last executing test programs: 4.042101422s ago: executing program 0 (id=7773): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xff7f, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0xca, 0x21}, 0x70bd28, 0x0, 0x2}, 0x0, 0x1}}, 0xf8}}, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.879360921s ago: executing program 0 (id=7777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1da9caef}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x4000896) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0x36, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0xe0, 0x0, 0x218, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}}, 0x0, 0x98, 0xe0, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 'geneve1\x00', {0x6}}}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x2, 0xd61}}, @common=@set={{0x40}, {{0x0, [0x4, 0x4, 0x4, 0x4, 0x2, 0x3], 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x1, 0x3, 0x7, 0x5, 0x4], 0x3}, {0x3, [0x7, 0x3, 0x6, 0x2, 0x4, 0x2], 0x2, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xffffff00, 'batadv_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x89, 0x1, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2, 0x0, 0x2], 0x0, 0x7}, {0xfff4, [0x1, 0x5, 0x0, 0x7, 0x0, 0x1], 0x42}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000740)={0x8, {{0x2, 0x4e21, @remote}}, 0x0, 0x2, [{{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}]}, 0x190) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x8931, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) write$tun(r7, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0xfca) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=ANY=[@ANYRESHEX=r6], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x44) 3.352039786s ago: executing program 0 (id=7783): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000058001a00060000000200000004"], 0x78}}, 0x0) 3.226136755s ago: executing program 3 (id=7788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_adv_param={{0x2006, 0xf}, {0x7, 0x101, 0xee, 0x5, 0x0, @any, 0x5, 0x5}}}, 0x13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.131394028s ago: executing program 0 (id=7789): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) r1 = socket(0x11, 0x2, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x9c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xafde7671b70c406d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x9c}}, 0x0) (async, rerun: 64) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x564, 0x208, 0x8, 0x3, 0x4, 0xe, 0x37749a32, r4}}], 0x30, 0x2400e044}, 0x24004040) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r4, 0x7}, 0x8) setsockopt(r1, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) unshare(0x100000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (rerun: 32) 3.036788356s ago: executing program 3 (id=7792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4013}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002040)={&(0x7f0000000d40)={0x12e4, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x1078, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe, 0x3, "6bf66f24ac8686ff4185"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6f4b509e8dc7a702f64b4756b382d56318457eeb3cde17b9cb004bd525"}}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7ac2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @remote, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9e0e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4bbc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x62ec235b}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x70000}]}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x40890}, 0x80) recvmsg(r2, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d510c8c95024873}, 0x12000) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r10, 0x1) ioctl$SIOCGSTAMP(r10, 0x8906, &(0x7f0000000000)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x9}, 0x8) connect$bt_l2cap(r10, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', r12, 0x8, 0x7, 0x6, 0x9, {{0x34, 0x4, 0x3, 0x27, 0xd0, 0x64, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x16, 0x0, [{0x7, 0x9, "496c2cad5af195"}, {0x0, 0x7, "5471ec9cef"}]}, @cipso={0x86, 0x27, 0x3, [{0x7, 0x7, "86f6eaa8c6"}, {0x6, 0x3, "15"}, {0x5, 0xd, "8d5f597a4c717ad1e27ce3"}, {0x1, 0xa, "631c2c882e11c28b"}]}, @timestamp={0x44, 0x24, 0x97, 0x0, 0x4, [0x5634, 0x2, 0xfffff801, 0xffff5904, 0x7422, 0x4, 0x8db, 0x8]}, @rr={0x7, 0x3, 0xc8}, @generic={0x7b0eb0ca39325e36, 0xf, "60f22fd9badbe721620a1a0de4"}, @timestamp={0x44, 0x14, 0xa4, 0x0, 0x9, [0x4, 0x6, 0x9, 0x3]}, @timestamp_prespec={0x44, 0x34, 0x2a, 0x3, 0x9, [{@multicast1, 0x7}, {@loopback, 0x4}, {@local, 0x6b}, {@multicast1, 0xc2c1}, {@broadcast, 0x1}, {@empty, 0x7}]}, @end]}}}}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) 2.893024377s ago: executing program 3 (id=7793): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xf4}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x20, 0x400, 0x4, {{0x1d, 0x4, 0x2, 0x10, 0x74, 0x64, 0x0, 0x6, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp={0x44, 0x18, 0x4a, 0x0, 0xb, [0xa, 0x600, 0x100, 0xfc, 0x3]}, @lsrr={0x83, 0x17, 0x80, [@rand_addr=0x64010100, @loopback, @multicast2, @empty, @local]}, @lsrr={0x83, 0xb, 0xd9, [@empty, @local]}, @generic={0x86, 0xc, "edf0e712f566d9d8f656"}, @cipso={0x86, 0x19, 0x1, [{0x7, 0x2}, {0x7, 0x11, "bb3f556447d03bbaffdacc966327b4"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000005200100025bd7000000000001c08000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="080006000400000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0xc804) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x5a, 0x113, 0x0, 0x0, {}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 2.781955132s ago: executing program 3 (id=7795): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r0, &(0x7f0000000240)=""/212, 0xd4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0x28, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000014) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 2.679309607s ago: executing program 2 (id=7797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 2.582062421s ago: executing program 2 (id=7799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x47, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x51fc, 0xb, 0x5}}}}]}, 0x40}}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) 2.463236313s ago: executing program 2 (id=7801): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af07c3650596", 0x35}], 0x1}, 0x4805) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40000) 2.448730407s ago: executing program 2 (id=7802): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="22eb36", 0x3}], 0x1) pwritev(r0, &(0x7f0000001e40)=[{&(0x7f0000000040)="daf829de90f1793b601a1fac34b2bf49361e9e50ef36bc", 0x17}, {0x0}], 0x2, 0x8, 0x10001) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0x40106183, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000066c07a2cbfb7eb010000000000005b82c4a398e243fc050000000fecaaeca4215af714584a32fa1332a10c997075c8948654ce"], 0x14}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11, 0xffffffffffffffff, 0xefc9d000) sendmsg$inet_sctp(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x8c4) 2.392486012s ago: executing program 1 (id=7803): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c00028005000100000000000800071f000000001c000f80080001400000000008000340000000100800024000000000"], 0x88}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600008100000000000000000000000000000ffff00000000fc0200"/102], 0x0) 2.299473513s ago: executing program 1 (id=7804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x28, 0x7}, 0x9, 0x9, 0x1, 0x7f, 0xd, 'syz1\x00', "6ecf9c9aaddd506228feca205ecc962aa12474f0f7b3253fdca1badf82c403c0", "045b8488ce9dca338fe33ae3c4aacdc6472390cd0ef665613adbd250dfbdc17e", [{0x187, 0xffff, {0x3, 0xfffffffe}}, {0x2, 0x3000, {0x2, 0x5}}, {0x81, 0x6, {0x2, 0x10001}}, {0x81, 0x2, {0x3, 0x3}}, {0xb, 0x9, {0x1, 0xcab}}, {0x9, 0x0, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x9}}, {0xfffe, 0xdff, {0x2, 0x7}}, {0x8, 0x3, {0x3, 0x4a5f76b2}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x5, 0x1, {0x1, 0x9}}, {0x2, 0xc, {0x2, 0x1}}, {0x8, 0x5, {0x0, 0xffffff0f}}, {0x1, 0x9, {0x1, 0x9}}, {0x401, 0x7, {0x0, 0x2}}, {0x8, 0x7fff, {0x1, 0x7ff}}, {0x0, 0x6, {0x1, 0x20000}}, {0x5c5d, 0x10, {0x0, 0x5}}, {0x6, 0x8, {0x0, 0x80000001}}, {0x5bcf, 0x9, {0x0, 0x1}}, {0x2, 0x101, {0x3, 0x6}}, {0x7, 0x2, {0x1, 0x7}}, {0x2, 0x58ad, {0x2, 0x4}}, {0x3ba, 0x4, {0x2, 0x4000000}}, {0x800, 0x5, {0x0, 0x6}}, {0x5, 0x1, {0x0, 0x6}}, {0x8, 0xb, {0x3, 0x3}}, {0x211, 0x2, {0x3, 0x73b0000}}, {0x4, 0x0, {0x2, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x8, 0x4, {0x3, 0x4}}, {0x400, 0x80, {0x1, 0x8}}, {0x6, 0xb, {0x2, 0x40}}, {0x66, 0x0, {0x2}}, {0x5, 0x5, {0x1, 0xffffffff}}, {0x8, 0x3, {0x2, 0x2}}, {0xfc0b, 0xe, {0x1, 0x1f}}, {0x79eb, 0x671b, {0x1, 0x100}}, {0x7f42, 0x2, {0x0, 0x3}}, {0x0, 0x17, {0x2, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 2.214339953s ago: executing program 0 (id=7805): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="186b6e000214010029fd70001b2fdf25080001006448962f9c15a1a85f6887a5cf5871ab475461d1"], 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x34, r3, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x60}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x34}}, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000000680)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc={0x4, {@llc={0x80, 0x8e, "17", "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"}}}}}, &(0x7f00000016c0)={0x0, 0x3, [0x5a8, 0xb9, 0x107, 0xbc2]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="b700000000000400630afcff0000000018110000914d6d7fa730159aaef9b7f150e3b77f07090b18d77526d5da0a00bdf4f4013d55ba5f86a7c1fb703cbd05078008d56f26972edcee3ee22eccd487c48a477154ca7a1928153d79ebee6d5e09e983eb87b622e708228b9ce4a640a52e02caa0cca2c9dc3a37d53a9ce08a66a9833bd634386de420", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x50}}, 0x0) 2.197557349s ago: executing program 1 (id=7806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x858) 2.059260245s ago: executing program 1 (id=7807): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a3100000000c8010000140a0500000000000000000005000008080003400000000308000340000000090900010073797a30000000000900020073797a3000000000a3000800d4e88f67e3d12dfdd1edc4bd17363bc084a94c9ff758bbcac58de4a6c33a21680a48365ca14f5b6727748642f688d8ba3c81fc6a1a2a3b0522ddc826588f0f31d1d2a6b1d03a368794af132d4c351e4dcbb1d7e4a5cff9c67b7e4ed7c9ab030ea73f7f5cb4a06a34a59e786279a8883043a4a48b3977f85e00c77345c3832b32fab4206f260c45cc0f4c6b2268ad7300b857900a88d33a76cfab8749eae99a00e80008007b303d7865714ea6fd56010a624be32e60c171c9ab39b282ea88059fdd9c08fa814908d76869ac3c30e714052c1ca678d90c98166c9d6b0096f8396f3e9dfc9aa9cd999284efa0157dd0e43825c968c43dbe4f0ba496533938dd81be6d39b0fb420f7833fdef3185cec19534dea1c20186719876e67b4f52529d88cf5d43eb8dcb28a4ef558f21cf05ecb661f9b1014e9e42cd70761f40bdcc72e04283f799655a3ef9ec123f270e3134fe3f968d2845809b86efbcf12d8f696cc5e1b5b87e4a3ad0b015aadd9f4b645c2351ec322df5d3a2acbdd28640feca6e1fec58bf84534258d8000000050a0101000000000000000007000006592a51b63b3a4602c5354197a9a22c6cfeda5f2788e71329a39b8a068aed9e9230893110fb39963fa6c39ad6e13f09252b00786fb253ef7e08db4f2105d9fe0f2576640a2962bc1cf27bb8ecb994ca70ebd6a7b54c5cd967940000000900030073797a3000000000400008800c0001407fffffffffffffff0c00014000000000000000800c00024000000000000004010c00014000000000000000020c00014000000000000000090900010073797a300000000008000b4000000001080007006e61740058000000050a01010000000000000000000000080c0002400000000000000003280008800c00014000000000000000070c00014000000000000000000c000240000000000000000608000a400000000608000b400000000320010000140a0108000000000000000005000009df0008008bb0c0e5806cd8700d829fa7e49bb493d841287fed66461a61ccd6b587720e3705c3624a27028d515dfb2c8f2279fbc3d4ea9b8d2842ab82252fbc9a33ea9057684a6473027fb40b3ba3e6f50c1678e2c4b48ee4913426ee8e37dbfe08464fbc0028a14076e138b886d40ceeb122af72da5f52d887bea98b8913f5476e1b8afcc70d354e06988f536b5e187472a3ea57224f9ac4e67cca229f38bb409cf3053e6fdb955d2e2dfe33312fbd1bee75b5646aeb9487a990827e970a3afb2f687be5c7dbc86fc6fc277a06d9bd73566c3adc62b9f0b325dd3c1dad6ad1000900020073797a3200000000140008009d029fc40210c311f5d2fb55b0fcf83f0c00064000000000000000029c000000030a03000000000000000000030000090900030073797a31000000007c0008800c00014000000000000080000c00024000000000000000030c00024000000000800000000c00014000000000000000050c00014000000000000000080c00014000000000000000010c000140000000000000000f0c00014000000000000000010c00014000000000000000040c00024000000000000003411c020000090a0306000000000000000000000008cc001280500001800700010072740000440002800800024000000000080001400000000c080001400000000908000240000000000800024000000004080001400000001408000240000000000800024000000003100001800b00010064796e73657400001c0001800b00010064796e73657400000c0002800800094000000002240001800a000100726564697200000014000280080003400000004808000340000000781c0001800b000100736f636b657400000c000280080002400000000c0c000180080001006677640008000a40000000001c0012800c000180080001006e6174000c00018008000100666962000900020073797a3200000000f2000d4006c877826a2e0399f21430b974f73abb52998b91100fc932aa98f0807f4029061dca0ea7399350997391d5f6303c7659e5747378df8b110a090f6abdc99255954a2ce1c93ec57cf754bb86a37ff2d6b82131e3d7ed6a355d86a9d9daf3ff755c898d6e831a0a4fac2e704294e275501827c948cd82bf09e116b78bc5bbfc17fc8501b46bc64138cf39fe65b1b434e6b8448fa74db4b3a0ac31f6f97f51e16b31b391659e8fbc9664f9cbca974debfe38f74b8d8fd7daaa3baf1f07ae5ce3408067974833ed4ac95b08da50e44acf45cce52fcda5a8a93dcee5c4f8724438fd67e22283c27813cfde49dc55664bed000008000f4000000009080007400000003e0800084000000000140000001100010000000000000000000100000a0000"], 0x724}, 0x1, 0x0, 0x0, 0x4020}, 0x24000840) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 2.058602081s ago: executing program 0 (id=7808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'nq\x00', 0x1, 0x10000004, 0x8}, 0x2c) (async) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r4, &(0x7f00000000c0)='-$$^\x00', 0x800c0, &(0x7f0000000100)={@_ha_fsid={[0xdda00000, 0x3]}, {0xc0, 0x1, 0x8000, 0x8000000000000001}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x1}) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f5, 0x4, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000890}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = accept4$x25(r5, &(0x7f00000002c0), &(0x7f0000000300)=0x12, 0xc0800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f00000005c0)) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000b80)={'team_slave_0\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x8, 0x40, 0x9, 0x38b9, 0xb3, 0x0, 0x3, 0xf, 0xfffffffd, 0xf7d, 0x4, 0x1, 0x400, 0x1d0, 0x53, 0x3, 0xc3c7, 0x7fffffff, 0x7, 0x1, 0x8, 0x4, 0xf95, 0x37c, 0x4, 0xb8, 0x0, 0x100000, 0x81, 0x1, 0xe, 0x4, 0x1, 0x5, 0x8841, 0x4, 0x6, 0x8, 0x56, 