slave bridge1): Releasing active interface [ 254.707514][ T9524] bridge1: left promiscuous mode [ 254.719120][ T9524] bridge1: left allmulticast mode [ 254.738542][ T9524] bond1: (slave bridge2): Releasing backup interface [ 254.746533][ T9524] bridge2: left promiscuous mode [ 254.780461][ T1144] wlan0: Trigger new scan to find an IBSS to join [ 254.819631][ T9532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.861846][ T9540] bond2: (slave veth3): Enslaving as an active interface with a down link [ 254.886904][ T9545] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 254.897105][ T9545] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 254.968965][ T9529] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 255.004476][ T9546] ip6erspan0: entered allmulticast mode [ 255.075524][ T9534] lo speed is unknown, defaulting to 1000 [ 255.296565][ T9558] gretap1: entered promiscuous mode [ 255.314459][ T9558] gretap1: entered allmulticast mode [ 255.624841][ T9569] lo speed is unknown, defaulting to 1000 [ 255.727439][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.859644][ T9583] lo speed is unknown, defaulting to 1000 [ 256.739437][ T9623] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 257.735558][ T9655] batadv0: entered promiscuous mode [ 257.747263][ T9655] batadv0: entered allmulticast mode [ 257.963656][ T9650] lo speed is unknown, defaulting to 1000 [ 258.457939][ T9687] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 258.481409][ T9692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.536581][ T9687] bond0: (slave wlan1): Releasing backup interface [ 258.590837][ T9687] bond2: (slave veth3): Releasing active interface [ 258.595954][ T9693] netlink: 'syz.3.977': attribute type 10 has an invalid length. [ 258.658538][ T9693] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 258.887673][ T9711] ipvlan2: entered promiscuous mode [ 258.909171][ T9711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 258.918725][ T9713] __nla_validate_parse: 8 callbacks suppressed [ 258.918745][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 258.960178][ T9715] bond0: (slave wlan1): Releasing backup interface [ 258.997033][ T9716] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.017518][ T9715] netlink: 'syz.3.986': attribute type 10 has an invalid length. [ 259.030332][ T9716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.054585][ T9715] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 259.074305][ T9715] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 259.101074][ T9716] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.132227][ T9716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.231148][ T9716] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.253591][ T9716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.356087][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.990'. [ 259.383259][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 259.395339][ T9716] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.407423][ T9716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.520933][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.539518][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.553895][ T9741] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 259.603527][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.622304][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.700738][ T9742] macvlan1: entered promiscuous mode [ 259.745999][ T9742] macvlan1: left promiscuous mode [ 259.778569][ T3484] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.787402][ T3484] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.855974][ T14] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.879343][ T14] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.081933][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 260.158073][ T9768] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 260.184094][ T9768] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 260.203335][ T9768] bond0: (slave wlan1): refused to change device type [ 260.396459][ T9792] sctp: [Deprecated]: syz.0.1009 (pid 9792) Use of int in maxseg socket option. [ 260.396459][ T9792] Use struct sctp_assoc_value instead [ 260.429074][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1009'. [ 260.444919][ T9792] netlink: 'syz.0.1009': attribute type 7 has an invalid length. [ 260.454659][ T9792] netlink: 'syz.0.1009': attribute type 8 has an invalid length. [ 260.463086][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 260.544917][ T9794] batman_adv: batadv0: Adding interface: ip6gretap2 [ 260.598700][ T9794] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.656577][ T9794] batman_adv: batadv0: Interface activated: ip6gretap2 [ 260.705320][ T9807] netlink: 'syz.3.1012': attribute type 13 has an invalid length. [ 260.713744][ T9807] netlink: 'syz.3.1012': attribute type 17 has an invalid length. [ 260.860644][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 260.884045][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 260.948327][ T9817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 260.991628][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.037332][ T9822] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1015'. [ 261.207724][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.259335][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.331661][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.399627][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.457107][ T9807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.506264][ T9817] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1015'. [ 261.656844][ T9830] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 261.971851][ T9830] team0: Port device dummy0 added [ 262.017391][ T9810] lo speed is unknown, defaulting to 1000 [ 262.075365][ T9807] syz.3.1012 (9807) used greatest stack depth: 18848 bytes left [ 262.132119][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.133653][ T9826] lo speed is unknown, defaulting to 1000 [ 262.337064][ T9845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.529214][ T9855] netlink: 'syz.0.1026': attribute type 9 has an invalid length. [ 263.475709][ T9897] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 263.772666][ T9914] validate_nla: 1 callbacks suppressed [ 263.772687][ T9914] netlink: 'syz.4.1044': attribute type 21 has an invalid length. [ 263.786588][ T9914] netlink: 'syz.4.1044': attribute type 22 has an invalid length. [ 263.805210][ T9914] netlink: 'syz.4.1044': attribute type 23 has an invalid length. [ 263.839976][ T9914] netlink: 'syz.4.1044': attribute type 25 has an invalid length. [ 264.034690][ T9928] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 264.043575][ T9930] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 264.227725][ T9928] netlink: 'syz.4.1050': attribute type 10 has an invalid length. [ 264.252664][ T9933] netlink: 'syz.0.1051': attribute type 72 has an invalid length. [ 264.268970][ T9928] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 264.274908][ T9933] __nla_validate_parse: 8 callbacks suppressed [ 264.274933][ T9933] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.1051'. [ 264.471719][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 264.526264][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1052'. [ 264.669022][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 264.715187][ T9944] veth0_to_bond: entered allmulticast mode [ 264.890279][ T9955] netlink: 'syz.1.1056': attribute type 4 has an invalid length. [ 265.155504][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805656c400: rx timeout, send abort [ 265.399003][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1062'. [ 265.499246][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.518596][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.540618][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.549195][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.583826][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.595618][ T9948] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.596009][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.632899][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.649460][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 265.663840][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805656c400: abort rx timeout. Force session deactivation [ 265.700053][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.785526][ T9993] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 265.872810][ T9997] tipc: Enabled bearer , priority 0 [ 265.897438][ T9993] ..@ÿ: renamed from bond_slave_0 [ 265.930447][ T9996] tipc: Enabling of bearer rejected, already enabled [ 266.085060][T10001] syzkaller0: entered promiscuous mode [ 266.097002][T10001] syzkaller0: entered allmulticast mode [ 266.103358][T10001] tipc: Resetting bearer [ 266.113471][ T9992] tipc: Resetting bearer [ 266.324952][T10019] netlink: 'syz.3.1072': attribute type 10 has an invalid length. [ 266.962255][ T9980] tipc: Node number set to 2216997204 [ 267.506286][ T9992] tipc: Disabling bearer [ 267.517988][T10010] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 267.529468][T10013] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 267.567647][T10016] bond0: (slave wlan1): Releasing backup interface [ 267.609493][ T9981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.618684][T10017] bond0: (slave wlan1): Releasing backup interface [ 267.642786][T10019] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 267.674747][T10019] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.753772][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 267.774249][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 267.836546][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.843141][ T9980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.909881][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 268.162259][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880569b0c00: rx timeout, send abort [ 268.352857][T10066] syzkaller1: entered promiscuous mode [ 268.358592][T10066] syzkaller1: entered allmulticast mode [ 268.400833][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 268.415306][T10069] sctp: [Deprecated]: syz.2.1087 (pid 10069) Use of int in max_burst socket option. [ 268.415306][T10069] Use struct sctp_assoc_value instead [ 268.444448][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 268.454508][T10071] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 268.662452][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880569b0800: rx timeout, send abort [ 268.670968][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880569b0c00: abort rx timeout. Force session deactivation [ 269.084535][T10106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.115839][T10093] lo speed is unknown, defaulting to 1000 [ 269.170915][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880569b0800: abort rx timeout. Force session deactivation [ 269.514328][T10132] validate_nla: 4 callbacks suppressed [ 269.514350][T10132] netlink: 'syz.2.1103': attribute type 13 has an invalid length. [ 269.538677][T10125] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 269.685493][T10132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.689077][T10142] __nla_validate_parse: 3 callbacks suppressed [ 269.689101][T10142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1104'. [ 269.732354][T10144] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 270.073501][T10167] Unsupported ieee802154 address type: 0 [ 270.954480][T10200] veth1_to_bond: entered allmulticast mode [ 270.995720][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 271.122541][T10200] veth1_to_bond (unregistering): left allmulticast mode [ 271.125709][T10209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1122'. [ 271.348847][T10219] netlink: 'syz.1.1125': attribute type 7 has an invalid length. [ 271.888158][T10237] tipc: Started in network mode [ 271.914062][T10237] tipc: Node identity aa9cad8842, cluster identity 4711 [ 271.949218][T10237] tipc: Enabled bearer , priority 0 [ 271.967733][T10246] syzkaller0: entered promiscuous mode [ 271.989905][T10246] syzkaller0: entered allmulticast mode [ 272.053122][T10237] tipc: Resetting bearer [ 272.076023][T10236] tipc: Resetting bearer [ 272.130082][T10236] tipc: Disabling bearer [ 272.277937][T10257] netlink: 'syz.3.1137': attribute type 32 has an invalid length. [ 272.308415][T10257] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1137'. [ 272.432280][T10268] lo speed is unknown, defaulting to 1000 [ 272.474094][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 273.088184][T10302] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 273.180783][T10302] netlink: 'syz.4.1146': attribute type 10 has an invalid length. [ 273.198060][T10302] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 273.267383][T10306] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1148'. [ 273.310186][T10306] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1148'. [ 273.359273][T10306] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1148'. [ 273.416174][T10306] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1148'. [ 273.456343][T10306] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1148'. [ 273.518843][T10324] IPVS: set_ctl: invalid protocol: 137 172.20.20.32:20002 [ 273.579966][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.788347][T10332] lo speed is unknown, defaulting to 1000 [ 274.393380][T10363] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 274.433562][T10363] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 274.446012][T10363] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.621160][T10374] tipc: Enabled bearer , priority 0 [ 274.652832][T10374] syzkaller0: entered promiscuous mode [ 274.658511][T10374] syzkaller0: entered allmulticast mode [ 274.769234][T10378] bond4: entered promiscuous mode [ 274.781965][T10378] bond4: entered allmulticast mode [ 274.794281][T10378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.875274][T10374] tipc: Resetting bearer [ 274.929375][T10373] tipc: Resetting bearer [ 274.987810][T10373] tipc: Disabling bearer [ 275.302383][T10415] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 275.361505][T10415] bond4: entered promiscuous mode [ 275.367279][T10415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.445944][T10422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.465366][T10422] bond4: (slave bond5): making interface the new active one [ 275.483193][T10422] bond5: entered promiscuous mode [ 275.518836][T10422] bond4: (slave bond5): Enslaving as an active interface with an up link [ 275.535694][T10431] __nla_validate_parse: 32 callbacks suppressed [ 275.535723][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1184'. [ 275.536582][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1183'. [ 275.567096][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 275.597759][T10433] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 275.695828][T10436] pimreg: entered allmulticast mode [ 275.733392][T10415] pimreg: left allmulticast mode [ 276.147158][T10463] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 276.227326][T10463] macvlan3: entered allmulticast mode [ 276.254087][T10463] veth1_vlan: entered allmulticast mode [ 276.283084][T10470] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 276.294471][T10463] veth1_vlan: left allmulticast mode [ 276.388161][T10479] bond4: entered promiscuous mode [ 276.396673][T10479] bond4: entered allmulticast mode [ 276.409317][T10479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.593741][T10489] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1201'. [ 276.606867][T10489] tipc: Enabled bearer , priority 0 [ 276.632635][T10491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1202'. [ 276.764051][T10495] tun0: tun_chr_ioctl cmd 2147767520 [ 276.974922][T10510] netlink: 'syz.1.1211': attribute type 14 has an invalid length. [ 277.106175][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 277.142125][T10518] netlink: 'syz.1.1213': attribute type 18 has an invalid length. [ 277.159084][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1213'. [ 277.175087][T10518] netlink: 'syz.1.1213': attribute type 18 has an invalid length. [ 277.213118][T10528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.241453][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 277.253331][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 277.304523][T10527] team0: entered promiscuous mode [ 277.337185][T10527] batadv_slave_1: entered promiscuous mode [ 277.396027][T10527] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 277.486475][T10527] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.739931][ T9966] tipc: Node number set to 162070958 [ 280.559492][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 280.595533][T10554] lo speed is unknown, defaulting to 1000 [ 280.600418][T10561] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 280.611471][T10561] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1227'. [ 280.621074][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 281.002056][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 281.021385][T10578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.117487][T10583] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1231'. [ 281.506604][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1237'. [ 281.730248][T10607] netlink: 'syz.0.1239': attribute type 2 has an invalid length. [ 281.766756][T10607] : entered promiscuous mode [ 281.924024][T10615] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 282.358700][T10641] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 282.404195][T10641] bond0: (slave wlan1): Releasing backup interface [ 282.437283][T10641] team0: Port device batadv1 removed [ 282.483732][T10641] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 282.500672][T10641] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 282.536739][T10641] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.723430][T10662] netlink: 'syz.3.1255': attribute type 4 has an invalid length. [ 282.760368][T10662] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1255'. [ 282.771259][T10662] wlan1: mtu less than device minimum [ 282.912254][T10674] veth0_to_bridge: entered promiscuous mode [ 282.977570][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 283.014930][T10668] veth0_to_bridge: left promiscuous mode [ 283.566177][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 283.751004][T10722] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1275'. [ 284.156157][T10745] netlink: 'syz.1.1282': attribute type 8 has an invalid length. [ 284.535513][T10754] netlink: 'syz.1.1285': attribute type 12 has an invalid length. [ 285.312089][T10744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.512334][T10790] lo speed is unknown, defaulting to 1000 [ 285.766561][T10800] vlan2: entered promiscuous mode [ 285.796934][T10800] team0: entered promiscuous mode [ 286.514599][T10833] netlink: 'syz.4.1305': attribute type 3 has an invalid length. [ 286.612931][T10835] tipc: Enabled bearer , priority 0 [ 286.690400][T10838] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 286.751890][T10838] __nla_validate_parse: 3 callbacks suppressed [ 286.751913][T10838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 286.804404][T10835] syzkaller0: entered promiscuous mode [ 286.822221][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 286.852874][T10835] syzkaller0: entered allmulticast mode [ 286.870505][T10835] tipc: Resetting bearer [ 286.876539][T10838] batadv0: entered promiscuous mode [ 286.887424][T10838] batadv0: entered allmulticast mode [ 286.894293][T10838] bridge0: port 1(batadv0) entered blocking state [ 286.901574][T10838] bridge0: port 1(batadv0) entered disabled state [ 286.913783][T10838] bridge0: port 1(batadv0) entered blocking state [ 286.920466][T10838] bridge0: port 1(batadv0) entered forwarding state [ 286.941220][T10834] tipc: Resetting bearer [ 287.075879][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 287.086244][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 287.278938][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 287.640443][ T9978] tipc: Node number set to 3902582152 [ 288.659321][T10834] tipc: Disabling bearer [ 288.668862][T10848] veth1_to_bond: entered allmulticast mode [ 288.675525][T10848] veth1_to_bond: left allmulticast mode [ 288.767580][T10880] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 288.782954][T10876] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 288.795536][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 289.008281][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'. [ 289.112541][T10894] netlink: 'syz.3.1316': attribute type 12 has an invalid length. [ 289.169234][T10894] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1316'. [ 289.221953][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 289.428368][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.471932][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1325'. [ 289.764171][T10926] tipc: Enabled bearer , priority 0 [ 289.794287][T10926] syzkaller0: entered promiscuous mode [ 289.805990][T10926] syzkaller0: entered allmulticast mode [ 289.856416][T10926] tipc: Resetting bearer [ 289.888294][T10923] tipc: Resetting bearer [ 289.957457][T10923] tipc: Disabling bearer [ 290.017813][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 290.066316][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 290.153092][T10944] vlan0: entered promiscuous mode [ 290.227568][T10947] lo speed is unknown, defaulting to 1000 [ 290.688668][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.395354][T11015] tipc: Enabling of bearer rejected, media not registered [ 291.504120][T11018] bridge_slave_0: entered promiscuous mode [ 292.045301][T11040] __nla_validate_parse: 4 callbacks suppressed [ 292.045324][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1357'. [ 292.046010][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 292.183444][T11046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1359'. [ 292.655594][T11075] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1364'. [ 292.685136][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.712297][T11076] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1364'. [ 292.741702][T11076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.926594][T11084] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 292.953202][T11086] tipc: Enabled bearer , priority 0 [ 292.994854][T11086] tipc: Resetting bearer [ 293.016198][T11085] tipc: Disabling bearer [ 293.107064][T11094] lo speed is unknown, defaulting to 1000 [ 293.201677][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1370'. [ 293.958177][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 294.136793][T11119] macsec1: entered promiscuous mode [ 294.142467][T11119] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 294.149935][T11119] macsec1: entered allmulticast mode [ 294.155420][T11119] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 294.261848][T11126] openvswitch: netlink: Flow actions attr not present in new flow. [ 294.925737][T11163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'. [ 294.966376][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 295.016026][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 295.203919][T11180] syzkaller1: entered allmulticast mode [ 295.393676][T11194] netlink: 'syz.4.1393': attribute type 10 has an invalid length. [ 295.416906][T11194] bridge4: entered promiscuous mode [ 295.424590][T11194] team0: Port device bridge4 added [ 295.565256][T11203] sctp: [Deprecated]: syz.2.1396 (pid 11203) Use of int in maxseg socket option. [ 295.565256][T11203] Use struct sctp_assoc_value instead [ 295.565738][T11201] netlink: 'syz.4.1395': attribute type 3 has an invalid length. [ 295.603166][T11199] syzkaller0: entered promiscuous mode [ 295.609312][T11199] syzkaller0: entered allmulticast mode [ 295.649938][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.668020][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.263223][T11223] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 297.378685][T11223] __nla_validate_parse: 1 callbacks suppressed [ 297.378707][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 297.389341][T11231] bond5: (slave geneve3): making interface the new active one [ 297.406245][T11231] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 