0x879, 0xb, 0x101, 0x5, 0x100, 0xa5cd, 0x3, 0x1, 0x4, 0x5, 0x0, 0x5, 0x7f, 0x7, 0x8, 0x52e70e3b, 0x7, 0x4, 0x0, 0x6dd, 0x4, 0x2, 0xa, 0x5, 0xffffff00, 0x7fffffff, 0xffffffff, 0xc, 0x6, 0xbf2, 0x40, 0x5, 0x5, 0xfffffffa, 0x70a7, 0xba000000, 0x10000, 0x9, 0x6, 0x7fff, 0x3, 0xb9, 0x6, 0x1, 0xd0f0, 0x2, 0xb8, 0x6, 0x764e, 0x2, 0xfffffffc, 0x1, 0x9, 0x8, 0x7, 0x1000, 0x7, 0x2, 0x7fff, 0x6, 0x9, 0xfffffffc, 0x6, 0x3, 0x9, 0x4, 0x2, 0xd1f, 0xff76, 0x4, 0xfffff000, 0x8, 0xffff, 0x5, 0x7, 0x6, 0x6, 0x7f, 0x2, 0x80, 0x6, 0x7, 0xffff, 0x5, 0x9, 0x3, 0x614, 0x1000], "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"}}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={0x0, @rc={0x1f, @none, 0x8}, @xdp={0x2c, 0x2, r7, 0x29}, @vsock={0x28, 0x0, 0x0, @my=0x0}, 0x0, 0x0, 0x0, 0x0, 0xffe0, 0x0, 0xd, 0x9, 0x800}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r9, 0x400454cd, 0x306) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) (async) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @local}, {0x1}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 'syzkaller0\x00'}) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000340)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}, 0x20000800) 1.82358358s ago: executing program 1 (id=7809): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x1e0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1cc, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x39, 0x1, "bf763a692a2cf2f9524f518ce6c5ea0bbc7388d01a29c637e22f75172a99092a344de481210a9d3e1076bc6be6e2a8486c36fda088"}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "2951ed5703d252e209209c01c6e1fe08118b37f10b82f85d8ae95fbc476f"}}, {0x160, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x15c, 0x2, "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"}}]}]}, 0x1e0}}, 0x8080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a010100000000000000000000000000640101000000002f0000eb09000000003c000000000000000a00"], 0xbc}}, 0x0) 1.783613116s ago: executing program 2 (id=7810): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x154, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0xfff0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x128, 0x2, [@TCA_BPF_ACT={0x124, 0x1, [@m_bpf={0xa8, 0x11, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x599, 0x20000000, 0x93e9, 0x1}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xbd, 0x1, 0x9}]}]}, {0x4d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x78, 0x13, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x22, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a677"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) (async, rerun: 64) r0 = socket(0x26, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x148}}, 0x200080d4) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0xb8, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x76e, 0x22}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xb8}}, 0x2004804) (async, rerun: 32) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="d79afa1f4c40"}, 0x10) (rerun: 32) 1.715176877s ago: executing program 3 (id=7811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00fc678e3cb01738f6231000", @ANYRES16=r1, @ANYBLOB="020028bd7000fedbdf25030000000500020009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.689924016s ago: executing program 2 (id=7812): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) 1.684100376s ago: executing program 1 (id=7813): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x4, 0x0, 0x60000, 0x0, 0xdea1}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) unshare(0x22020600) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x2f0, 0x16000065, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000080)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x202602, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@loopback, @multicast1, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_getnetconf={0x24, 0x52, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x89}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x9}}}}]}, 0x38}}, 0x0) 1.602948931s ago: executing program 3 (id=7814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xdc, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'X)\xbb-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!+@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x2e, 0x2, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x45}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x26e1, 0x0) close(r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000400", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e000215000040002d800a00000001010101010100000a00000002020202020200000a00000002020202020200000a00000002020202020200000b000000f23ecd4f4579780014002c8008000000010000000800000096ab0000"], 0x78}, 0x1, 0x0, 0x0, 0x6000081}, 0x40004) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r9, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) socket$inet6(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000100)={{r2}, "ce6269bb15a529574d3c54fcf6b635806dbdf88612951a30bf3e90176653b57c874ba6942d01d4c81b8cc5430a8a2bc0369faa508f582360b5be6cb0224d487e768b87cd4aef307084a601d1004e1b056c7ac4ef41b92a85017b94d94f3785697464468d2b1559afe805252b62253e5a665f61b6c6a23414d681554bf62254c3b6bea1e2b21fedbb8310077c55eafabfdfdc1eaad0674f5029794d468082e377fb67674277359da5a997828c4d0df83db55639bee7d2ab8a017233bdfe7812bb9b21429e1279a727e3005c400f875948866fc6dcbb04e5a7b6e43bcadc34d56692ba164b887f84b240b759cdc6c4d2c48eefee03eb67ac6d23de8c5dd1a7bd227d2da3fdad090d7241344a71d450c8910f0be9eae46d58351561afcf7a9733554f1018d44b6e56ab2c5610b6142df3366920f578940f0f328f89148e9d6c8c931b99a33fe2ddae04af732717687aa5dd737e707ee2e91f3f588b3a695a8705706cc824bb67ead855bf3509e81ac0376027eecceb12f2cbe53abc25e6c85d0ea6df143ba9d14d5ab958dffdbe0791c6d8091a3103dcd5a26855f00e009f893018c8c875af7e535b0104df2e99b4927f020762b9620a1ff7af7aadd6ea7049f2a36099acedf997ceab27f68b321d64535c0e198128df3684f4502a921329c276454d315ea73034dc38e5ed6ad810e47db9d400be2a3ec221b65264096d87c3e0122555551ab759315bdc10e12c7956a9894d1916d876e861b86daccd50d9d65dca3632f23420602774d030f79d6cd02e02c5ee6fe937ce206a964e7e9164c448d8495cee4ad57784463cb6fb7c3e63061a3b4a36dbbb389753467f40f69f7502733fdd3986230b406d7bad8830209007722d654e3651821b9893504c6f3cd03dbeaccd82faece7bae67200ff2f71f41d45458a64cb01f5ae0f77c48f1f0c500f3c6391e87cf20c46260e56c10f4eba8f9d938db7b769a9d85d7d98b87ed139fcf3674defe47864cfe0b5a0d93810afa45903c25072902eaca52c7d4281557227091aaffc3448cdf1070557a6e7fe238255226bdb2e0f808405b23233eb5af35b79203b433660dc68cb4dd4f1567a800096695e143cec63e333cd0fcde0a58c1245ab8fb729521e1045b8caeddcd7321ee33afd0eae380507de580bfbd4d14237c1bddb3af869bc816022ef1c44563788d7c8375fd9b282e4a825c913cc24fb858348df48e4e4c8abd88891f015466707117e29c71ef47b4156ce2b7c02c753e5578346399aa4a72e47efa406619c2f06a7dfa1461709fb1a4a6f868f9d9bfe8738dee8c947a8b0f95d829edcf79ab12e83bad40fca66124c9eb249c01c96542afb66b7491fa242ff98928681d33f089a23e1343802d7434a0a9cda87a2961e55846d3f6c21c0eae70484293c4a121b4a31244cb3d809ea3647f8135845702f3c4a1e981b5a826b8189e4e1cce87ddaf663dbd99e4d55588be37923be619f6d246130154b0ed4ba0e0b2a5942eb45f8e8205e2db8975fd612606f4add179f4d786b1498a43fe2143eeccbc2e30bb84ffb0cc27c0679bb8a72d3c52c5da3083749ad2d1d511632e3ddc0b807f68d23cd85d39c5fb7becd4680188455e1caeba4313d44715de77e1bf01186c5c8e9d3f656aa46f3307169c512c4966d366b26e5085003cdec1b8e8d4256006b02ce00a219c38314c4857f400440dcc3957b6d9c246e60f45a32d5a780c84c3b79e0ac9ec75861b4ed9ba2bdda92e8dff6bda37dc746f1642e24e99229bc0a9c0af896b3639b0ed20a6d176ef95ec91449489a2258aec20cc9a6e54f11459eba23a700ffccd0d8d64f85035bc8fe229c5f9d227acd5eb0cbbe16b225384184525cce1144c627248088db3c815f3b896cda985d6c0203d05a62016451de17b81631dc3b21a39ad7efc7b3bf671af11fffae3eff14c81c4705b266552456bfa7b682d82409cdb20b425a3d791616abd086e79c1a35123163548909dcdd8c39e37232b8fc0a876c3a531f95ed86f9481c829a992c0bb8148680ec992eea2535b4b2b28ca2aebdd08762a69f9e73366720143726c9862662a3cbf9a84d2a188cd2cdd9dce274aea39728134eae17fd4ef3c83d413492f64a9e9b4f9242d104ca37ef4193eda924a6e8377c382003dc99429a39a5f61eec4184d819b31e11cc7cfda50be3f9c8a51282d1d630b931eec48e5fd6bafb2afb338722f6f1c702f35b85a36f9fa6bc9daf92e9cd965afc2fd51c0bf4f3ec67c8346690a248c62486e465c6b6edb4a89e265083336beb9a99d62b115ca20b786cc132f24a491f40f1fed2ebe72b18f578a4f6e65308bfe107cfe366182245486afdc857502ff88822400412722c940355715f1cebe8e0ef3efb83c089d10675769c05df9202aa2c72c50b008d53e928177b908cf9a724a0beeb611256bbc3ec5ceaeed879d9827c33ee6e16a25af44f59c2c15b8ac6efce439de2b398c58014b2f214f40f916a9e288414bbb211388a3c3c3ecf0cb85755959a386d5a6779f5f92773d5530bc6625add0445683a4810e27056485d99f32251a940922079801e360607dd04acd739f93aff08408259c2825de875bd98aea295db3b7c60121c6d038f13c00eb62984b93a7126048ba65002d70770feb9b7c0834ff8ae0e50100c5761331a2918bbfddf37904eb85ca2d848449782784da4e73f139b32890aa6e553296fb4fd062df7228c2240342a660b6f8e7d51338db058c3abaddfaad099970626ccc11d4f3abe06f712b59dc4f2a90f4d8ccd93516ac51d91c4b93e8c67b1445f8143f34ecb7b6066a2e4ea7ac4909f682c4816f3ef9927037556b2bc900781bd174a6567a47b08260f146c94cf0880ed46348afd1764e74506af55de1cf19fc3bc2a683aa37d8b4a4ceaf9fc1636c6818a1974f17efcca7af13c6c32c06e72853b4ff1abc30baf2477196f02ed2fc1cd2e1a2bb3c3d588ec033d4974154f0d21f837080069b36ccdca7c104ebc4013ebc790f82fba061dfcd4abccfbaa939187af21231ccb843c80f503920819b61fd932094ae24aaac16e976708b4879e0bd0678d743f509842c5b70bd12fc64495e6123d4b57035ccc3f97163321912f40d51f2099f9b1363c287263cc5f7838be57a9ff2d09ead49532086f58a83c5e6a4240d616b2925bc3f07dace55781e0553a45d54bb22fd34a44ccba062fc22f8e67c07d780f7b12da2c16e78247bfe578e1d902334556e2778be799e6720a45a486ccd83635298a29f34593023f06336c2f4fb6d18ddb6268ec5ca3a6bde87220b45a03f3f76eb1ea3990939661821a3133e0c515e17a07a991d70fdfef17a022d5c23eac9552ec599da8b64e82ff518b4bf004f05f55ff4da43a25e48943b66887c01b9bbf9214e322423ce5140b8c03e8d00dba163e1d2d7d13167d13264fbc26b737b6221c44e5c076d7ea617709fbf346242623e1e6747d42181dee9dcad3a8a620f474dbbc973d659ba2da71940647461dda51b9348634d780b4dc6bd099f171d318e906ca0c2680c1ccfa8185a301c5b824bb99d16e5f2306b68c3dd509c5ef42db78aa525f6c8400e56d3b32be0cb8f30a29673fbe870bc0b71cdec60c44a2f6526e045dda8a41845ed91b199331535f29a0fa471ceead84206af04b92ee7343049d083cc80bd1471e6a4e87db4dfd70f6e39096b5608f4350266803d7487e452db95c822db8a643a4aff7978d68094c3bc4fa3a32604cfe946a739e144875583f94dde14a9a8f3421fbbf0a37f2a1350d19bb5c8ed55eae6ea6827d123f37c1b87e22ee41a59782196b42e71dea41e2eb79f7a431e8fdc04bffb1842af32b4e248fd64eb33ffa5266da2eb1b59b389f4fae7af9b86be831964d6e031bb6686939a5d6f6b57c386a89cd938aa9ccfbbcb66293c838a38d897553988d550a8e39f87454dc97256af5367dd0d2bb1b033a9aded57691f783b822769d7b07dd2c52edbb60a46730ebd82030549d1db644cf003c42998fe2f9992d9a38855cd3076a12bbfcbe38999a93dba24a4686d7c3bef53470528094c6d876e099dcee9bca758072f56ac2cb47128a0f0ce1e4b04ab28b839cd40e14528cb5aef59c1e59404081654e232d77f44e3d9b9de0ce64fe47e61bf646cea63d35f1096ee0be91f5942c7bcaa6951f69f410f1c0b3b1f2054da23385cb7f18b47672300b65bddf28ed783d665141da9f4c424a503dd01bf81bae7a8f23f2ed64dfdbaa90963876b6d35ee2c35e1bfaa8ce46a2d971ebebc3228078c20474c992b67eb01d4fb16003b1ded2a67889af7a77ebed5d94819b2fb55cd95bc85ad93e88e3d347a47a623cf7af769a6cb4f7922692940ba3c34efa07a4a7f0e6d93fb19fb58b00ed8e8f895cb906074ec010a4c593af1fdb87218c2b26ac8d6a1d5c9f511f1877530c751a9f379f87d0bf0495ab46b21358e8a78fd59ee7b1b3f2ce8cfe2e69d5182687a79c208fe0765e4f99b066d1c888cd71b96ae07bad6a11dbfc14b82ee630ce41a703e4ee57be519fed5ba04090492dbb02eb77bd1180062562b91b79f498fc30383206ffb5b284265c592569c898cdc62c64b2727798b18dd834b6b5e96585467338b08b5cd9be822285da9ab4c888d9acc3ed1a3e52337aa91774c91fecb123ad7ca0a26604a90b4cac21c1983a39f343ee2bd576d861876fc5769c728788ace9544432280e08542ba4621285fd3fb3028ca62a6f53d89d2929730097265a2bb734ac7a9ea56312aa3a6d4816aab9894b40bf4dce40f14d9a1a182c3c75e6165a84a07a8824908851d6ceefea336e0fb0b47d0d1619c743bdb722e32e1b3515fa7d90fe8c18e3dda7ac2e8206f3ce6a57a7d96329705957e8c64b9e57255cd5dccc26dc3ae604ac6fd8b602756d0791009d385541d8521777643c3a1c7fe4f831825d6c27d44b4d37edc8285ad94946e2c3b5a3d3c3c7d6b211071a06e6f20d07aeca0096a510a6db16cf5496b7ca848d5a54a6d12a80fcb8138f487b735a7e6dd83fb8c0d4719c6eb908357cd0deb67050af256de61c5e81bedc2c26551a62e1bc2c9127b7b201d3b110c7da42a381c897cfd4561afc6c34064ef3a8bd73f687616e69888b4d816b6fcb4d7283121d4e38ac6f7e126ef6c828eb8a98c80bbd3b2a1366c657ef6cc5860775c1bd1016cbb75efc43e2fece1034aa16936596ab06602a187aca105a6a4f4b2d86f169301c9e2481e56558947d5d372f70958258c710aee1b1ea81fd1d7c766b7ade46e8000278b3475742a3fd8ef02e5581e32230383dbf2601dce7c3bd174f92052774ced06a0e201aa2d74c66569e408161f1e3035396193112608719e2d0a3d358ac77e72a776ba8810cba9345b68464f871877248ac6422c96e5858541f91a92f5d69e4955038c6f9d4558a32fdce790117e8764f65d8f20c78b7a728a4c5f31c47c7932ea42ad8458a358a67f92d5f8817b978232bae159d1ef20ea103bc319720ba747badbbbb05f798e038ea3923a6bf9aefda1374271dbaa2e9e983c5d2bb4eac66ff893e27de5e313b2379fd496afa6b10e9860a4b37297373472f13d3199938ad8a9a6b52683983dd50e353e11d2164c919c326487702cfeaa54ed92a1fce99875d7d21a3371c1735a8b2e061f5a16ca17c00d8d8df9379cc7edb62c49094d6ae4553d8ed44999fe5a0456bc71a21f15ecff62703f74a837be95c910febb899bd667d077389fb27d3b73af5ffa834789dc4645d6f54f0e47196ba238cf6f90fbfc78984b73a41"}) 466.831705ms ago: executing program 4 (id=7815): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) listen(r0, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x31, 0x200, 0x70bd26, 0x25dfdbfe, {0x17}, [@nested={0xa4, 0x7b, 0x0, 0x1, [@generic="92407bfeee079dcd994417f4a9d17946d83824c07116c9f7d53849700f82ef7980db748d7dc8b0f55336b10a5eeb99a2315727ab089671a4e5a4c704b5ceca204668eef30a332f0a3f5ae8f77e2be07add24112657b704fce956d01ba096e6217535922c74e5c36e4908188b5ff293ad57e38de75317565eb325922bebcf38bf1773357acbafd61c241a30f28b29eca83eb3f450", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xde}]}, @nested={0x101, 0x1, 0x0, 0x1, [@generic="8fff2530bfe4cf65b65b844cdee196b6dac3c32232b64095ae87b6c7570b077bd92652110a9725c7f5aa9ba5e77114614a59674001fa1948098aa09775406ac62ecea27036ab354b9770a779ec0dc06605126d8a3762fc6c97515014486e74680afd1aa82169904d47fb3fa145e0663a41", @typed={0xc, 0x134, 0x0, 0x0, @u64=0x6}, @generic="2c46933797ec8399ec68c7e6c946460311f8e35d313f9aee", @generic="b2aaf61f1d0435d293d756e9965bfc57ec7a385b7e05ea3fa45fcfc37dda53d577abe9ec45cf99b63fc7410e5363195b682f0c46aef6343462f62a7f4a6520fc1a0f4e70c8806cf52b2081634fcd3d5805487e3e545758749f3fa171c102736e153c6378488d9f57"]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4040}, 0x90) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x48, &(0x7f0000000080)={0xa, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r5, &(0x7f00000002c0)="96452a", &(0x7f0000001680)=""/227}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000811}, 0x2000) 393.271219ms ago: executing program 4 (id=7816): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000080)=0x9, 0x4) 270.996517ms ago: executing program 4 (id=7817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x34, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x34}}, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000000180)={0x126c, 