297.437387][T11223] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.462602][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 297.500131][ T3459] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.521172][T11237] unknown channel width for channel at 909000KHz? [ 297.523686][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.531341][T11237] unknown channel width for channel at 909000KHz? [ 297.571375][T11237] unknown channel width for channel at 909000KHz? [ 297.586468][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.623898][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.646386][T11234] lo speed is unknown, defaulting to 1000 [ 297.731787][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 297.905072][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 297.964632][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1412'. [ 297.989079][T11258] bridge0: entered promiscuous mode [ 297.996678][T11258] macvtap1: entered promiscuous mode [ 298.016900][T11258] macvtap1: entered allmulticast mode [ 298.061171][T11267] bridge0: left promiscuous mode [ 298.220813][T11273] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 298.237052][T11273] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1413'. [ 298.357864][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1415'. [ 298.594366][T11296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1419'. [ 298.598854][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 298.613703][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1419'. [ 298.851289][T11308] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 298.986777][T11308] team0: Port device geneve0 added [ 299.068282][T11314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 299.161224][T11326] netlink: 'syz.3.1426': attribute type 12 has an invalid length. [ 299.196630][T11325] netlink: 'syz.3.1426': attribute type 12 has an invalid length. [ 299.211830][T11324] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 299.254657][T11324] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 299.280582][T11324] dvmrp1: linktype set to 805 [ 299.653337][T11348] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.745070][T11354] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 299.769940][T11354] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 299.957468][T11361] gretap0: refused to change device tx_queue_len [ 299.995075][T11361] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.676145][T11407] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.723941][T11407] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.430714][T11445] nbd: socks must be embedded in a SOCK_ITEM attr [ 301.440257][T11445] block nbd1: shutting down sockets [ 302.028777][T11470] lo speed is unknown, defaulting to 1000 [ 302.390588][T11486] __nla_validate_parse: 15 callbacks suppressed [ 302.390610][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 302.416263][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 302.439753][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 302.505467][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'. [ 303.016152][T11493] validate_nla: 2 callbacks suppressed [ 303.016173][T11493] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 303.426743][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 304.052957][T11540] unknown channel width for channel at 909000KHz? [ 304.086297][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 304.106082][T11542] veth1_vlan: left allmulticast mode [ 304.115734][T11546] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 304.126044][T11542] macvlan0: left allmulticast mode [ 304.138709][T11542] netlink: 'syz.2.1485': attribute type 2 has an invalid length. [ 304.176944][T11551] sctp: [Deprecated]: syz.3.1486 (pid 11551) Use of int in max_burst socket option. [ 304.176944][T11551] Use struct sctp_assoc_value instead [ 304.223904][T11546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.258686][T11546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.272352][T11546] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 304.285507][T11546] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 305.160125][T11599] lo speed is unknown, defaulting to 1000 [ 305.285286][T11611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1503'. [ 305.762442][T11634] netlink: 'syz.1.1508': attribute type 2 has an invalid length. [ 305.799175][T11629] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 305.989114][T11635] bond4 (unregistering): Released all slaves [ 306.235610][T11640] bridge0: port 1(batadv0) entered disabled state [ 306.320729][T11649] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 306.363005][T11640] team0: Port device geneve0 removed [ 306.389869][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 306.427153][T11655] syz_tun: entered promiscuous mode [ 306.440804][ T2152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.450291][T11655] vlan2: entered promiscuous mode [ 306.517042][T11649] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 306.527783][T11649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.553103][T11660] dummy0: entered promiscuous mode [ 306.562839][T11660] macvtap1: entered promiscuous mode [ 306.568409][T11660] macvtap1: entered allmulticast mode [ 306.574194][T11660] dummy0: entered allmulticast mode [ 306.803549][T11669] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1518'. [ 306.835239][T11669] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1518'. [ 306.851790][T11667] lo speed is unknown, defaulting to 1000 [ 306.973947][ T5912] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.055302][T11685] netlink: 'syz.4.1521': attribute type 10 has an invalid length. [ 307.069840][T11685] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 307.088729][T11687] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 307.098154][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.137721][T11687] netlink: 'syz.0.1522': attribute type 21 has an invalid length. [ 307.139092][T11685] bridge4: left promiscuous mode [ 307.178096][T11685] team0: Port device bridge4 removed [ 307.185896][T11689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.201665][T11685] bond5: (slave geneve3): Releasing active interface [ 307.286216][T11687] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 307.329235][ T1144] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 307.371426][ T1144] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 307.502250][ T1144] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 307.521591][ T1144] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 307.698216][T11709] tipc: Enabled bearer , priority 0 [ 307.706406][T11709] syzkaller0: entered promiscuous mode [ 307.726539][T11709] syzkaller0: entered allmulticast mode [ 307.746491][T11712] __nla_validate_parse: 4 callbacks suppressed [ 307.746562][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 307.764331][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1530'. [ 307.799080][T11709] tipc: Resetting bearer [ 307.885378][T11708] tipc: Resetting bearer [ 307.930505][T11708] tipc: Disabling bearer [ 308.108506][T11728] netlink: 'syz.1.1535': attribute type 3 has an invalid length. [ 308.294660][T11730] lo speed is unknown, defaulting to 1000 [ 308.437470][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 308.466461][T11735] tipc: Enabled bearer , priority 0 [ 308.480034][T11739] syzkaller0: entered promiscuous mode [ 308.486442][T11739] syzkaller0: entered allmulticast mode [ 308.548131][T11744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'. [ 308.581652][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 308.595483][T11739] tipc: Resetting bearer [ 308.638422][T11739] tipc: Disabling bearer [ 308.991237][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 309.191413][T11774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1548'. [ 309.346940][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 309.381504][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 309.494139][T11789] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1552'. [ 310.156358][T11843] nbd: illegal input index 65508 [ 310.322969][T11849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.624458][T11860] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 310.640075][T11860] tipc: Resetting bearer [ 310.648480][T11860] batman_adv: batadv0: Adding interface: team0 [ 310.660640][T11860] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.721878][T11865] netlink: 'syz.0.1574': attribute type 21 has an invalid length. [ 310.727803][T11860] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 310.731041][T11866] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 310.755022][T11866] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.764527][T11866] batman_adv: batadv0: Interface activated: team0 [ 310.787925][T11866] batman_adv: batadv0: Interface deactivated: team0 [ 310.795336][T11866] batman_adv: batadv0: Removing interface: team0 [ 310.803627][T11866] bridge0: port 1(team0) entered blocking state [ 310.811173][T11866] bridge0: port 1(team0) entered disabled state [ 310.817720][T11866] team0: entered allmulticast mode [ 310.826062][T11866] team0: left allmulticast mode [ 310.998582][T11881] pimreg: entered allmulticast mode [ 311.124148][T11879] can: request_module (can-proto-4) failed. [ 311.204115][T11892] netlink: 'syz.1.1582': attribute type 5 has an invalid length. [ 311.216518][T11892] netlink: 'syz.1.1582': attribute type 7 has an invalid length. [ 311.233005][T11892] : entered promiscuous mode [ 311.518058][T11914] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 311.538888][T11909] bridge0: port 1(ipvlan0) entered blocking state [ 311.548612][T11909] bridge0: port 1(ipvlan0) entered disabled state [ 311.560382][T11909] ipvlan0: entered allmulticast mode [ 311.565885][T11909] bridge0: entered allmulticast mode [ 311.574522][T11909] ipvlan0: left allmulticast mode [ 311.575274][T11917] netlink: 'syz.4.1587': attribute type 10 has an invalid length. [ 311.579831][T11909] bridge0: left allmulticast mode [ 311.603533][T11914] !: entered promiscuous mode [ 311.609184][T11914] team0: Failed to send options change via netlink (err -105) [ 311.617189][T11914] team0: Port device 0! added [ 311.625306][T11917] team0: Failed to send port change of device 0! via netlink (err -105) [ 311.640672][T11917] !: left promiscuous mode [ 311.654834][T11917] team0: Failed to send options change via netlink (err -105) [ 311.666475][T11917] team0: Failed to send port change of device 0! via netlink (err -105) [ 311.682283][T11917] team0: Port device 0! removed [ 311.688540][T11917] bridge4: port 1(0!) entered blocking state [ 311.699323][T11917] bridge4: port 1(0!) entered disabled state [ 311.706564][T11917] !: entered allmulticast mode [ 311.714882][T11917] !: entered promiscuous mode [ 311.832610][T11921] tipc: Enabled bearer , priority 0 [ 311.845019][T11921] syzkaller0: entered promiscuous mode [ 311.853230][T11921] syzkaller0: entered allmulticast mode [ 311.950838][T11931] tipc: Resetting bearer [ 312.197806][ T31] audit: type=1107 audit(1753999855.357:5): pid=11941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*<Êj fÝ'CV=ÕqÊŸv,“d+$M*LÿØ' [ 312.593716][T11920] tipc: Resetting bearer [ 312.627696][T11920] tipc: Disabling bearer [ 312.984138][T11985] netlink: 'syz.4.1607': attribute type 26 has an invalid length. [ 313.033415][T11985] netlink: 'syz.4.1607': attribute type 26 has an invalid length. [ 313.100516][T11994] bond0: (slave wlan1): Releasing backup interface [ 313.233669][T12005] netlink: 'syz.4.1612': attribute type 1 has an invalid length. [ 313.328365][T12015] netlink: 'syz.4.1612': attribute type 13 has an invalid length. [ 313.361198][T12018] __nla_validate_parse: 13 callbacks suppressed [ 313.361224][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 313.394551][T12005] bond6: entered promiscuous mode [ 313.400763][T12005] bond6: entered allmulticast mode [ 313.406421][T12005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.447495][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1614'. [ 313.481936][T12015] ip6tnl1: entered promiscuous mode [ 313.492001][T12015] ip6tnl1: entered allmulticast mode [ 313.518338][T12015] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 313.685927][T12005] ip6gretap2: entered