0x30, 0x100, 0x70bd28, 0x25dfdbfc, {0x8}, [@generic="341631d0101d8c5cedc0be36404269fd855bc91eefd39e1643b8e0ef3094360974348f9a66975dd151137914277b0c2f68b2808ab582ce5d99d7c8621546d477df60c44ccefcd6c5421fea9fb6de43f12af7d4d0f6be68b89a658d64886ce97cba893feab439806077c726ddccb8663144f116e1d908d0d7b0c8022ee9ee6cd4f3ef40bfb8a0f007f2c8809ee90726657c65c877bed32a417ae1d416fa1ed40ecc79b629d8d96a899d12df74283d9d86b12f7b908732e80a3a4987ff898561c6a2ef580e4721b8eea23743a875d7e45b6129", @typed={0x5, 0x121, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="fdb809ec2b71802222e04738f7a139c552b947ec12eca2a3289628eedf4000a13cf758cb2fb6792f0cb52143a69194", @typed={0x5, 0x163, 0x0, 0x0, @str='\x00'}, @nested={0x8b, 0xb, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="bd452ed78a394cc14570a09c259113dbde8e4e08a41289139dddb28dd19dc0eb5fd3918783968ded6f55998f1397eaf3692cef09b525311468f1b88acf9d922b695c2369c9ad39832cab648e7680a095757e04e5bd4c491b0cc15df8cf9288418cf18d21a7db0b577252a1e1feb4e1c6d9c670b4750fb9d21860021740f7f787d443a9"]}, @generic="0c144d8724ae03edc418ca7e21aa00abf1", @generic="63287be72f0b45515bfbe385d4b5fd7e3c57da590b14a8351412b8a2046ec8c037570dadbf96db750962b93b2da43f0d977ab2cbce85703709332d1505ad11bf0ec0e3e7d167771aabfcf4629c05a88c3ea5ff09de6e564c2b840f0c28847951c961157e69d3952c4288f6df93f13feb82e219bebbbb81a0187c59f2337057e1d7e68987bb16bf63db4722c35e9c827c7276d1a5e82851b2f5c753dd619252764088e8e1fc22ead0"]}, 0x126c}, 0x1, 0x0, 0x0, 0x48800}, 0x4800) (async) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000000180)={0x126c, 0x30, 0x100, 0x70bd28, 0x25dfdbfc, {0x8}, [@generic="341631d0101d8c5cedc0be36404269fd855bc91eefd39e1643b8e0ef3094360974348f9a66975dd151137914277b0c2f68b2808ab582ce5d99d7c8621546d477df60c44ccefcd6c5421fea9fb6de43f12af7d4d0f6be68b89a658d64886ce97cba893feab439806077c726ddccb8663144f116e1d908d0d7b0c8022ee9ee6cd4f3ef40bfb8a0f007f2c8809ee90726657c65c877bed32a417ae1d416fa1ed40ecc79b629d8d96a899d12df74283d9d86b12f7b908732e80a3a4987ff898561c6a2ef580e4721b8eea23743a875d7e45b6129", @typed={0x5, 0x121, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="fdb809ec2b71802222e04738f7a139c552b947ec12eca2a3289628eedf4000a13cf758cb2fb6792f0cb52143a69194", @typed={0x5, 0x163, 0x0, 0x0, @str='\x00'}, @nested={0x8b, 0xb, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="bd452ed78a394cc14570a09c259113dbde8e4e08a41289139dddb28dd19dc0eb5fd3918783968ded6f55998f1397eaf3692cef09b525311468f1b88acf9d922b695c2369c9ad39832cab648e7680a095757e04e5bd4c491b0cc15df8cf9288418cf18d21a7db0b577252a1e1feb4e1c6d9c670b4750fb9d21860021740f7f787d443a9"]}, @generic="0c144d8724ae03edc418ca7e21aa00abf1", @generic="63287be72f0b45515bfbe385d4b5fd7e3c57da590b14a8351412b8a2046ec8c037570dadbf96db750962b93b2da43f0d977ab2cbce85703709332d1505ad11bf0ec0e3e7d167771aabfcf4629c05a88c3ea5ff09de6e564c2b840f0c28847951c961157e69d3952c4288f6df93f13feb82e219bebbbb81a0187c59f2337057e1d7e68987bb16bf63db4722c35e9c827c7276d1a5e82851b2f5c753dd619252764088e8e1fc22ead0"]}, 0x126c}, 0x1, 0x0, 0x0, 0x48800}, 0x4800) 223.571848ms ago: executing program 4 (id=7818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x4c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x28, 0x2, 0x0, 0x1, [@nested={0x22, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a57d9766"]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 136.440871ms ago: executing program 4 (id=7819): r0 = socket(0x10, 0x80000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_linger(r0, 0x1, 0x4b, 0x0, &(0x7f0000000240)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000300)=0x28) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000036000100fcff07000400000005000000087fd39554f6b700"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004015) (async) socket$unix(0x1, 0xb, 0x0) 0s ago: executing program 4 (id=7820): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="d40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000a000128009000100766c616e000000009000028006000100030000000c0002001a000000010000001c0004800c0001005fe7fd35ffffff7f0c00010004000000070000001c0004800c0001000100008057010000000000000000ffff06000000400003800c000100ffff0000070000000c0001000100000030636a5e0c00010001000000040200000c0001000100000009000000bdfd0100100000000000800014000300766c616e30"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): pported in mode balance-alb(6) [ 812.541017][T29408] bond5 (unregistering): Released all slaves [ 812.620341][T29414] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 812.622240][T29414] bond5 (unregistering): Released all slaves [ 812.670831][T29422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6110'. [ 812.761514][T29374] hsr0 speed is unknown, defaulting to 1000 [ 812.824694][T29432] netlink: 'syz.1.6112': attribute type 3 has an invalid length. [ 813.016260][ T8434] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.016300][ T8434] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.016329][ T8434] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.016359][ T8434] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 813.290818][T29462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 813.610930][T29374] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.614841][T29374] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.615001][T29374] bridge_slave_0: entered allmulticast mode [ 813.628432][T29374] bridge_slave_0: entered promiscuous mode [ 813.628829][T29486] sctp: [Deprecated]: syz.3.6123 (pid 29486) Use of int in max_burst socket option deprecated. [ 813.628829][T29486] Use struct sctp_assoc_value instead [ 813.629793][T29481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.638659][T29374] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.638759][T29374] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.638901][T29374] bridge_slave_1: entered allmulticast mode [ 813.643586][T29374] bridge_slave_1: entered promiscuous mode [ 813.763811][T29374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.779132][T29374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.832693][T29374] team0: Port device team_slave_0 added [ 813.835415][T29374] team0: Port device team_slave_1 added [ 813.855834][T29488] syzkaller0: entered promiscuous mode [ 813.855917][T29488] syzkaller0: entered allmulticast mode [ 813.889267][T29374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.889283][T29374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.889302][T29374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.895323][T29374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.895369][T29374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.895391][T29374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.046349][ T5621] Bluetooth: hci5: command tx timeout [ 814.143875][T29496] netlink: 'syz.4.6127': attribute type 2 has an invalid length. [ 814.158821][T29495] bond0: (slave veth0_to_bond): Releasing backup interface [ 814.186763][T29374] hsr_slave_0: entered promiscuous mode [ 814.187467][T29374] hsr_slave_1: entered promiscuous mode [ 814.187883][T29374] debugfs: 'hsr0' already exists in 'hsr' [ 814.187900][T29374] Cannot create hsr debugfs directory [ 814.348261][T29505] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6130'. [ 814.417081][T29512] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6130'. [ 814.511712][T29524] netlink: 'syz.3.6134': attribute type 1 has an invalid length. [ 814.590008][T29524] bond8: entered promiscuous mode [ 814.593866][T29524] 8021q: adding VLAN 0 to HW filter on device bond8 [ 814.707215][T29524] bond8: (slave bridge12): making interface the new active one [ 814.707239][T29524] bridge12: entered promiscuous mode [ 814.709312][T29524] bond8: (slave bridge12): Enslaving as an active interface with an up link [ 814.822372][T29374] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.822405][T29374] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 814.822427][T29374] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.875801][T29539] netlink: 'syz.2.6137': attribute type 1 has an invalid length. [ 814.969854][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6135'. [ 814.969880][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6135'. [ 814.969942][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6135'. [ 814.990680][T29374] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.990714][T29374] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 814.990738][T29374] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.155439][T29374] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.155473][T29374] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 815.155496][T29374] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.284122][T29374] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.284156][T29374] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 815.284179][T29374] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.590974][T29569] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 815.625717][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6145'. [ 815.653700][T29565] tipc: Started in network mode [ 815.653732][T29565] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 815.721504][T29374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 815.744669][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.745636][T29374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 815.768369][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.771280][T29374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 815.813395][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.819031][T29374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 815.841766][T29374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 816.014016][T29576] veth3: entered promiscuous mode [ 816.111746][T29374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.136631][ T5621] Bluetooth: hci5: command tx timeout [ 816.157261][T29374] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.173609][T23733] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.173701][T23733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.202650][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.202742][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.244543][T29600] xt_l2tp: invalid flags combination: 8 [ 816.263058][T29600] veth0: Caught tx_queue_len zero misconfig [ 816.351808][T29604] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 817.084161][T29640] __nla_validate_parse: 4 callbacks suppressed [ 817.084180][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6164'. [ 817.170487][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6164'. [ 817.192475][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6164'. [ 817.236932][T23732] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.237326][T23732] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.237368][T23732] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.237399][T23732] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.465259][T29374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.692861][T29661] netlink: 'syz.4.6170': attribute type 12 has an invalid length. [ 817.748161][T29374] veth0_vlan: entered promiscuous mode [ 817.784105][T29374] veth1_vlan: entered promiscuous mode [ 817.868096][T29374] veth0_macvtap: entered promiscuous mode [ 817.883398][T29374] veth1_macvtap: entered promiscuous mode [ 817.934631][T29374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.963336][T29374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.006308][ T1023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.006349][ T1023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.006380][ T1023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.006512][ T1023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.206168][ T5621] Bluetooth: hci5: command tx timeout [ 818.350830][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.350852][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.443361][T29697] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 818.450770][T29697] netlink: 'syz.3.6177': attribute type 1 has an invalid length. [ 818.524193][T29697] 8021q: adding VLAN 0 to HW filter on device bond9 [ 818.539806][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.539825][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.978510][T29720] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 819.066120][T29719] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.6182'. [ 819.066209][T29719] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.6182'. [ 819.296373][T21269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 819.309409][T21269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 819.316618][T21269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 819.337308][T21269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 819.342271][T21269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 819.407727][T29741] TCP: TCP_TX_DELAY enabled [ 819.623085][T29753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 819.623107][T29753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'. [ 819.623240][T29753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 819.623250][T29753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'. [ 819.657801][T17128] : (slave syz_tun): Releasing backup interface [ 819.907628][T29723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.009848][ T8434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.009883][ T8434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.079784][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.079869][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.079944][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.080139][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.080158][T29765] tap0: tun_chr_ioctl cmd 2148553947 [ 820.114562][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.114880][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.115383][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.115606][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137184][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137307][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137380][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137457][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137533][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137604][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137675][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137749][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137820][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137899][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.137971][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.138044][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.140850][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.140937][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.141011][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.141096][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.141168][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.141241][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144112][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144214][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144287][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144360][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144429][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.144500][T29764] tap0: tun_chr_ioctl cmd 1074025673 [ 820.296759][T21269] Bluetooth: hci5: command tx timeout [ 820.333810][T29775] netlink: 'syz.0.6196': attribute type 1 has an invalid length. [ 820.333830][T29775] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6196'. [ 820.335473][T29775] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 820.340335][ T8434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.340365][ T8434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.513737][T29785] netlink: 'syz.0.6199': attribute type 1 has an invalid length. [ 820.543325][ T8434] : (slave netdevsim1): Releasing backup interface [ 820.553722][ T8434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.553753][ T8434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.588540][T29780] syzkaller1: entered promiscuous mode [ 820.588560][T29780] syzkaller1: entered allmulticast mode [ 820.615156][T29788] netlink: 'syz.0.6199': attribute type 1 has an invalid length. [ 820.660327][ T8434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.660369][ T8434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.797416][T29733] hsr0 speed is unknown, defaulting to 1000 [ 820.974809][T29807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 821.054339][T29800] syzkaller0: entered promiscuous mode [ 821.054361][T29800] syzkaller0: entered allmulticast mode [ 821.107780][T29810] tunl0: Caught tx_queue_len zero misconfig [ 821.406825][T21269] Bluetooth: hci4: command tx timeout [ 821.493686][ T8434] pimreg: left allmulticast mode [ 821.775205][ T8434] xfrm0 (unregistering): left promiscuous mode [ 821.784015][ T8434] team0: Port device xfrm0 removed [ 821.985030][ T8434] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 821.985052][ T8434] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - 6e:57:e6:86:e0:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 821.985076][ T8434] bridge3 (unregistering): left promiscuous mode [ 821.985097][ T8434] bond4 (unregistering): (slave bridge4): making interface the new active one [ 821.985110][ T8434] bridge4 (unregistering): entered promiscuous mode [ 822.044044][ T8434] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 822.044070][ T8434] bridge4 (unregistering): left promiscuous mode [ 822.044089][ T8434] bond4 (unregistering): (slave bridge5): making interface the new active one [ 822.044103][ T8434] bridge5 (unregistering): entered promiscuous mode [ 822.072367][T21269] block nbd4: Receive control failed (result -32) [ 822.092549][ T8434] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 822.092574][ T8434] bridge5 (unregistering): left promiscuous mode [ 822.092593][ T8434] bond4 (unregistering): (slave bridge6): making interface the new active one [ 822.092606][ T8434] bridge6 (unregistering): entered promiscuous mode [ 822.131458][ T8434] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 822.131483][ T8434] bridge6 (unregistering): left promiscuous mode [ 822.204255][ T8434] bond8 (unregistering): (slave bridge12): Releasing backup interface [ 822.204282][ T8434] bridge12 (unregistering): left promiscuous mode [ 822.228927][ T8434]  (unregistering): Released all slaves [ 822.232970][ T8434] bond1 (unregistering): Released all slaves [ 822.253609][ T8434] bond2 (unregistering): Released all slaves [ 822.273096][ T8434] bond3 (unregistering): Released all slaves [ 822.288628][ T8434] bond4 (unregistering): Released all slaves [ 822.303157][ T8434] bond5 (unregistering): Released all slaves [ 822.317493][ T8434] bond6 (unregistering): Released all slaves [ 822.332333][ T8434] bond7 (unregistering): Released all slaves [ 822.359204][ T8434] bond0 (unregistering): Released all slaves [ 822.373007][ T8434] bond8 (unregistering): Released all slaves [ 822.390590][ T8434] bond9 (unregistering): Released all slaves [ 822.488934][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 822.571502][ T1023] IPVS: starting estimator thread 0... [ 822.641539][ T8434] tipc: Disabling bearer [ 822.642228][ T8434] tipc: Disabling bearer [ 822.652008][ T8434] tipc: Disabling bearer [ 822.666252][T29857] IPVS: using max 30 ests per chain, 72000 per kthread [ 822.673012][ T8434] tipc: Left network mode [ 822.712496][T29865] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 822.790582][T29864] netlink: 'syz.4.6217': attribute type 3 has an invalid length. [ 823.087382][T21269] Bluetooth: hci3: command tx timeout [ 823.203676][T29889] sock: sock_timestamping_bind_phc: sock not bind to device [ 823.346701][T29895] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 823.487198][T21269] Bluetooth: hci4: command tx timeout [ 824.032479][T29921] __nla_validate_parse: 5 callbacks suppressed [ 824.032496][T29921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6225'. [ 824.032524][T29921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6225'. [ 824.034591][T29921] netlink: 'syz.1.6225': attribute type 4 has an invalid length. [ 824.034608][T29921] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6225'. [ 824.039631][T29919] veth1_vlan: left promiscuous mode [ 824.249797][T29733] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.249896][T29733] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.250050][T29733] bridge_slave_0: entered allmulticast mode [ 824.251897][T29733] bridge_slave_0: entered promiscuous mode [ 824.268521][T29733] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.268622][T29733] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.268871][T29733] bridge_slave_1: entered allmulticast mode [ 824.275536][T29733] bridge_slave_1: entered promiscuous mode [ 824.277231][T29921] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 824.279629][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 824.492286][T29733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.540860][T29733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.775012][T29733] team0: Port device team_slave_0 added [ 824.792295][T29733] team0: Port device team_slave_1 added [ 824.944789][T29951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6234'. [ 824.958910][T29952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6234'. [ 825.050391][T29733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.050407][T29733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.050428][T29733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.057757][T29733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.057772][T29733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.057795][T29733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.273108][T29964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6236'. [ 825.286332][T29966] netlink: 'syz.1.6237': attribute type 1 has an invalid length. [ 825.289540][T29966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6237'. [ 825.317294][T29964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6236'. [ 825.531207][T29733] hsr_slave_0: entered promiscuous mode [ 825.538335][T29733] hsr_slave_1: entered promiscuous mode [ 825.562230][T29733] debugfs: 'hsr0' already exists in 'hsr' [ 825.562253][T29733] Cannot create hsr debugfs directory [ 825.566145][T21269] Bluetooth: hci4: command tx timeout [ 825.761617][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6242'. [ 825.960885][ T8434] hsr_slave_0: left promiscuous mode [ 825.961853][ T8434] hsr_slave_1: left promiscuous mode [ 825.962720][ T8434] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 825.962739][ T8434] batman_adv: batadv0: Removing interface: ipvlan2 [ 826.024237][ T8434] veth1_macvtap: left promiscuous mode [ 826.024273][ T8434] veth0_macvtap: left promiscuous mode [ 826.024353][ T8434] veth1_vlan: left promiscuous mode [ 826.024420][ T8434] veth0_vlan: left promiscuous mode [ 826.419937][T30019] SET target dimension over the limit! [ 826.611260][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 826.737871][T23732] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.737918][T23732] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.737952][T23732] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.737986][T23732] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.970046][T30035] netlink: 'syz.2.6254': attribute type 1 has an invalid length. [ 827.014360][T30031] vlan4: entered promiscuous mode [ 827.014381][T30031] hsr0: entered promiscuous mode [ 827.014629][T30031] vlan4: entered allmulticast mode [ 827.014643][T30031] hsr0: entered allmulticast mode [ 827.014655][T30031] hsr_slave_0: entered allmulticast mode [ 827.014668][T30031] hsr_slave_1: entered allmulticast mode [ 827.170077][T30035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 827.275371][T30053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6257'. [ 827.318689][T30042] bond5: (slave veth5): Enslaving as an active interface with a down link [ 827.359065][T30044] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 827.373184][T30044] bond5: (slave batadv1): making interface the new active one [ 827.379174][T30044] batadv1: entered promiscuous mode [ 827.391617][T30044] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 827.646895][T21269] Bluetooth: hci4: command tx timeout [ 828.025316][T30093] tipc: Resetting bearer [ 828.064981][T30093] team0: Port device xfrm0 removed [ 828.065581][T30093] tipc: Disabling bearer [ 828.790510][T29733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 828.851791][T29733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.881990][T29733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 828.899686][T29733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.900502][T29733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 828.955498][T29733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.957636][T29733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 828.981813][T29733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.054251][T30148] veth1_vlan: entered promiscuous mode [ 829.054328][T30148] macvlan0: entered promiscuous mode [ 829.442722][T29733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.444169][T30166] syzkaller1: entered promiscuous mode [ 829.444189][T30166] syzkaller1: entered allmulticast mode [ 829.473167][T30166] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20002 [ 829.507882][T29733] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.542193][T23732] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.542291][T23732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.552727][T30173] netlink: 'syz.2.6284': attribute type 15 has an invalid length. [ 829.574515][T30176] Bluetooth: MGMT ver 1.23 [ 829.651525][T23732] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.651585][T23732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.034239][T30200] __nla_validate_parse: 73 callbacks suppressed [ 830.034257][T30200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6291'. [ 830.148233][T30210] sctp: [Deprecated]: syz.0.6293 (pid 30210) Use of int in maxseg socket option. [ 830.148233][T30210] Use struct sctp_assoc_value instead [ 830.149555][T30210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6293'. [ 830.149785][T30210] veth0_to_bond: entered allmulticast mode [ 830.293489][T30212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6292'. [ 830.421104][T30221] netlink: 'syz.0.6295': attribute type 1 has an invalid length. [ 830.421125][T30221] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6295'. [ 830.460339][T30220] tipc: Enabled bearer , priority 0 [ 830.462071][T30220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.670258][T30220] syzkaller0: entered promiscuous mode [ 830.670282][T30220] syzkaller0: entered allmulticast mode [ 830.670766][T30220] tipc: Resetting bearer [ 830.731943][T30217] tipc: Resetting bearer [ 830.988330][T30251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6303'. [ 831.666858][ T5621] Bluetooth: hci5: command 0x0c3a tx timeout [ 831.666957][T21269] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 833.638845][T30217] tipc: Disabling bearer [ 833.748184][T30256] lo: entered allmulticast mode [ 833.748777][T30256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6305'. [ 833.755624][T30256] lo: left allmulticast mode [ 834.030092][T29733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.177591][T29733] veth0_vlan: entered promiscuous mode [ 834.223648][T29733] veth1_vlan: entered promiscuous mode [ 834.270167][T30284] netlink: 'syz.2.6313': attribute type 1 has an invalid length. [ 834.270189][T30284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6313'. [ 834.294207][T21269] Bluetooth: hci5: ACL packet too small [ 834.325094][T30280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6312'. [ 834.379530][T29733] veth0_macvtap: entered promiscuous mode [ 834.417191][T29733] veth1_macvtap: entered promiscuous mode [ 834.473325][T29733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.514850][T29733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.643726][T11992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.644153][T11992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.644184][T11992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.644211][T11992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.803318][ T8434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.803338][ T8434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.891908][T30304] bond0: Device is already in use. [ 834.905309][T30307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6317'. [ 834.905337][T30307] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 834.931724][T23736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.931746][T23736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.020048][T30307] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 835.165655][T30311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6318'. [ 835.384502][T30323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6322'. [ 835.440354][T30325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 835.539095][T30331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6321'. [ 835.777565][T30339] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 835.867342][T30341] syzkaller0: entered promiscuous mode [ 835.867362][T30341] syzkaller0: entered allmulticast mode [ 