promiscuous mode [ 313.730396][T12005] ip6gretap2: entered allmulticast mode [ 313.736884][T12005] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 313.781077][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.821264][T12009] lo speed is unknown, defaulting to 1000 [ 313.962998][ T3484] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.999262][T12034] bridge0: entered allmulticast mode [ 314.038585][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 314.116078][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 314.140014][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 314.266411][T12041] syzkaller0: entered promiscuous mode [ 314.291575][T12041] syzkaller0: entered allmulticast mode [ 314.306826][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.795138][T12070] netlink: 'syz.2.1629': attribute type 5 has an invalid length. [ 314.803632][T12067] sctp: [Deprecated]: syz.2.1629 (pid 12067) Use of int in max_burst socket option. [ 314.803632][T12067] Use struct sctp_assoc_value instead [ 314.883411][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 315.062366][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1633'. [ 315.087076][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1630'. [ 315.115518][T12085] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 315.650563][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 315.735474][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 315.974976][T12137] tipc: Resetting bearer [ 316.005076][T12137] vlan0: left promiscuous mode [ 316.103120][T12137] ip6erspan0: left allmulticast mode [ 316.119429][T12137] dummy0: left allmulticast mode [ 316.150738][T12137] macvtap1: left promiscuous mode [ 316.155834][T12137] macvtap1: left allmulticast mode [ 316.207349][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 316.329343][T12160] sctp: [Deprecated]: syz.3.1654 (pid 12160) Use of int in max_burst socket option deprecated. [ 316.329343][T12160] Use struct sctp_assoc_value instead [ 316.374539][T12149] syz.1.1650 (12149) used greatest stack depth: 17864 bytes left [ 316.646157][T12175] netlink: 'syz.2.1658': attribute type 30 has an invalid length. [ 316.703234][T12178] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 317.577407][T12199] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 318.012045][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.037372][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.056772][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.071220][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 318.998617][T12238] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.013653][T12238] __nla_validate_parse: 2 callbacks suppressed [ 319.013674][T12238] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1675'. [ 319.048838][T12238] veth1_to_bridge: left promiscuous mode [ 319.058728][T12238] veth3: left promiscuous mode [ 319.068886][T12238] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 319.079556][T12238] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 319.094188][T12238] macsec1: left promiscuous mode [ 319.166088][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1677'. [ 319.214585][T12246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1677'. [ 319.249877][T12242] lo speed is unknown, defaulting to 1000 [ 319.342996][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 319.475528][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1679'. [ 319.518993][T12252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.572130][T12258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.579952][T12258] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 319.592908][T12258] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 319.624504][T12256] ip6tnl2: entered promiscuous mode [ 319.633762][T12256] ip6tnl2: entered allmulticast mode [ 319.808622][T12276] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1683'. [ 319.907378][T12278] IPVS: Scheduler module ip_vs_sip not found [ 320.069770][T12283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.236985][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 320.257149][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 320.273227][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 320.317274][T12290] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1687'. [ 320.463710][T12309] netlink: 'syz.1.1695': attribute type 4 has an invalid length. [ 320.476487][T12307] netlink: 'syz.1.1695': attribute type 4 has an invalid length. [ 320.606969][T12313] macsec2: entered promiscuous mode [ 320.612953][T12313] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 320.628820][T12313] macsec2: entered allmulticast mode [ 320.640432][T12313] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 320.980626][T12336] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.025847][T12334] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 321.035109][T12334] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 321.046731][T12334] netlink: 'syz.4.1701': attribute type 19 has an invalid length. [ 321.330430][T12348] pim6reg1: entered promiscuous mode [ 321.335915][T12348] pim6reg1: entered allmulticast mode [ 322.368254][T12381] team0: Port device dummy0 removed [ 322.415977][T12381] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 322.423239][T12381] batman_adv: batadv0: Removing interface: ip6gretap2 [ 322.438164][T12381] bond4: (slave bond5): Releasing backup interface [ 322.445343][T12381] bond5: left promiscuous mode [ 322.561622][T12397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.653676][T12401] netlink: 'syz.1.1720': attribute type 39 has an invalid length. [ 322.967939][T12416] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 323.029455][T12416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.079117][T12416] ipvlan0: entered allmulticast mode [ 323.084618][T12416] bond3: entered allmulticast mode [ 323.141640][T12416] bond3: (slave gretap3): making interface the new active one [ 323.149418][T12416] gretap3: entered allmulticast mode [ 323.187486][T12416] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 323.209253][T12423] mac80211_hwsim hwsim3 ªªªªª": renamed from wlan0 (while UP) [ 323.227036][T12425] digital: digital_start_poll: Unknown protocol [ 323.443267][T12436] netlink: 'syz.4.1734': attribute type 3 has an invalid length. [ 323.457469][T12438] IPv6: sit3: Disabled Multicast RS [ 323.551576][T12442] netlink: 'syz.1.1737': attribute type 3 has an invalid length. [ 323.597313][T12444] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 323.655577][T12444] dummy0: left promiscuous mode [ 323.663934][T12444] team0: Device dummy0 failed to register rx_handler [ 323.731144][T12444] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 324.060839][T12468] __nla_validate_parse: 15 callbacks suppressed [ 324.060861][T12468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'. [ 324.212699][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 324.327357][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 324.355242][T12482] siw: device registration error -23 [ 324.500394][T12490] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.517129][T12490] bond0: (slave lo): Error: Device can not be enslaved while up [ 324.536095][T12488] lo speed is unknown, defaulting to 1000 [ 325.114955][T12515] netlink: 'syz.4.1758': attribute type 2 has an invalid length. [ 325.167104][T12504] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1758'. [ 325.247721][T12525] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.525190][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 325.534991][T12545] validate_nla: 1 callbacks suppressed [ 325.535008][T12545] netlink: 'syz.2.1770': attribute type 30 has an invalid length. [ 325.536114][T12546] netlink: 'syz.0.1769': attribute type 29 has an invalid length. [ 325.552723][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 325.562557][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 325.601140][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 325.641915][T12551] netlink: 'syz.2.1770': attribute type 7 has an invalid length. [ 325.668969][T12540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.893902][T12558] netlink: 'syz.0.1772': attribute type 10 has an invalid length. [ 325.903446][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1772'. [ 325.936775][T12564] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1774'. [ 325.952118][T12558] team0: Port device geneve0 added [ 326.040888][T12566] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.1775'. [ 326.196818][ T9978] IPVS: starting estimator thread 0... [ 326.260136][ T9978] IPVS: starting estimator thread 0... [ 326.274160][T12584] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000 [ 326.283536][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.298147][T12578] IPVS: using max 26 ests per chain, 62400 per kthread [ 326.319001][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.323358][T12586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.347917][T12587] IPVS: length: 209 != 24 [ 326.369966][T12585] IPVS: using max 25 ests per chain, 60000 per kthread [ 326.855681][T12573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 326.948151][T12615] veth0_to_team: entered promiscuous mode [ 326.955118][T12615] veth0_to_team: entered allmulticast mode [ 327.511571][T12632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.001695][T12645] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 328.078990][T12629] bond0: left promiscuous mode [ 328.084186][T12629] bond0: left allmulticast mode [ 328.240932][T12659] netlink: 'syz.3.1806': attribute type 12 has an invalid length. [ 328.248889][T12659] netlink: 'syz.3.1806': attribute type 14 has an invalid length. [ 328.436432][T12666] lo speed is unknown, defaulting to 1000 [ 328.456082][T12668] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 328.911463][T12692] netlink: 'syz.4.1816': attribute type 6 has an invalid length. [ 328.928142][T12689] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 329.052727][T12700] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 329.259931][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.290161][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.371690][T12715] lo speed is unknown, defaulting to 1000 [ 329.488018][T12719] __nla_validate_parse: 17 callbacks suppressed [ 329.488039][T12719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1822'. [ 329.511544][T12719] netlink: 'syz.2.1822': attribute type 7 has an invalid length. [ 329.530796][T12717] syzkaller1: entered promiscuous mode [ 329.541852][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 329.551502][T12717] syzkaller1: entered allmulticast mode [ 329.945615][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'. [ 329.965568][T12727] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1826'. [ 330.035800][T12728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1825'. [ 330.345807][T12737] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1827'. [ 330.389193][T12739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1830'. [ 330.399581][T12739] netlink: 97 bytes leftover after parsing attributes in process `syz.2.1830'. [ 330.531486][T12749] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1830'. [ 330.838326][T12755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 331.052135][T12755] validate_nla: 2 callbacks suppressed [ 331.052156][T12755] netlink: 'syz.2.1832': attribute type 39 has an invalid length. [ 331.088269][T12755] veth0_macvtap: left promiscuous mode [ 331.128747][T12767] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 331.194412][T12767] team0: Port device dummy0 added [ 331.228453][T12765] lo speed is unknown, defaulting to 1000 [ 331.315416][T12777] siw: device registration error -23 [ 331.678466][T12786] lo speed is unknown, defaulting to 1000 [ 332.046746][T12807] vlan0: entered promiscuous mode [ 332.093890][T12807] team0: Port device vlan0 added [ 332.243270][T12820] netlink: 'syz.3.1850': attribute type 13 has an invalid length. [ 332.282473][T12820] netlink: 'syz.3.1850': attribute type 17 has an invalid length. [ 332.579223][T12820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.597242][T12820] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.607089][T12820] tipc: Resetting bearer [ 332.627214][T12820] tipc: Resetting bearer [ 332.647774][T12820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.728741][T12843] netlink: 'syz.2.1857': attribute type 10 has an invalid length. [ 332.788183][T12843] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 332.853113][T12830] lo speed is unknown, defaulting to 1000 [ 332.898981][T12851] 8021q: VLANs not supported on ipvlan1 [ 333.207892][T12868] netlink: 'syz.0.1865': attribute type 10 has an invalid length. [ 333.248161][T12866] lo speed is unknown, defaulting to 1000 [ 333.659150][T12886] openvswitch: netlink: Key 18 has unexpected len 260 expected 2 [ 333.893514][T12894] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 334.002723][T12902] batadv0: entered promiscuous mode [ 334.257814][T12910] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 334.262394][T12914] netlink: 'syz.0.1878': attribute type 15 has an invalid length. [ 334.331035][T12917] netlink: 'syz.3.1877': attribute type 4 has an invalid length. [ 334.371981][T12920] netlink: 'syz.3.1877': attribute type 1 has an invalid length. [ 334.535651][T12928] __nla_validate_parse: 8 callbacks suppressed [ 334.535675][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 334.601328][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1884'. [ 334.691753][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 334.804163][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'. [ 334.881015][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.936489][T12929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.981842][T12932] dummy0: entered promiscuous mode [ 334.991740][T12932] bridge0: port 1(dummy0) entered blocking state [ 335.002589][T12956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.004045][T12932] bridge0: port 1(dummy0) entered disabled state [ 335.027701][T12932] dummy0: entered allmulticast mode [ 335.042383][T12932] dummy0: left allmulticast mode [ 335.056721][T12932] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 335.110135][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.170363][T12939] lo speed is unknown, defaulting to 1000 [ 335.188117][T12962] geneve4: entered promiscuous mode [ 335.313897][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 335.377602][T12971] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1893'. [ 335.798934][T12993] lo speed is unknown, defaulting to 1000 [ 336.193774][T13006] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1901'. [ 336.248226][T13006] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1901'. [ 336.279964][T13013] validate_nla: 3 callbacks suppressed [ 336.279985][T13013] netlink: 'syz.4.1902': attribute type 12 has an invalid length. [ 336.347032][T13006] lo speed is unknown, defaulting to 1000 [ 336.422366][T13006] lo speed is unknown, defaulting to 1000 [ 336.552021][T13014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.578813][T13014] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.624555][T13014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.693261][T13006] lo speed is unknown, defaulting to 1000 [ 337.318222][T13018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.410860][T13060] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1910'. [ 337.485489][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1912'. [ 337.568426][ T9978] lo speed is unknown, defaulting to 1000 [ 337.575596][T13006] infiniband syz0: set active [ 337.584989][T13006] infiniband syz0: added lo [ 337.594211][T13006] syz0: rxe_create_cq: returned err = -12 [ 337.613682][T13006] infiniband syz0: Couldn't create ib_mad CQ [ 337.624988][T13006] infiniband syz0: Couldn't open port 1 [ 337.676171][T13006] RDS/IB: syz0: added [ 337.681258][T13006] smc: adding ib device syz0 with port count 1 [ 337.688062][T13006] smc: ib device syz0 port 1 has pnetid [ 337.697358][ T9978] lo speed is unknown, defaulting to 1000 [ 337.722366][T13006] lo speed is unknown, defaulting to 1000 [ 337.948266][T13087] netlink: 'syz.4.1919': attribute type 83 has an invalid length. [ 338.025621][T13080] tipc: Enabled bearer , priority 0 [ 338.060551][T13088] tap0: tun_chr_ioctl cmd 1074025680 [ 338.133991][T13082] D: renamed from syzkaller0 [ 338.153103][T13082] tipc: Disabling bearer [ 338.355722][T13006] lo speed is unknown, defaulting to 1000 [ 338.605988][T13109] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 338.657648][T13111] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 338.694125][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.739425][T13111] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 338.832107][T13111] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 338.850342][T13111] batadv0: entered promiscuous mode [ 338.856091][T13111] batadv0: entered allmulticast mode [ 338.886929][T13111] bond0: (slave batadv0): Releasing backup interface [ 338.927505][T13111] bridge0: port 1(batadv0) entered blocking state [ 338.951354][T13111] bridge0: port 1(batadv0) entered disabled state [ 338.974872][T13006] lo speed is unknown, defaulting to 1000 [ 339.405162][T13055] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 339.414682][T13055] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 339.533254][T13006] lo speed is unknown, defaulting to 1000 [ 339.689114][T13148] __nla_validate_parse: 9 callbacks suppressed [ 339.689134][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1936'. [ 339.925515][T13159] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 340.043519][T13159] bond5: entered promiscuous mode [ 340.057478][T13169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.064888][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 340.065156][T13159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.072211][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 340.147024][T13169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.173303][T13164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.181335][T13164] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 340.192275][T13164] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 340.221933][T13164] bond5: (slave wireguard0): making interface the new active one [ 340.233561][T13164] wireguard0: entered promiscuous mode [ 340.241109][T13164] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 340.251526][T13006] lo speed is unknown, defaulting to 1000 [ 340.360640][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 340.375196][T13170] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.411037][T13176] lo speed is unknown, defaulting to 1000 [ 340.489261][T13193] sit0: entered promiscuous mode [ 340.510500][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 340.526287][T13193] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 340.538464][T13193] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1946'. [ 341.173416][T13176] lo speed is unknown, defaulting to 1000 [ 341.346196][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 341.471786][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 341.978101][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 341.991617][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 342.423780][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 342.479145][T13226] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1957'. [ 342.686420][T13055] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.726652][T13055] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.754970][T13238] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.764581][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.785585][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 342.889838][T13057] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.898135][T13057] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.979226][T13057] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 342.983546][T13251] netlink: 'syz.1.1966': attribute type 1 has an invalid length. [ 343.009856][T13057] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 343.035960][T13251] tipc: Enabling of bearer rejected, failed to enable media [ 343.215471][T13266] netlink: 'syz.0.1968': attribute type 13 has an invalid length. [ 343.262154][T13266] netlink: 'syz.0.1968': attribute type 17 has an invalid length. [ 343.322991][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.345101][T13273] netlink: 'syz.3.1973': attribute type 2 has an invalid length. [ 343.361924][T13266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.422844][T13273] k›*·]‘: entered promiscuous mode [ 343.428358][T13281] !: renamed from dummy0 [ 343.451605][T13271] tipc: Enabled bearer , priority 0 [ 343.460791][T13271] syzkaller0: entered promiscuous mode [ 343.468544][T13271] syzkaller0: entered allmulticast mode [ 343.483077][T13280] netlink: 'syz.3.1973': attribute type 29 has an invalid length. [ 343.505610][T13271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 343.534457][T13273] netlink: 'syz.3.1973': attribute type 29 has an invalid length. [ 343.826932][T13296] lo speed is unknown, defaulting to 1000 [ 343.841608][T13296] lo speed is unknown, defaulting to 1000 [ 344.171253][T13319] tipc: Enabled bearer , priority 0 [ 344.187269][T13316] syzkaller0: entered promiscuous mode [ 344.202741][T13316] syzkaller0: entered allmulticast mode [ 344.282188][T13316] tipc: Resetting bearer [ 344.331071][T13316] tipc: Disabling bearer [ 344.618907][T13347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.097088][T13366] netlink: 'syz.0.1997': attribute type 3 has an invalid length. [ 345.201821][T13369] __nla_validate_parse: 5 callbacks suppressed [ 345.201842][T13369] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1999'. [ 345.218866][T13368] netlink: 'syz.0.1997': attribute type 3 has an invalid length. [ 345.464181][T13289] mpoa:mpoad_close: () going down [ 345.639017][T13383] tipc: Enabling of bearer rejected, failed to enable media [ 345.673051][T13383] tipc: Enabled bearer , priority 0 [ 345.715499][T13383] syzkaller0: entered promiscuous mode [ 345.732185][T13383] syzkaller0: entered allmulticast mode [ 345.738381][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.842297][T13383] tipc: Resetting bearer [ 345.872398][T13395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2005'. [ 345.888263][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 346.086442][T13382] tipc: Resetting bearer [ 346.177906][T13382] tipc: Disabling bearer [ 346.316155][T13414] netlink: 'syz.1.2008': attribute type 1 has an invalid length. [ 346.362517][T13414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2008'. [ 346.387516][T13417] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2011'. [ 346.535064][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 346.662179][T13429] netlink: 'syz.0.2014': attribute type 39 has an invalid length. [ 346.675637][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 346.712354][T13429] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 346.721622][T13429] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 346.749045][T13431] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 346.830537][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 347.277351][T13463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2025'. [ 347.407169][T13474] tipc: Resetting bearer [ 347.483219][T13471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.358317][T13500] lo speed is unknown, defaulting to 1000 [ 348.371129][T13508] validate_nla: 1 callbacks suppressed [ 348.371148][T13508] netlink: 'syz.0.2037': attribute type 12 has an invalid length. [ 348.410591][T13500] lo speed is unknown, defaulting to 1000 [ 348.450354][T13508] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 348.734627][T13526] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 348.762477][T13526] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 348.823343][T13530] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 348.882915][T13526] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.991114][T13537] bond6: (slave gretap3): making interface the new active one [ 349.007801][T13537] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 350.079541][T13565] lo speed is unknown, defaulting to 1000 [ 350.083743][T13569] tipc: Enabled bearer , priority 0 [ 350.096024][T13569] syzkaller0: entered promiscuous mode [ 350.105685][T13569] syzkaller0: entered allmulticast mode [ 350.117621][T13565] lo speed is unknown, defaulting to 1000 [ 350.201303][T13576] FAULT_INJECTION: forcing a failure. [ 350.201303][T13576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.204504][T13569] veth0_to_team: mtu less than device minimum [ 350.280370][T13576] CPU: 1 UID: 0 PID: 13576 Comm: syz.2.2052 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 350.280403][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.280416][T13576] Call Trace: [ 350.280425][T13576] [ 350.280435][T13576] dump_stack_lvl+0x189/0x250 [ 350.280464][T13576] ? __pfx____ratelimit+0x10/0x10 [ 350.280495][T13576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.280518][T13576] ? __pfx__printk+0x10/0x10 [ 350.280545][T13576] ? __might_fault+0xb0/0x130 [ 350.280590][T13576] should_fail_ex+0x414/0x560 [ 350.280629][T13576] _copy_from_iter+0x1db/0x16f0 [ 350.280661][T13576] ? __lock_acquire+0xab9/0xd20 [ 350.280702][T13576] ? __pfx__copy_from_iter+0x10/0x10 [ 350.280748][T13576] tun_get_user+0x219/0x3e20 [ 350.280797][T13576] ? __pfx_tun_get_user+0x10/0x10 [ 350.280825][T13576] ? aa_file_perm+0x40c/0xe70 [ 350.280858][T13576] ? aa_file_perm+0x122/0xe70 [ 350.280897][T13576] ? ref_tracker_alloc+0x318/0x460 [ 350.280917][T13576] ? __lock_acquire+0xab9/0xd20 [ 350.280948][T13576] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 350.280976][T13576] ? tun_get+0x1c/0x2f0 [ 350.281006][T13576] ? tun_get+0x1c/0x2f0 [ 350.281027][T13576] ? tun_get+0x1c/0x2f0 [ 350.281056][T13576] tun_chr_write_iter+0x113/0x200 [ 350.281082][T13576] vfs_write+0x54b/0xa90 [ 350.281119][T13576] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 350.281143][T13576] ? __pfx_vfs_write+0x10/0x10 [ 350.281186][T13576] ? __fget_files+0x2a/0x420 [ 350.281217][T13576] ksys_write+0x145/0x250 [ 350.281251][T13576] ? __pfx_ksys_write+0x10/0x10 [ 350.281278][T13576] ? rcu_is_watching+0x15/0xb0 [ 350.281318][T13576] ? do_syscall_64+0xbe/0x3b0 [ 350.281360][T13576] do_syscall_64+0xfa/0x3b0 [ 350.281390][T13576] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.281419][T13576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.281441][T13576] ? clear_bhb_loop+0x60/0xb0 [ 350.281467][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.281487][T13576] RIP: 0033:0x7f16b6d8eb69 [ 350.281506][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.281525][T13576] RSP: 002b:00007f16b7b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.281550][T13576] RAX: ffffffffffffffda RBX: 00007f16b6fb5fa0 RCX: 00007f16b6d8eb69 [ 350.281566][T13576] RDX: 0000000000000044 RSI: 0000200000000280 RDI: 0000000000000003 [ 350.281580][T13576] RBP: 00007f16b7b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.281593][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.281606][T13576] R13: 0000000000000000 R14: 00007f16b6fb5fa0 R15: 00007ffc26bbc598 [ 350.281639][T13576] [ 350.556117][T13568] tipc: Resetting bearer [ 350.601402][T13568] tipc: Disabling bearer [ 350.984624][T13588] __nla_validate_parse: 6 callbacks suppressed [ 350.984645][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2054'. [ 351.179551][T13600] batadv_slave_1: entered promiscuous mode [ 351.546719][T13608] lo speed is unknown, defaulting to 1000 [ 351.626825][T13608] lo speed is unknown, defaulting to 1000 [ 351.887807][T13625] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 351.945183][T13626] netlink: 'syz.2.2062': attribute type 10 has an invalid length. [ 352.091126][T13625] team0: Port device 0! added [ 352.152069][T13626] team0: Port device 0! removed [ 352.201997][T13626] bond0: (slave 0!): Enslaving as an active interface with an up link [ 352.716275][T13641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 353.067965][T13650] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2066'. [ 353.508171][T13670] netlink: 'syz.0.2070': attribute type 29 has an invalid length. [ 353.538096][T13670] netlink: 'syz.0.2070': attribute type 29 has an invalid length. [ 353.956781][T13690] netlink: 'syz.0.2078': attribute type 4 has an invalid length. [ 354.181205][T13598] batadv_slave_1: left promiscuous mode [ 354.317023][T13700] IPVS: Scheduler module ip_vs_sip not found [ 354.352228][T13708] IPVS: length: 8 != 446622349272 [ 354.403454][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 354.751539][T13707] syzkaller0: entered promiscuous mode [ 354.789137][T13707] syzkaller0: entered allmulticast mode [ 355.330821][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2087'. [ 355.337841][T13748] lo speed is unknown, defaulting to 1000 [ 355.387452][T13748] lo speed is unknown, defaulting to 1000 [ 355.517991][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 355.557199][T13754] netlink: 'syz.4.2089': attribute type 6 has an invalid length. [ 355.651231][T13755] tipc: Enabled bearer , priority 0 [ 355.661897][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 355.953668][T13755] syzkaller0: entered promiscuous mode [ 355.959233][T13755] syzkaller0: entered allmulticast mode [ 356.006248][T13755] tipc: Resetting bearer [ 356.073950][T13753] tipc: Resetting bearer [ 356.151798][T13773] netlink: 'syz.2.2093': attribute type 3 has an invalid length. [ 356.423360][T13792] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2096'. [ 356.561460][T13797] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 357.772727][T13753] tipc: Disabling bearer [ 357.882691][T13778] lo speed is unknown, defaulting to 1000 [ 357.908176][T13778] lo speed is unknown, defaulting to 1000 [ 357.967887][T13801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'. [ 357.997634][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 358.490599][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 358.527597][T13818] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 358.928045][T13829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2103'. [ 358.989437][T13818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.026436][T13821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.039229][T13821] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.060048][T13821] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 359.093616][T13824] tc_dump_action: action bad kind [ 359.100909][T13826] batadv_slave_1: entered promiscuous mode [ 359.120633][T13826] bond7: (slave batadv_slave_1): making interface the new active one [ 359.155232][T13826] bond7: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 359.203281][T13829] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.264863][T13836] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 359.302612][T13836] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 359.326230][T13836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2106'. [ 359.669991][T13851] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2109'. [ 360.062582][T13862] nbd1: detected capacity change from 0 to 127 [ 360.076312][ T51] block nbd1: Receive control failed (result -32) [ 360.234087][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 360.508552][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'. [ 360.577846][ T6388] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 360.630883][T13891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.856883][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 360.883275][T13910] erspan0: entered promiscuous mode [ 361.055127][T13914] syzkaller1: entered promiscuous mode [ 361.061280][T13914] syzkaller1: entered allmulticast mode [ 361.097983][T13916] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 361.420608][ T31] audit: type=1800 audit(1753999904.577:6): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2131" name="rdma.current" dev="tmpfs" ino=2231 res=0 errno=0 [ 362.011745][T13942] __nla_validate_parse: 3 callbacks suppressed [ 362.011770][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 362.040141][T13944] tipc: MTU too low for tipc bearer [ 362.225644][T13958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'. [ 362.359261][T13965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2143'. [ 362.718018][T13983] tipc: Enabled bearer , priority 0 [ 362.757371][T13983] syzkaller0: entered promiscuous mode [ 362.779230][T13983] syzkaller0: entered allmulticast mode [ 362.912364][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2153'. [ 362.947748][T13983] tipc: Resetting bearer [ 363.037418][T13983] tipc: Disabling bearer [ 363.078533][T14000] bond0: (slave bridge0): Releasing backup interface [ 363.085690][T14000] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 363.120977][T14000] bond0: (slave 0!): Releasing backup interface [ 363.150292][T14000] bridge0: port 1(batadv0) entered disabled state [ 363.202079][T14000] team0: Port device vlan0 removed [ 363.350360][T14014] C: renamed from team_slave_0 [ 363.368037][T14014] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2156'. [ 363.398658][T14005] lo speed is unknown, defaulting to 1000 [ 363.420300][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 363.510259][T14005] lo speed is unknown, defaulting to 1000 [ 363.657091][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.676452][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2160'. [ 363.716685][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.717219][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2160'. [ 363.758060][T14034] IPVS: set_ctl: invalid protocol: 164 172.20.20.187:20000 [ 363.769606][T14028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2160'. [ 363.786789][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2161'. [ 363.793071][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2160'. [ 363.797484][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.818689][T14034] netlink: 'syz.3.2161': attribute type 7 has an invalid length. [ 363.827868][T14034] netlink: 'syz.3.2161': attribute type 8 has an invalid length. [ 363.837765][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.846734][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.855470][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.864251][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.874538][T14028] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 363.928217][T14035] vlan3: entered promiscuous mode [ 363.934878][T13057] bond6: (slave ip6gretap2): link status up again after 0 ms [ 363.950982][T14035] bridge0: entered promiscuous mode [ 363.970716][T13057] bond6: (slave ip6gretap2): link status up again after 0 ms [ 363.978864][T14035] vlan3: entered allmulticast mode [ 364.003991][T13057] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.022400][T14038] pimreg: left allmulticast mode [ 364.050667][ T3459] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.100047][T13057] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.140323][T13057] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.180054][ T6388] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.210187][ T6388] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.270821][T13055] net_ratelimit: 1 callbacks suppressed [ 364.270842][T13055] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.286430][T14050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.319987][T13055] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.342257][ T6388] bond6: (slave ip6gretap2): link status up again after 0 ms [ 364.361822][T14043] can: request_module (can-proto-3) failed. [ 364.374898][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.516623][T13056] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 364.565948][T14057] lo speed is unknown, defaulting to 1000 [ 365.102914][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 365.153554][T14075] pimreg: entered allmulticast mode [ 365.220038][T13057] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 365.227674][T14074] pimreg: left allmulticast mode [ 365.410666][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 365.448332][T14089] veth1_virt_wifi: mtu less than device minimum [ 365.950015][ T51] Bluetooth: hci4: link tx timeout [ 365.955289][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.965518][ T51] Bluetooth: hci4: link tx timeout [ 365.970740][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.980524][ T51] Bluetooth: hci4: link tx timeout [ 365.987023][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 365.994946][ T51] Bluetooth: hci4: link tx timeout [ 366.000339][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.008240][ T51] Bluetooth: hci4: link tx timeout [ 366.013941][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.022301][ T51] Bluetooth: hci4: link tx timeout [ 366.027456][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.035613][ T51] Bluetooth: hci4: link tx timeout [ 366.040846][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.048656][ T51] Bluetooth: hci4: link tx timeout [ 366.054023][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.062094][ T51] Bluetooth: hci4: link tx timeout [ 366.067246][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.075266][ T51] Bluetooth: hci4: link tx timeout [ 366.080515][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.088460][ T51] Bluetooth: hci4: link tx timeout [ 366.093687][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.101537][ T51] Bluetooth: hci4: link tx timeout [ 366.106767][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 366.508966][T14109] pim6reg: entered allmulticast mode [ 366.530684][T14115] gretap0: entered promiscuous mode [ 366.538972][T14115] gretap0: left promiscuous mode [ 366.559587][T14107] pim6reg: left allmulticast mode [ 366.874435][T14128] lo speed is unknown, defaulting to 1000 [ 366.885657][T14128] lo speed is unknown, defaulting to 1000 [ 367.024067][T14133] IPv6: Can't replace route, no match found [ 367.262006][T14136] __nla_validate_parse: 101 callbacks suppressed [ 367.262029][T14136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2186'. [ 367.319857][T14136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2186'. [ 367.630843][T14153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2190'. [ 367.986373][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 368.165315][T14160] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2192'. [ 368.322188][T14165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 369.164874][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2200'. [ 369.281983][ T6388] net_ratelimit: 23 callbacks suppressed [ 369.282007][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 369.337465][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 369.429751][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 369.543935][ T12] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 369.660107][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 369.730574][T14242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2209'. [ 369.775773][T14242] tipc: Resetting bearer [ 369.800466][T14242] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 369.807621][T14242] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 369.850820][ T6388] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.859340][ T6388] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.879936][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 369.916479][T14247] team0: Mode changed to "loadbalance" [ 369.922859][ T6388] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.940269][ T6388] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.963307][ T6388] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 369.977651][T14251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2212'. [ 369.986855][ T6388] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 369.987005][T14251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 370.030728][ T6388] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 370.048457][ T6388] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.071413][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 370.185993][T14257] validate_nla: 85 callbacks suppressed [ 370.186014][T14257] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 370.200644][ T3459] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 370.334897][T14257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.369430][T14258] vlan0: entered allmulticast mode [ 370.379428][T14258] veth1: entered allmulticast mode [ 370.390200][T14258] bond4: (slave vlan0): Opening slave failed [ 370.501001][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 370.573126][T14285] vlan0: entered promiscuous mode [ 370.578515][T14285] vlan0: entered allmulticast mode [ 370.617892][T14285] hsr_slave_1: entered allmulticast mode [ 370.676035][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 370.908393][T14305] netlink: 'syz.1.2226': attribute type 10 has an invalid length. [ 371.116210][T14305] dummy0: entered promiscuous mode [ 371.124136][T14305] dummy0: entered allmulticast mode [ 371.145973][T14305] team0: Port device dummy0 removed [ 371.161868][T14305] bridge0: port 1(dummy0) entered blocking state [ 371.176341][T14305] bridge0: port 1(dummy0) entered disabled state [ 371.320894][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 371.398904][T14323] netlink: 'syz.1.2232': attribute type 23 has an invalid length. [ 371.437961][T14325] netlink: 'syz.0.2234': attribute type 12 has an invalid length. [ 372.150944][T14336] raw_sendmsg: syz.4.2237 forgot to set AF_INET. Fix it! [ 372.257415][T14370] gtp0: entered promiscuous mode [ 372.655434][T14393] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 372.668159][T14396] __nla_validate_parse: 8 callbacks suppressed [ 372.668198][T14396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 372.678736][T14394] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 372.719847][T14396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 372.761765][ T49] bond0: (slave wlan1): link status definitely down, disabling slave [ 372.767100][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 372.782415][ T49] bond0: now running without any active interface! [ 372.788988][T14396] 8021q: VLANs not supported on ipvlan1 [ 372.814938][T14394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.002166][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'. [ 373.164946][T14412] syz.0.2259: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.187856][T14412] CPU: 1 UID: 0 PID: 14412 Comm: syz.0.2259 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 373.187886][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.187904][T14412] Call Trace: [ 373.187913][T14412] [ 373.187926][T14412] dump_stack_lvl+0x189/0x250 [ 373.187958][T14412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.187981][T14412] ? __pfx__printk+0x10/0x10 [ 373.188008][T14412] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.188033][T14412] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.188060][T14412] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.188088][T14412] warn_alloc+0x214/0x310 [ 373.188117][T14412] ? __pfx_warn_alloc+0x10/0x10 [ 373.188150][T14412] ? __get_vm_area_node+0x28f/0x300 [ 373.188185][T14412] ? nf_tables_newset+0x132b/0x2530 [ 373.188214][T14412] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 373.188263][T14412] ? nft_hash_estimate+0x102/0x260 [ 373.188299][T14412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.188325][T14412] ? rcu_is_watching+0x15/0xb0 [ 373.188364][T14412] ? nf_tables_newset+0x132b/0x2530 [ 373.188386][T14412] ? nf_tables_newset+0x132b/0x2530 [ 373.188414][T14412] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 373.188447][T14412] ? nf_tables_newset+0x132b/0x2530 [ 373.188471][T14412] ? nft_table_lookup+0x211/0x230 [ 373.188493][T14412] ? nft_set_lookup+0x128/0x150 [ 373.188518][T14412] ? nft_hash_privsize+0x7f/0xf0 [ 373.188553][T14412] nf_tables_newset+0x132b/0x2530 [ 373.188577][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2261'. [ 373.188592][T14412] ? __pfx_nf_tables_newset+0x10/0x10 [ 373.188635][T14412] ? __nla_parse+0x40/0x60 [ 373.188668][T14412] nfnetlink_rcv+0x112f/0x2520 [ 373.188744][T14412] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 373.188797][T14412] ? ref_tracker_free+0x63a/0x7d0 [ 373.188861][T14412] ? __netlink_deliver_tap+0x807/0x850 [ 373.188897][T14412] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.188958][T14412] netlink_unicast+0x82c/0x9e0 [ 373.189003][T14412] ? __pfx_netlink_unicast+0x10/0x10 [ 373.189038][T14412] ? netlink_sendmsg+0x642/0xb30 [ 373.189073][T14412] ? skb_put+0x11b/0x210 [ 373.189101][T14412] netlink_sendmsg+0x805/0xb30 [ 373.189150][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.189191][T14412] ? aa_sock_msg_perm+0x94/0x160 [ 373.189227][T14412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.189255][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.189293][T14412] __sock_sendmsg+0x219/0x270 [ 373.189331][T14412] ____sys_sendmsg+0x505/0x830 [ 373.189363][T14412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.189410][T14412] ? import_iovec+0x74/0xa0 [ 373.189451][T14412] ___sys_sendmsg+0x21f/0x2a0 [ 373.189480][T14412] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.189553][T14412] ? __fget_files+0x2a/0x420 [ 373.189574][T14412] ? __fget_files+0x3a0/0x420 [ 373.189613][T14412] __x64_sys_sendmsg+0x19b/0x260 [ 373.189643][T14412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.189684][T14412] ? rcu_is_watching+0x15/0xb0 [ 373.189728][T14412] ? do_syscall_64+0xbe/0x3b0 [ 373.189778][T14412] do_syscall_64+0xfa/0x3b0 [ 373.189814][T14412] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.189848][T14412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.189872][T14412] ? clear_bhb_loop+0x60/0xb0 [ 373.189903][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.189928][T14412] RIP: 0033:0x7fb6be78eb69 [ 373.189949][T14412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.189972][T14412] RSP: 002b:00007fb6bf597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.189999][T14412] RAX: ffffffffffffffda RBX: 00007fb6be9b5fa0 RCX: 00007fb6be78eb69 [ 373.190017][T14412] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 373.190032][T14412] RBP: 00007fb6be811df1 R08: 0000000000000000 R09: 0000000000000000 [ 373.190048][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.190063][T14412] R13: 0000000000000000 R14: 00007fb6be9b5fa0 R15: 00007fff69288528 [ 373.190102][T14412] [ 373.190565][T14412] Mem-Info: [ 373.238092][T14433] netlink: 'syz.1.2260': attribute type 7 has an invalid length. [ 373.240525][T14412] active_anon:7205 inactive_anon:0 isolated_anon:0 [ 373.240525][T14412] active_file:1854 inactive_file:39933 isolated_file:0 [ 373.240525][T14412] unevictable:768 dirty:318 writeback:0 [ 373.240525][T14412] slab_reclaimable:11997 slab_unreclaimable:149130 [ 373.240525][T14412] mapped:29404 shmem:1497 pagetables:944 [ 373.240525][T14412] sec_pagetables:0 bounce:0 [ 373.240525][T14412] kernel_misc_reclaimable:0 [ 373.240525][T14412] free:1265212 free_pcp:14386 free_cma:0 [ 373.657399][T14412] Node 0 active_anon:28820kB inactive_anon:0kB active_file:7416kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117616kB dirty:1272kB writeback:0kB shmem:4452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13004kB pagetables:3908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.692105][T14412] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.754231][T14412] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.803603][T14412] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 373.809582][T14412] Node 0 DMA32 free:1138708kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28520kB inactive_anon:0kB active_file:7416kB inactive_file:157684kB unevictable:1536kB writepending:1300kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:39088kB local_pcp:19868kB free_cma:0kB [ 373.918876][T14412] lowmem_reserve[]: 0 0 1 1 1 [ 373.939849][T14412] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 374.006199][T14412] lowmem_reserve[]: 0 0 0 0 0 [ 374.030376][T14412] Node 1 Normal free:3898536kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19268kB local_pcp:9156kB free_cma:0kB [ 374.071621][T14412] lowmem_reserve[]: 0 0 0 0 0 [ 374.076431][T14412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.115270][T14412] Node 0 DMA32: 846*4kB (M) 362*8kB (ME) 283*16kB (UM) 562*32kB (UME) 387*64kB (UME) 84*128kB (UME) 43*256kB (UME) 22*512kB (UM) 7*1024kB (UE) 10*2048kB (UME) 251*4096kB (UM) = 1142328kB [ 374.144997][T14412] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 374.159706][T14412] Node 1 Normal: 186*4kB (UE) 68*8kB (UME) 42*16kB (UME) 108*32kB (UME) 32*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898536kB [ 