835.932214][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.939307][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.957822][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.969270][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.970907][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 836.368650][T11992] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 836.417830][T30356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.001014][T30389] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6336'. [ 837.043333][T30407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6339'. [ 837.173549][T30413] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 837.416544][T30424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6342'. [ 837.501665][T30347] hsr0 speed is unknown, defaulting to 1000 [ 837.663166][T30433] netlink: 'syz.2.6346': attribute type 2 has an invalid length. [ 837.717976][T30433] netlink: 'syz.2.6346': attribute type 2 has an invalid length. [ 837.742962][T30435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.046474][ T5621] Bluetooth: hci1: command tx timeout [ 838.235270][T30460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6350'. [ 838.615356][T30475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6354'. [ 838.646672][T30479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6355'. [ 838.677279][T23733] batadv1: left promiscuous mode [ 838.679634][T30347] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.679717][T30347] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.679868][T30347] bridge_slave_0: entered allmulticast mode [ 838.681552][T30347] bridge_slave_0: entered promiscuous mode [ 838.683726][T30347] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.683826][T30347] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.683962][T30347] bridge_slave_1: entered allmulticast mode [ 838.701673][T30347] bridge_slave_1: entered promiscuous mode [ 838.735415][T30481] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6356'. [ 838.838361][T30347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.860063][T30347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.979049][T30490] netlink: 'syz.3.6359': attribute type 10 has an invalid length. [ 838.979341][T30347] team0: Port device team_slave_0 added [ 839.001858][T30490] team0: Port device vlan0 added [ 839.014859][T30347] team0: Port device team_slave_1 added [ 839.125200][T30347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.125215][T30347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.125237][T30347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.244997][T30347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.245014][T30347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.245036][T30347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.362922][T30347] hsr_slave_0: entered promiscuous mode [ 839.363937][T30347] hsr_slave_1: entered promiscuous mode [ 839.364619][T30347] debugfs: 'hsr0' already exists in 'hsr' [ 839.364638][T30347] Cannot create hsr debugfs directory [ 839.465494][T30515] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.485728][T30515] bridge_slave_1 (unregistering): left allmulticast mode [ 839.485746][T30515] bridge_slave_1 (unregistering): left promiscuous mode [ 839.485796][T30515] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.685031][T30523] macvlan2: entered promiscuous mode [ 839.685054][T30523] macvlan2: entered allmulticast mode [ 839.765752][T30537] x_tables: unsorted underflow at hook 2 [ 839.867490][T30543] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 839.889110][T30543] vlan0: entered promiscuous mode [ 840.075796][T30347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.087663][T30347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.087695][T30347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 840.087719][T30347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 840.127858][T21269] Bluetooth: hci1: command tx timeout [ 840.352139][T30347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.352174][T30347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.352198][T30347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 840.352222][T30347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 840.409320][T30561] dvmrp0: entered allmulticast mode [ 840.412707][T30572] __nla_validate_parse: 7 callbacks suppressed [ 840.412726][T30572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6387'. [ 840.424078][T30572] bond2: (slave veth0_to_bond): Releasing backup interface [ 840.525000][T30347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.525033][T30347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.525055][T30347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 840.525078][T30347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 840.645363][T30579] netlink: 'syz.2.6388': attribute type 10 has an invalid length. [ 840.672273][T30582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6389'. [ 840.672305][T30582] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 840.745588][T30579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.772313][T30585] netlink: 'syz.2.6388': attribute type 10 has an invalid length. [ 840.774213][T30579] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 840.788263][T30592] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 840.788283][T30592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6390'. [ 840.788296][T30592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6390'. [ 840.811646][T30580] macvtap1: entered promiscuous mode [ 840.813706][T30580] macvtap1: entered allmulticast mode [ 840.813723][T30580] veth1_vlan: entered allmulticast mode [ 840.841428][T30583] bond4: (slave bond0): Releasing active interface [ 840.857430][T30583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.876956][T30583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.896115][T30583] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 840.907584][T30583] bond0 (unregistering): Released all slaves [ 841.325259][T30607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6395'. [ 841.330945][T30609] netlink: 'syz.4.6398': attribute type 1 has an invalid length. [ 841.349343][T30606] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 841.388800][T30609] macvlan1: entered promiscuous mode [ 841.388821][T30609] macvlan1: entered allmulticast mode [ 841.389441][T30609] bond3: entered promiscuous mode [ 841.390161][T30609] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 841.409041][T30609] bond3: left promiscuous mode [ 841.538797][T30616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6397'. [ 841.593768][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6400'. [ 841.680373][T30633] netlink: 'syz.2.6402': attribute type 29 has an invalid length. [ 841.780407][T30347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.790755][T30347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.793645][T30347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.825601][T30347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.833767][T30347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.860048][T30347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.861551][T30347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 841.875390][T30347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.963840][T30639] bond4 (unregistering): Released all slaves [ 842.011312][T30640] sctp: [Deprecated]: syz.2.6405 (pid 30640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 842.011312][T30640] Use struct sctp_sack_info instead [ 842.207219][T21269] Bluetooth: hci1: command tx timeout [ 842.253506][T30662] syzkaller0: left promiscuous mode [ 842.253522][T30662] syzkaller0: left allmulticast mode [ 842.309296][T30347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.349692][T30347] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.382426][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.382527][T11992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.409861][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.409964][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.411224][T30669] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6410'. [ 842.423841][T30668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6408'. [ 842.464687][T30668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6408'. [ 843.022216][T30704] netlink: 'syz.0.6419': attribute type 1 has an invalid length. [ 843.138638][T21269] block nbd5: Receive control failed (result -32) [ 843.143126][ T5621] block nbd5: Receive control failed (result -32) [ 843.422808][T30347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.441317][T23733] IPVS: starting estimator thread 0... [ 843.530281][T30724] IPVS: using max 33 ests per chain, 79200 per kthread [ 843.574487][T30347] veth0_vlan: entered promiscuous mode [ 843.800558][T30347] veth1_vlan: entered promiscuous mode [ 843.903699][T30347] veth0_macvtap: entered promiscuous mode [ 843.921492][T30347] veth1_macvtap: entered promiscuous mode [ 843.945109][T30347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.973672][T30347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.027747][T23736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.147239][ T8434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.147276][ T8434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.147300][ T8434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.148686][T30754] netlink: 'syz.2.6432': attribute type 2 has an invalid length. [ 844.236970][T30755] netlink: 'syz.3.6431': attribute type 1 has an invalid length. [ 844.236989][T30755] netlink: 'syz.3.6431': attribute type 3 has an invalid length. [ 844.287970][ T5621] Bluetooth: hci1: command tx timeout [ 844.333165][T11992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.333187][T11992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.445508][T23736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.445530][T23736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.951170][T21269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 844.968099][T21269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.977362][T21269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.985646][T21269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.993684][T21269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.394285][T30787] hsr0 speed is unknown, defaulting to 1000 [ 845.632416][T30805] IPVS: length: 239 != 24 [ 846.025025][T30823] netlink: ct family unspecified [ 846.025056][T30823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.266461][T30787] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.267515][T30787] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.269603][T30787] bridge_slave_0: entered allmulticast mode [ 846.302552][T30787] bridge_slave_0: entered promiscuous mode [ 846.323380][T30787] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.327168][T30787] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.327330][T30787] bridge_slave_1: entered allmulticast mode [ 846.329989][T30787] bridge_slave_1: entered promiscuous mode [ 846.454669][T30842] __nla_validate_parse: 3 callbacks suppressed [ 846.454686][T30842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6455'. [ 846.473989][T30842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6455'. [ 846.504017][T30787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.518920][T30787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.605039][T30787] team0: Port device team_slave_0 added [ 846.619814][T30787] team0: Port device team_slave_1 added [ 846.681137][T30787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.681155][T30787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.681176][T30787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.683196][T30787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.683211][T30787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.683232][T30787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.859837][T30859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 846.859854][T30859] IPv6: NLM_F_CREATE should be set when creating new route [ 846.859892][T30859] IPv6: NLM_F_CREATE should be set when creating new route [ 846.864872][T30864] netlink: 'syz.1.6459': attribute type 1 has an invalid length. [ 846.864893][T30864] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6459'. [ 846.864906][T30864] netlink: 'syz.1.6459': attribute type 1 has an invalid length. [ 846.943514][T30787] hsr_slave_0: entered promiscuous mode [ 846.949411][T30787] hsr_slave_1: entered promiscuous mode [ 846.950072][T30787] debugfs: 'hsr0' already exists in 'hsr' [ 846.950088][T30787] Cannot create hsr debugfs directory [ 847.087582][ T5621] Bluetooth: hci2: command tx timeout [ 847.248990][T30881] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6467'. [ 847.710099][T30787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.728823][T30897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6470'. [ 847.759631][T30888] ip_tables: iptables: counters copy to user failed while replacing table [ 847.773163][T30888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6468'. [ 847.900898][T30905] netlink: 'syz.2.6470': attribute type 10 has an invalid length. [ 847.930651][T30905] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 847.931462][T30903] vcan0: tx address claim with different name [ 848.017738][T30787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.170265][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6472'. [ 848.170283][T30787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.203112][T30910] netlink: 'syz.0.6471': attribute type 1 has an invalid length. [ 848.458340][T30787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 848.609753][T30927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6476'. [ 848.815393][T30943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6481'. [ 848.942838][T30950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 849.139215][T30961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6488'. [ 849.152261][T30959] nbd: must specify a device to reconfigure [ 849.163180][T30960] xt_time: unknown flags 0x68 [ 849.167702][ T5621] Bluetooth: hci2: command tx timeout [ 849.273006][T30787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 849.295397][T30787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.308715][T30787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 849.339220][T30961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.364695][T30787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.374098][T30787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 849.394442][T30787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.401577][T30787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 849.422700][T30787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.432084][T30972] netlink: 'syz.3.6490': attribute type 1 has an invalid length. [ 