374.182005][T14412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.192856][T14412] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 374.205985][T14412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.223595][T14412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.238131][T14412] 43282 total pagecache pages [ 374.248921][T14412] 0 pages in swap cache [ 374.258275][T14412] Free swap = 124996kB [ 374.265102][T14412] Total swap = 124996kB [ 374.269438][T14412] 2097051 pages RAM [ 374.276949][T14412] 0 pages HighMem/MovableOnly [ 374.284391][T14412] 424872 pages reserved [ 374.288705][T14412] 0 pages cma reserved [ 374.319901][ T49] net_ratelimit: 22 callbacks suppressed [ 374.319925][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 374.384598][T14469] gre2: entered allmulticast mode [ 374.449989][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 374.580236][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 374.730136][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 374.860599][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 374.920759][T14485] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.2278'. [ 374.994163][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 375.052660][T14494] netlink: 'syz.4.2279': attribute type 2 has an invalid length. [ 375.061019][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2279'. [ 375.130416][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 375.218779][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 375.252186][T14506] lo speed is unknown, defaulting to 1000 [ 375.272273][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 375.296563][T14506] lo speed is unknown, defaulting to 1000 [ 375.315633][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2282'. [ 375.401299][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 375.543725][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 375.599444][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 375.671518][T14523] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 375.694040][T14523] team0: Device ipvlan2 is already an upper device of the team interface [ 375.748507][T14528] sctp: [Deprecated]: syz.4.2289 (pid 14528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.748507][T14528] Use struct sctp_sack_info instead [ 375.903438][T14531] netlink: 'syz.4.2291': attribute type 15 has an invalid length. [ 376.532813][T14511] netlink: 'syz.3.2283': attribute type 13 has an invalid length. [ 376.907181][T14555] netlink: 'syz.2.2297': attribute type 3 has an invalid length. [ 376.908212][T14560] smc: net device bond0 applied user defined pnetid SYZ2 [ 376.935015][T14555] sctp: [Deprecated]: syz.2.2297 (pid 14555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.935015][T14555] Use struct sctp_sack_info instead [ 378.130947][T13058] [ 378.133334][T13058] ============================================ [ 378.139496][T13058] WARNING: possible recursive locking detected [ 378.145679][T13058] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 378.152630][T13058] -------------------------------------------- [ 378.158793][T13058] kworker/u8:19/13058 is trying to acquire lock: [ 378.165131][T13058] ffff88807a0f1218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 378.177374][T13058] [ 378.177374][T13058] but task is already holding lock: [ 378.184759][T13058] ffff8880283ad258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 378.197021][T13058] [ 378.197021][T13058] other info that might help us debug this: [ 378.205097][T13058] Possible unsafe locking scenario: [ 378.205097][T13058] [ 378.212565][T13058] CPU0 [ 378.215863][T13058] ---- [ 378.219160][T13058] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 378.226306][T13058] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 378.233458][T13058] [ 378.233458][T13058] *** DEADLOCK *** [ 378.233458][T13058] [ 378.241619][T13058] May be due to missing lock nesting notation [ 378.241619][T13058] [ 378.249953][T13058] 9 locks held by kworker/u8:19/13058: [ 378.255427][T13058] #0: ffff88807d5fb148 ((wq_completion)bond3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 378.266574][T13058] #1: ffffc90003447bc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 378.279512][T13058] #2: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 378.289144][T13058] #3: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 378.299121][T13058] #4: ffff8880283ad258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 378.311798][T13058] #5: ffff888031eea958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 378.322145][T13058] #6: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 378.331949][T13058] #7: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 378.340794][T13058] #8: ffffffff8e13c540 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 378.350767][T13058] [ 378.350767][T13058] stack backtrace: [ 378.356677][T13058] CPU: 1 UID: 0 PID: 13058 Comm: kworker/u8:19 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 378.356706][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.356721][T13058] Workqueue: bond3 bond_alb_monitor [ 378.356755][T13058] Call Trace: [ 378.356763][T13058] [ 378.356772][T13058] dump_stack_lvl+0x189/0x250 [ 378.356798][T13058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.356820][T13058] ? __pfx__printk+0x10/0x10 [ 378.356849][T13058] ? print_lock_name+0xde/0x100 [ 378.356877][T13058] print_deadlock_bug+0x28b/0x2a0 [ 378.356905][T13058] validate_chain+0x1a3f/0x2140 [ 378.356929][T13058] ? unwind_next_frame+0xa5/0x2390 [ 378.356951][T13058] ? ret_from_fork_asm+0x1a/0x30 [ 378.356976][T13058] ? look_up_lock_class+0x74/0x170 [ 378.357008][T13058] ? register_lock_class+0x51/0x320 [ 378.357036][T13058] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 378.357064][T13058] __lock_acquire+0xab9/0xd20 [ 378.357098][T13058] ? __dev_queue_xmit+0x22b7/0x3b50 [ 378.357121][T13058] lock_acquire+0x120/0x360 [ 378.357150][T13058] ? __dev_queue_xmit+0x22b7/0x3b50 [ 378.357176][T13058] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 378.357202][T13058] _raw_spin_lock+0x2e/0x40 [ 378.357229][T13058] ? __dev_queue_xmit+0x22b7/0x3b50 [ 378.357252][T13058] __dev_queue_xmit+0x22b7/0x3b50 [ 378.357276][T13058] ? arp_send_dst+0xa7/0x2d0 [ 378.357300][T13058] ? arp_solicit+0xc1d/0xe60 [ 378.357324][T13058] ? __neigh_event_send+0xf70/0x1560 [ 378.357358][T13058] ? __dev_queue_xmit+0x27b/0x3b50 [ 378.357391][T13058] ? __pfx___dev_queue_xmit+0x10/0x10 [ 378.357426][T13058] ? __lock_acquire+0xab9/0xd20 [ 378.357467][T13058] ? NF_HOOK+0x9e/0x3a0 [ 378.357493][T13058] NF_HOOK+0x30d/0x3a0 [ 378.357519][T13058] ? __pfx_arp_xmit_finish+0x10/0x10 [ 378.357544][T13058] ? NF_HOOK+0x9e/0x3a0 [ 378.357567][T13058] ? __pfx_NF_HOOK+0x10/0x10 [ 378.357592][T13058] ? arp_xmit+0x23/0x270 [ 378.357624][T13058] arp_xmit+0x16c/0x270 [ 378.357647][T13058] ? arp_xmit+0x23/0x270 [ 378.357671][T13058] arp_solicit+0xc1d/0xe60 [ 378.357700][T13058] ? arp_solicit+0x11a/0xe60 [ 378.357728][T13058] ? __pfx_arp_solicit+0x10/0x10 [ 378.357759][T13058] ? __neigh_event_send+0xf08/0x1560 [ 378.357791][T13058] ? __pfx_arp_solicit+0x10/0x10 [ 378.357816][T13058] __neigh_event_send+0xf70/0x1560 [ 378.357854][T13058] neigh_resolve_output+0x198/0x750 [ 378.357887][T13058] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 378.357919][T13058] ? __lock_acquire+0xab9/0xd20 [ 378.357952][T13058] ip_finish_output2+0xd3d/0x1160 [ 378.357982][T13058] ? ip_finish_output2+0x452/0x1160 [ 378.358009][T13058] ? __pfx_ip_finish_output2+0x10/0x10 [ 378.358036][T13058] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 378.358058][T13058] ? ip_skb_dst_mtu+0x866/0xab0 [ 378.358084][T13058] ? ip_finish_output+0x33a/0x3f0 [ 378.358108][T13058] iptunnel_xmit+0x592/0xa40 [ 378.358147][T13058] ip_tunnel_xmit+0x1c41/0x2390 [ 378.358189][T13058] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 378.358213][T13058] ? gre_build_header+0x3fd/0xa40 [ 378.358240][T13058] ? __pfx_gre_build_header+0x10/0x10 [ 378.358270][T13058] gre_tap_xmit+0x590/0x7a0 [ 378.358295][T13058] ? __pfx_gre_tap_xmit+0x10/0x10 [ 378.358315][T13058] ? __lock_acquire+0xab9/0xd20 [ 378.358349][T13058] dev_hard_start_xmit+0x2d4/0x830 [ 378.358383][T13058] sch_direct_xmit+0x241/0x4b0 [ 378.358414][T13058] ? __pfx_sch_direct_xmit+0x10/0x10 [ 378.358449][T13058] __dev_queue_xmit+0x1857/0x3b50 [ 378.358480][T13058] ? __dev_queue_xmit+0x27b/0x3b50 [ 378.358510][T13058] ? kmalloc_reserve+0xbd/0x290 [ 378.358550][T13058] ? __pfx___dev_queue_xmit+0x10/0x10 [ 378.358576][T13058] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 378.358605][T13058] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 378.358642][T13058] ? __build_skb_around+0x257/0x3e0 [ 378.358685][T13058] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 378.358719][T13058] ? alb_send_lp_vid+0x139/0x510 [ 378.358753][T13058] alb_send_lp_vid+0x324/0x510 [ 378.358783][T13058] ? rcu_is_watching+0x15/0xb0 [ 378.358819][T13058] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 378.358854][T13058] ? __lock_acquire+0xab9/0xd20 [ 378.358888][T13058] alb_send_learning_packets+0x10d/0x2c0 [ 378.358927][T13058] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 378.358965][T13058] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 378.359001][T13058] bond_alb_monitor+0x3e4/0x1800 [ 378.359035][T13058] ? bond_alb_monitor+0xf1/0x1800 [ 378.359063][T13058] ? process_scheduled_works+0x9ef/0x17b0 [ 378.359095][T13058] ? __pfx_bond_alb_monitor+0x10/0x10 [ 378.359126][T13058] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.359153][T13058] ? process_scheduled_works+0x9ef/0x17b0 [ 378.359184][T13058] ? process_scheduled_works+0x9ef/0x17b0 [ 378.359222][T13058] process_scheduled_works+0xae1/0x17b0 [ 378.359271][T13058] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.359313][T13058] worker_thread+0x8a0/0xda0 [ 378.359348][T13058] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 378.359381][T13058] ? __kthread_parkme+0x7b/0x200 [ 378.359407][T13058] kthread+0x70e/0x8a0 [ 378.359432][T13058] ? __pfx_worker_thread+0x10/0x10 [ 378.359464][T13058] ? __pfx_kthread+0x10/0x10 [ 378.359489][T13058] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.359516][T13058] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.359544][T13058] ? __pfx_kthread+0x10/0x10 [ 378.359569][T13058] ret_from_fork+0x3fc/0x770 [ 378.359604][T13058] ? __pfx_ret_from_fork+0x10/0x10 [ 378.359636][T13058] ? __switch_to_asm+0x39/0x70 [ 378.359659][T13058] ? __switch_to_asm+0x33/0x70 [ 378.359682][T13058] ? __pfx_kthread+0x10/0x10 [ 378.359706][T13058] ret_from_fork_asm+0x1a/0x30 [ 378.359738][T13058] [ 378.998472][T14560] smc: removing net device bond0 with user defined pnetid SYZ2 [ 379.009578][T14560] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 379.022047][T14560] bond0 (unregistering): Released all slaves [ 379.410936][T13058] net_ratelimit: 14 callbacks suppressed [ 379.410959][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 379.529978][T13057] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 379.639874][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 379.749833][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 379.859779][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 379.969933][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 380.079762][T13058] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 380.199810][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 380.309957][T13057] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 380.419820][T13057] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 384.429901][T13054] net_ratelimit: 35 callbacks suppressed [ 384.429934][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 384.549984][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 384.669974][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 384.779860][ T49] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 384.889859][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 385.000091][T13057] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 385.119904][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 385.240417][T13054] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 385.350447][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex [ 385.460320][ T6388] bond6: (slave ip6gretap2): failed to get link speed/duplex