849.513095][T30972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.675585][T30972] bond1: (slave geneve2): making interface the new active one [ 849.684502][T30972] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 849.690675][T30990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.095467][T30787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.119167][T31011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.152118][T30787] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.172470][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.172573][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.174170][T31014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.191682][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.191783][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.253068][T31017] nbd: must specify a device to reconfigure [ 850.555666][T31030] netlink: 'syz.3.6504': attribute type 6 has an invalid length. [ 851.091975][T30787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.248326][ T5621] Bluetooth: hci2: command tx timeout [ 851.470337][T30787] veth0_vlan: entered promiscuous mode [ 851.475414][T30787] veth1_vlan: entered promiscuous mode [ 851.519185][T30787] veth0_macvtap: entered promiscuous mode [ 851.523500][T30787] veth1_macvtap: entered promiscuous mode [ 851.539145][T30787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.554096][T30787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.609639][ T8436] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.610461][ T8436] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.610813][ T8436] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.610843][ T8436] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.327451][ T5621] Bluetooth: hci2: command tx timeout [ 853.402541][T31028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.585128][T23733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.585148][T23733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.682683][T31090] __nla_validate_parse: 7 callbacks suppressed [ 853.682702][T31090] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6513'. [ 853.682715][T31090] nbd: must specify a device to reconfigure [ 853.719178][T23733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.719199][T23733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.964960][T31115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6519'. [ 853.970978][T31116] netlink: 'syz.1.6519': attribute type 2 has an invalid length. [ 853.970996][T31116] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6519'. [ 854.083067][T31122] syzkaller0: entered promiscuous mode [ 854.083090][T31122] syzkaller0: entered allmulticast mode [ 854.173646][T31127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6524'. [ 854.202738][T31125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6523'. [ 854.293193][T31132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6525'. [ 854.352081][T31136] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6526'. [ 854.352103][T31136] nbd: must specify a device to reconfigure [ 854.637933][T31147] netlink: 'syz.4.6531': attribute type 1 has an invalid length. [ 854.640017][T31154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6533'. [ 854.641050][T31154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6533'. [ 854.698328][T31159] netlink: 548 bytes leftover after parsing attributes in process `syz.2.6533'. [ 854.988449][T31175] nbd: must specify a device to reconfigure [ 855.341222][T23736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.347369][T23736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.567573][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.646283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.036137][T31206] Cannot find add_set index 0 as target [ 856.126562][T27966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.191318][T31220] nbd: must specify a device to reconfigure [ 856.193935][T31218] netlink: 'syz.3.6554': attribute type 3 has an invalid length. [ 856.344068][T31225] syz_tun: entered allmulticast mode [ 856.472087][T23733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.475359][T23733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.610780][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.611107][ T1840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.664587][ T4984] udevd[4984]: worker [26879] /devices/virtual/block/nbd0 is taking a long time [ 856.848691][T23736] wlan1: Trigger new scan to find an IBSS to join [ 857.009205][T31268] nbd: must specify a device to reconfigure [ 857.089534][T31223] syz_tun: left allmulticast mode [ 857.255378][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.294351][T31289] x_tables: duplicate underflow at hook 1 [ 857.434282][T31296] syz_tun: entered allmulticast mode [ 857.470746][T31293] dvmrp8: entered allmulticast mode [ 857.484155][T31292] syz_tun: left allmulticast mode [ 857.584741][T31303] nbd: must specify a device to reconfigure [ 857.593018][T31301] netlink: 'syz.1.6582': attribute type 1 has an invalid length. [ 857.673176][T31304] bond1: (slave gretap1): making interface the new active one [ 857.673899][T31304] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 857.885159][T31318] netlink: 'syz.4.6586': attribute type 1 has an invalid length. [ 858.259306][T31342] netlink: 'syz.3.6597': attribute type 23 has an invalid length. [ 858.454526][T31356] netlink: 'syz.2.6601': attribute type 1 has an invalid length. [ 858.512913][T31356] macvlan1: entered promiscuous mode [ 858.512937][T31356] macvlan1: entered allmulticast mode [ 858.513991][T31356] bond0: entered promiscuous mode [ 858.514677][T31356] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 858.532888][T31356] bond0: left promiscuous mode [ 858.567380][T11992] nci: nci_rsp_packet: unknown rsp opcode 0x32 [ 858.716534][T31369] syzkaller0: entered promiscuous mode [ 858.716566][T31369] syzkaller0: entered allmulticast mode [ 859.021795][T31397] __nla_validate_parse: 78 callbacks suppressed [ 859.021815][T31397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6611'. [ 859.021829][T31397] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6611'. [ 859.079347][T31398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6611'. [ 859.079370][T31398] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6611'. [ 860.846913][ T1217] net_ratelimit: 12 callbacks suppressed [ 860.846936][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.877504][T11992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.877686][T11992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.089231][ T1840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.269471][T31347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.272650][T31364] netlink: 'syz.1.6598': attribute type 1 has an invalid length. [ 861.272669][T31364] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6598'. [ 861.406426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.483778][T31414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6616'. [ 861.664857][T31409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6612'. [ 861.665081][T31409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6612'. [ 861.698992][T31427] syzkaller0: entered promiscuous mode [ 861.699015][T31427] syzkaller0: entered allmulticast mode [ 861.807521][T23736] wlan1: Trigger new scan to find an IBSS to join [ 861.895308][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.920023][T31436] bond6: entered allmulticast mode [ 862.019251][ T8436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.019435][ T8436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.074827][T31442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 862.085096][T31442] bond7: entered allmulticast mode [ 862.087234][T31442] bond6: (slave bond7): Enslaving as an active interface with an up link [ 862.134528][T31443] bond6 (unregistering): (slave bond7): Releasing backup interface [ 862.168897][T31443] bond7: left allmulticast mode [ 862.175717][T31443] bond6 (unregistering): Released all slaves [ 862.313204][T31459] IPv6: NLM_F_REPLACE set, but no existing node found! [ 862.431620][T31464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6628'. [ 862.582777][T31469] netlink: 'syz.4.6629': attribute type 10 has an invalid length. [ 862.621490][T31469] team0: Device veth0_macvtap failed to register rx_handler [ 862.928517][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.014592][T27961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.115542][T31507] netlink: 'syz.3.6640': attribute type 15 has an invalid length. [ 863.115563][T31507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6640'. [ 863.121402][T31508] netlink: 'syz.3.6640': attribute type 15 has an invalid length. [ 863.311354][T31519] netlink: 'syz.4.6641': attribute type 1 has an invalid length. [ 863.311944][T31519] netlink: 'syz.4.6641': attribute type 1 has an invalid length. [ 863.774993][T31548] bond2: entered allmulticast mode [ 863.798224][T31548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 863.871181][T31553] netlink: 'syz.2.6651': attribute type 1 has an invalid length. [ 864.158572][ T8434] wlan1: Creating new IBSS network, BSSID 3a:44:8c:fa:61:d7 [ 864.161694][T31578] __nla_validate_parse: 8 callbacks suppressed [ 864.161712][T31578] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6654'. [ 864.173830][T31590] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 864.451761][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6658'. [ 864.830844][T31590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 864.830876][T31590] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 864.903981][T31590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 864.903998][T31590] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 864.954897][T31590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 864.954919][T31590] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 865.005801][T31590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 865.005888][T31590] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 865.035446][T31590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 865.035468][T31590] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 866.046234][T27966] net_ratelimit: 19 callbacks suppressed [ 866.046255][T27966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.046938][T13085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.207547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.486945][ T1023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.487125][ T1023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.829148][T31553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.088451][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.090041][T31627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6662'. [ 867.109624][T31629] macvlan0: entered promiscuous mode [ 867.129733][T31632] vxcan0: tx address claim with dest, not broadcast [ 867.130008][T31627] hsr_slave_0: left promiscuous mode [ 867.135405][T31627] hsr_slave_1: left promiscuous mode [ 867.354164][T31643] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6667'. [ 867.598882][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.599050][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.605812][T23732] IPVS: starting estimator thread 0... [ 867.699920][T31657] IPVS: using max 31 ests per chain, 74400 per kthread [ 867.774580][T31661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6674'. [ 868.044069][T31675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6677'. [ 868.121322][T31679] netlink: 'syz.3.6679': attribute type 30 has an invalid length. [ 868.212355][T31684] team0: Device xfrm0 is of different type [ 868.354766][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6681'. [ 868.366126][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6681'. [ 868.366416][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6681'. [ 868.366613][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6681'. [ 868.409473][T31694] netlink: 'syz.1.6683': attribute type 9 has an invalid length. [ 868.461778][T31694] netlink: 'syz.1.6683': attribute type 4 has an invalid length. [ 868.534572][T31699] bond1: option all_slaves_active: invalid value (179) [ 868.551092][T31699] bond1 (unregistering): Released all slaves [ 868.644968][T31713] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 868.706132][T31713] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 868.757599][T31717] netlink: 'syz.0.6690': attribute type 1 has an invalid length. [ 868.844860][T31717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.892371][T31721] bond1: (slave gretap1): making interface the new active one [ 868.893171][T31721] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 869.169254][T31740] netlink: 'syz.3.6698': attribute type 26 has an invalid length. [ 869.169277][T31740] __nla_validate_parse: 36 callbacks suppressed [ 869.169288][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 869.171526][T31740] netlink: 'syz.3.6698': attribute type 26 has an invalid length. [ 869.171546][T31740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6698'. [ 869.175757][T31742] team_slave_0: entered allmulticast mode [ 869.429360][T31746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6701'. [ 869.866851][T31768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6705'. [ 869.867737][T31768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 869.867752][T31768] IPv6: NLM_F_CREATE should be set when creating new route [ 870.162356][T31782] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 870.323175][T31755] infiniband syz2: set active [ 870.326660][T31755] infiniband syz2: added batadv_slave_1 [ 870.369656][T31755] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 870.369700][T31755] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 870.369733][T31755] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 870.455641][T31755] RDS/IB: syz2: added [ 870.465447][T31755] smc: adding ib device syz2 with port count 1 [ 870.465636][T31755] smc: ib device syz2 port 1 has pnetid S (user defined) [ 870.535697][T31797] netlink: 'syz.0.6714': attribute type 1 has an invalid length. [ 870.601751][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6714'. [ 870.669671][T31804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6715'. [ 870.745066][T31797] macvlan2: entered promiscuous mode [ 870.745089][T31797] macvlan2: entered allmulticast mode [ 870.749317][T31797] bond2: entered promiscuous mode [ 870.751195][T31797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 870.792092][T31797] bond2: left promiscuous mode [ 871.083443][T31814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6718'. [ 871.101324][T31814] team0: No ports can be present during mode change [ 871.155687][T31824] net_ratelimit: 9 callbacks suppressed [ 871.155706][T31824] 0: reclassify loop, rule prio 0, protocol 03 [ 871.382352][T31834] IPVS: Scheduler module ip_vs_mh not found [ 871.471833][T31842] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 871.589925][T31842] bridge1: entered promiscuous mode [ 871.604038][T31842] bond3: (slave bridge1): making interface the new active one [ 871.616463][T31842] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 871.707395][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6730'. [ 871.749420][T31851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.749578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.874430][T31850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.876316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.894444][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.895668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.932184][T31862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6732'. [ 871.935131][T31869] netlink: 'syz.4.6732': attribute type 1 has an invalid length. [ 871.968662][T27966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.027379][ T1023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.027585][ T1023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.114543][T31870] macvlan2: entered promiscuous mode [ 872.114565][T31870] macvlan2: entered allmulticast mode [ 872.114766][T31870] bridge2: port 1(macvlan2) entered blocking state [ 872.114822][T31870] bridge2: port 1(macvlan2) entered disabled state [ 872.558945][T31903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6739'. [ 873.170548][T31941] syzkaller0: entered promiscuous mode [ 873.170571][T31941] syzkaller0: entered allmulticast mode [ 873.267761][T31928] nbd: must specify a device to reconfigure [ 873.271793][T31924] nbd: must specify a device to reconfigure [ 874.122688][T31981] team0: Port device team_slave_0 removed [ 874.524281][T32004] __nla_validate_parse: 4 callbacks suppressed [ 874.524295][T32004] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6764'. [ 874.524305][T32004] nbd: must specify a device to reconfigure [ 874.690956][T32010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6766'. [ 874.962328][T32018] validate_nla: 1 callbacks suppressed [ 874.962347][T32018] netlink: 'syz.4.6770': attribute type 1 has an invalid length. [ 875.368269][T32040] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6776'. [ 875.368294][T32040] nbd: must specify a device to reconfigure [ 875.509509][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'. [ 875.513388][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'. [ 875.681583][T32052] netlink: 'syz.3.6780': attribute type 1 has an invalid length. [ 875.714198][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6783'. [ 875.743991][T32076] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6785'. [ 875.944207][T32080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6780'. [ 875.965757][T32052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.991947][T32053] bond2: (slave ip6erspan0): making interface the new active one [ 876.004637][T32053] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 876.074868][T32088] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.084912][T32088] bridge0: entered allmulticast mode [ 876.144812][T32090] xt_hashlimit: size too large, truncated to 1048576 [ 876.189714][T32083] bridge_slave_0: left allmulticast mode [ 876.189781][T32083] bridge_slave_0: left promiscuous mode [ 876.192764][T32083] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.286149][T27961] net_ratelimit: 30 callbacks suppressed [ 876.286168][T27961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.333503][T32097] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6790'. [ 876.333525][T32097] nbd: must specify a device to reconfigure [ 876.395710][T32093] C: renamed from lo (while UP) [ 876.403444][T32093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 876.502904][ T8434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.503499][ T8434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.539904][T32102] netlink: 'syz.2.6792': attribute type 1 has an invalid length. [ 876.603549][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6792'. [ 876.607909][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.669116][T32106] vlan2: entered promiscuous mode [ 876.669138][T32106] bridge0: entered promiscuous mode [ 876.743955][T32102] macvlan1: entered promiscuous mode [ 876.743978][T32102] macvlan1: entered allmulticast mode [ 876.744594][T32102] bond6: entered promiscuous mode [ 876.747659][T32102] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 876.965794][T32102] bond6: left promiscuous mode [ 877.435083][T32134] netlink: 'syz.2.6800': attribute type 1 has an invalid length. [ 877.622178][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.622418][T23732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.650593][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.698769][T32143] nbd: must specify a device to reconfigure [ 877.971976][ T8434] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.974290][T23736] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.974332][T23736] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.974363][T23736] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.062390][T32176] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 878.103279][T32176] macvlan2: entered promiscuous mode [ 878.103302][T32176] macvlan2: entered allmulticast mode [ 878.103880][T32176] bond3: entered promiscuous mode [ 878.127696][T32176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 878.144459][T32176] bond3: left promiscuous mode [ 878.242787][T32181] nbd: couldn't find a device at index 117440512 [ 878.415030][T32178] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 878.609520][T32201] nbd: must specify a device to reconfigure [ 878.689048][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.429124][T32238] veth1_macvtap: left promiscuous mode [ 879.732235][T23733] IPVS: starting estimator thread 0... [ 879.826932][T32255] IPVS: using max 26 ests per chain, 62400 per kthread [ 879.999249][T32268] __nla_validate_parse: 18 callbacks suppressed [ 879.999270][T32268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6829'. [ 879.999286][T32268] nbd: must specify a device to reconfigure [ 880.073490][T32273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6831'. [ 880.330040][T32285] netlink: 'syz.4.6835': attribute type 11 has an invalid length. [ 880.370095][T32285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6835'. [ 880.405286][T32291] nbd: must specify an index to disconnect [ 880.429416][T32297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6840'. [ 880.557060][T32298] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6840'. [ 880.719808][T32302] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 880.725632][T32302] bond5 (unregistering): Released all slaves [ 880.762292][T32309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6843'. [ 880.762313][T32309] nbd: must specify a device to reconfigure [ 881.047827][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047861][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047883][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047905][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047927][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047949][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047970][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.047992][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048014][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048036][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048058][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048080][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048100][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048119][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048139][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048160][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048182][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048203][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048225][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048247][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048268][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048290][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048311][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048346][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048367][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048388][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048409][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048430][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048451][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048473][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048499][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048521][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.048542][T32327] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 881.401425][T32340] net_ratelimit: 141 callbacks suppressed [ 881.401446][T32340] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 881.401474][T32340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.514477][T32345] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6852'. [ 881.532193][T32345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6852'. [ 881.734897][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'. [ 881.734924][T32358] netlink: 'syz.0.6855': attribute type 3 has an invalid length. [ 881.744023][T32356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6854'. [ 881.806683][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.828279][T32363] ipt_ah: unknown flags FF [ 881.832347][T32360] nbd: must specify a device to reconfigure [ 881.941320][T32373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.008839][T32368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.009190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.009426][T32368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.018013][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.029671][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.031127][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.074884][T32373] sctp: [Deprecated]: syz.1.6860 (pid 32373) Use of int in maxseg socket option. [ 882.074884][T32373] Use struct sctp_assoc_value instead [ 882.360358][T32389] syzkaller1: entered promiscuous mode [ 882.360379][T32389] syzkaller1: entered allmulticast mode [ 882.368441][T32400] nbd: must specify a device to reconfigure [ 882.517835][T32406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 882.705045][T32406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.721572][T32406] bond4: (slave bond0): making interface the new active one [ 882.724215][T32406] bond4: (slave bond0): Enslaving as an active interface with an up link [ 883.102587][T32434] netlink: 'syz.3.6875': attribute type 33 has an invalid length. [ 883.261917][T32441] nbd: must specify a device to reconfigure [ 883.338391][T32449] xt_l2tp: missing protocol rule (udp|l2tpip) [ 883.432693][T32455] siw: device registration error -23 [ 883.555081][T32456] bond1: entered promiscuous mode [ 883.562277][T32456] bond1: entered allmulticast mode [ 883.571661][T32456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.579518][ T1023] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.589085][ T1023] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.589978][ T1023] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.590011][ T1023] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.887233][T32476] netlink: 'syz.0.6892': attribute type 3 has an invalid length. [ 884.338675][T32494] nbd: must specify a device to reconfigure [ 884.865102][T32522] netlink: 'syz.2.6908': attribute type 1 has an invalid length. [ 884.922189][T32526] nbd: must specify a device to reconfigure [ 885.140299][T32528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 885.154425][T32528] bond8: (slave bond9): making interface the new active one [ 885.155025][T32528] bond8: (slave bond9): Enslaving as an active interface with an up link [ 885.431924][T32550] bridge6: entered promiscuous mode [ 885.431989][T32550] bridge6: entered allmulticast mode [ 885.575352][T32561] No such timeout policy "syz0" [ 885.637334][T32567] netlink: 'syz.2.6918': attribute type 10 has an invalid length. [ 885.637576][T32567] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.638212][T32567] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.737725][T32572] netlink: 'syz.4.6921': attribute type 1 has an invalid length. [ 885.760121][T32570] __nla_validate_parse: 26 callbacks suppressed [ 885.760141][T32570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6919'. [ 885.797613][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6921'. [ 885.927515][T32572] macvlan2: entered promiscuous mode [ 885.927538][T32572] macvlan2: entered allmulticast mode [ 885.928174][T32572] bond2: entered promiscuous mode [ 885.930547][T32572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 885.978457][T32572] bond2: left promiscuous mode [ 886.015638][T32589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6926'. [ 886.133528][T32591] macvlan1: entered allmulticast mode [ 886.176811][T32591] veth1_vlan: entered allmulticast mode [ 886.218484][T32591] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 886.222514][T32593] syzkaller0: left promiscuous mode [ 886.222535][T32593] syzkaller0: left allmulticast mode [ 886.250491][T32593] netlink: 'syz.2.6927': attribute type 1 has an invalid length. [ 886.340640][T32610] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.6932'. [ 886.450495][T32599] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6928'. [ 886.547888][T23733] net_ratelimit: 24 callbacks suppressed [ 886.547911][T23733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.548083][T23733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.644571][T32622] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6934'. [ 886.754357][T32622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6934'. [ 886.864242][T32630] veth0: entered promiscuous mode [ 887.007404][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.080433][T32641] h: entered promiscuous mode [ 887.258552][T32658] netlink: 'syz.2.6943': attribute type 10 has an invalid length. [ 887.560704][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6950'. [ 887.663755][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.682642][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.767782][T32626] veth0: left promiscuous mode [ 888.051223][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.084207][T32714] netlink: 'syz.4.6958': attribute type 5 has an invalid length. [ 888.192075][T32725] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6963'. [ 888.388398][T32737] netlink: 'syz.4.6967': attribute type 1 has an invalid length. [ 888.446975][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.505143][T32737] macvlan2: entered promiscuous mode [ 888.505165][T32737] macvlan2: entered allmulticast mode [ 888.519660][T32737] bond3: entered promiscuous mode [ 888.520599][T32737] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 888.542272][T32737] bond3: left promiscuous mode [ 888.715109][T32759] netlink: 'syz.0.6974': attribute type 1 has an invalid length. [ 888.721979][T32760] veth0: entered promiscuous mode [ 888.738021][T32758] veth0: left promiscuous mode [ 888.776817][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.776994][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.942724][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6974'. [ 889.089021][ T1217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.230505][ T318] xt_hashlimit: size too large, truncated to 1048576 [ 889.233017][ T319] netlink: 'syz.1.6983': attribute type 21 has an invalid length. [ 889.233040][ T319] IPv6: NLM_F_CREATE should be specified when creating new route [ 889.233119][ T319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.233127][ T319] IPv6: NLM_F_CREATE should be set when creating new route [ 889.233169][ T319] IPv6: NLM_F_CREATE should be set when creating new route [ 889.233192][ T319] IPv6: NLM_F_CREATE should be set when creating new route [ 889.532714][ T330] netlink: 'syz.3.6988': attribute type 1 has an invalid length. [ 889.692952][ T335] netlink: 'syz.1.6989': attribute type 1 has an invalid length. [ 890.401670][ T388] netlink: 'syz.0.7002': attribute type 11 has an invalid length. [ 890.401691][ T388] netlink: 'syz.0.7002': attribute type 4 has an invalid length. [ 890.615609][ T403] syzkaller0: entered promiscuous mode [ 890.615630][ T403] syzkaller0: entered allmulticast mode [ 890.875807][ T416] __nla_validate_parse: 7 callbacks suppressed [ 890.883682][ T416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7013'. [ 890.929806][ T420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7014'. [ 890.945133][ T422] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7013'. [ 891.079942][ T427] tipc: Failed to remove unknown binding: 66,1,1/0:3328720809/3328720811 [ 891.195269][ T437] netlink: 'syz.2.7019': attribute type 32 has an invalid length. [ 891.195291][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'. [ 891.247619][ T437] bond12: option coupled_control: invalid value (10) [ 891.252575][ T437] bond12 (unregistering): Released all slaves [ 891.539494][ T450] netlink: 'syz.2.7023': attribute type 1 has an invalid length. [ 891.724908][ T450] bridge7: entered promiscuous mode [ 891.734014][ T464] net_ratelimit: 10 callbacks suppressed [ 891.734032][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.734201][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.734456][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.750590][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.750770][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.788558][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.789444][ T450] bond12: (slave bridge7): making interface the new active one [ 891.792241][ T450] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 891.797975][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.853471][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.853877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.874221][ T462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.889292][ T454] bridge8: entered promiscuous mode [ 891.924895][ T454] bond12: (slave bridge8): Enslaving as a backup interface with an up link [ 892.084589][ T475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7029'. [ 892.195944][ T483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 892.198335][ T483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7031'. [ 892.501770][ T503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7035'. [ 892.542489][ T513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7038'. [ 892.544853][ T508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7035'. [ 892.680574][ T519] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 892.682313][ T519] bond6 (unregistering): Released all slaves [ 892.971900][ T539] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 893.010191][ T539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 893.041019][ T539] vlan2: entered promiscuous mode [ 893.041041][ T539] bond6: entered promiscuous mode [ 893.041210][ T539] vlan2: entered allmulticast mode [ 893.041224][ T539] bond6: entered allmulticast mode [ 893.080537][ T539] netlink: 'syz.1.7045': attribute type 21 has an invalid length. [ 893.080556][ T539] netlink: 'syz.1.7045': attribute type 22 has an invalid length. [ 893.080569][ T539] netlink: 'syz.1.7045': attribute type 23 has an invalid length. [ 893.080581][ T539] netlink: 'syz.1.7045': attribute type 25 has an invalid length. [ 893.565184][ T557] sctp: [Deprecated]: syz.0.7052 (pid 557) Use of int in maxseg socket option. [ 893.565184][ T557] Use struct sctp_assoc_value instead [ 893.699804][ T560] block nbd6: Unsupported socket: should be TCP or UNIX. [ 894.202395][ T603] netlink: 'syz.3.7066': attribute type 1 has an invalid length. [ 894.202420][ T603] netlink: 'syz.3.7066': attribute type 3 has an invalid length. [ 894.861008][ T650] netlink: 'syz.3.7082': attribute type 5 has an invalid length. [ 895.620842][ T688] syzkaller1: entered promiscuous mode [ 895.620865][ T688] syzkaller1: entered allmulticast mode [ 895.992629][ T713] syzkaller0: entered promiscuous mode [ 895.992651][ T713] syzkaller0: entered allmulticast mode [ 896.083769][ T722] __nla_validate_parse: 14 callbacks suppressed [ 896.083791][ T722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7104'. [ 896.084541][ T721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7104'. [ 896.097017][ T719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7102'. [ 896.668056][ T753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7111'. [ 896.668078][ T753] nbd: must specify a device to reconfigure [ 896.761472][ T757] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20001 [ 896.857532][ T769] netlink: 'syz.1.7113': attribute type 1 has an invalid length. [ 897.033980][ T763] macvlan3: entered promiscuous mode [ 897.034004][ T763] macvlan3: entered allmulticast mode [ 897.039604][ T763] bond7: entered promiscuous mode [ 897.041463][ T763] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 897.068444][ T763] bond7: left promiscuous mode [ 897.154622][ T784] net_ratelimit: 32 callbacks suppressed [ 897.154643][ T784] openvswitch: netlink: Message has 8 unknown bytes. [ 897.272701][ T782] xt_CT: No such helper "snmp_trap" [ 897.406821][T13086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.418020][ T1840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.687148][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.687366][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.739613][ T800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.739968][ T800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.740169][ T800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.740321][ T800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.740471][ T800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.153413][ T796] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 900.372061][ T814] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7123'. [ 900.372085][ T814] nbd: must specify a device to reconfigure [ 900.592892][ T827] 8021q: VLANs not supported on ip_vti0 [ 900.674131][ T832] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7128'. [ 900.677824][ T827] netlink: 'syz.3.7124': attribute type 2 has an invalid length. [ 900.678160][ T828] netlink: 'syz.3.7124': attribute type 2 has an invalid length. [ 901.053312][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 901.053542][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 901.053743][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 901.053963][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 901.109071][ T848] __nla_validate_parse: 3 callbacks suppressed [ 901.109092][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7131'. [ 901.481394][ T871] netlink: 'syz.3.7135': attribute type 1 has an invalid length. [ 901.534069][ T871] macvlan2: entered promiscuous mode [ 901.534090][ T871] macvlan2: entered allmulticast mode [ 901.534749][ T871] bond6: entered promiscuous mode [ 901.535788][ T870] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7136'. [ 901.537577][ T871] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 901.576481][ T870] nbd: must specify a device to reconfigure [ 901.609742][ T871] bond6: left promiscuous mode [ 901.817065][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.829014][ T876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7138'. [ 901.983783][ T898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7144'. [ 902.309165][ T921] xt_REDIRECT: bad rangesize 26624. [ 902.429206][ T927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7150'. [ 902.429229][ T927] nbd: must specify a device to reconfigure [ 902.994206][ T973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7161'. [ 903.150253][ T983] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7163'. [ 903.184250][ T986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7162'. [ 903.184272][ T986] nbd: must specify a device to reconfigure [ 903.304335][ T990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7164'. [ 903.589514][ T1010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7170'. [ 903.644579][ T1016] sctp: [Deprecated]: syz.2.7172 (pid 1016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.644579][ T1016] Use struct sctp_sack_info instead [ 903.901751][ T1033] nbd: must specify a device to reconfigure [ 904.574529][ T1092] netlink: 'syz.3.7187': attribute type 1 has an invalid length. [ 904.679206][ T1089] macvlan2: entered promiscuous mode [ 904.679228][ T1089] macvlan2: entered allmulticast mode [ 904.681255][ T1103] nbd: must specify a device to reconfigure [ 904.682849][ T1089] bond7: entered promiscuous mode [ 904.684347][ T1089] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 904.730032][ T1106] netlink: 'syz.1.7192': attribute type 11 has an invalid length. [ 904.732852][ T1089] bond7: left promiscuous mode [ 904.792644][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.923720][ T1116] netlink: 'syz.3.7195': attribute type 2 has an invalid length. [ 905.335730][ T1141] nbd: must specify a device to reconfigure [ 905.500349][ T1149] net_ratelimit: 1836 callbacks suppressed [ 905.500369][ T1149] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 905.558685][ T1153] gretap0: entered promiscuous mode [ 905.574128][ T1153] 0ªî{X¹¦: renamed from gretap0 [ 905.582770][ T1153] 0ªî{X¹¦: left promiscuous mode [ 905.582790][ T1153] 0ªî{X¹¦: entered allmulticast mode [ 905.598229][ T1153] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 905.791889][ T1170] veth0: entered promiscuous mode [ 905.813116][ T1170] netlink: 'syz.4.7215': attribute type 1 has an invalid length. [ 905.813193][ T1170] netlink: 'syz.4.7215': attribute type 1 has an invalid length. [ 905.813913][ T1168] veth0: left promiscuous mode [ 905.952740][ T1181] nbd: must specify a device to reconfigure [ 905.955782][ T1174] geneve3: entered allmulticast mode [ 906.246392][ T1192] netlink: 'syz.2.7223': attribute type 8 has an invalid length. [ 906.249104][ T1196] __nla_validate_parse: 16 callbacks suppressed [ 906.249124][ T1196] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7223'. [ 910.065676][ T1209] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 910.314066][ T1222] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7230'. [ 910.314089][ T1222] nbd: must specify a device to reconfigure [ 910.344685][ T1223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7229'. [ 910.610007][ T1238] bond0: Error: Cannot enslave bond to itself. [ 911.004349][ T1265] netlink: 'syz.2.7243': attribute type 1 has an invalid length. [ 911.153441][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.304697][ T1282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7247'. [ 911.373239][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.373463][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.373685][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.384867][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.399382][ T1279] macvlan1: entered promiscuous mode [ 911.399404][ T1279] macvlan1: entered allmulticast mode [ 911.400116][ T1279] bond14: entered promiscuous mode [ 911.400825][ T1279] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 911.439316][ T1279] bond14: left promiscuous mode [ 911.464641][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.464848][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.465041][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.465256][ T1277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7244'. [ 911.465728][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7250'. [ 912.608356][ T1344] netlink: 'syz.1.7262': attribute type 1 has an invalid length. [ 912.743541][ T1344] macvlan3: entered promiscuous mode [ 912.743562][ T1344] macvlan3: entered allmulticast mode [ 912.744546][ T1344] bond8: entered promiscuous mode [ 912.776679][ T1344] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 912.780112][ T1344] bond8: left promiscuous mode [ 913.533111][ T1408] netlink: 'syz.2.7279': attribute type 1 has an invalid length. [ 913.708635][ T1408] macvlan1: entered promiscuous mode [ 913.708659][ T1408] macvlan1: entered allmulticast mode [ 913.709297][ T1408] bond15: entered promiscuous mode [ 913.720335][ T1408] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 913.753185][ T1408] bond15: left promiscuous mode [ 914.174062][ T1435] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 914.633734][ T1456] netlink: 'syz.4.7293': attribute type 24 has an invalid length. [ 914.901545][ T1464] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 914.908471][ T1467] netlink: 'syz.2.7297': attribute type 11 has an invalid length. [ 915.018310][ T1464] macvlan2: entered promiscuous mode [ 915.018332][ T1464] macvlan2: entered allmulticast mode [ 915.018933][ T1464] bond6: entered promiscuous mode [ 915.019838][ T1464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 915.023225][ T1464] bond6: left promiscuous mode [ 915.094425][ T1476] syzkaller0: entered promiscuous mode [ 915.094453][ T1476] syzkaller0: entered allmulticast mode [ 915.095717][ T1473] 0·: renamed from hsr0 [ 915.172526][ T1473] 0·: entered allmulticast mode [ 915.172550][ T1473] hsr_slave_0: entered allmulticast mode [ 915.172567][ T1473] hsr_slave_1: entered allmulticast mode [ 915.180262][ T1473] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 916.073036][ T1525] netlink: 'syz.4.7311': attribute type 1 has an invalid length. [ 916.382312][ T1537] __nla_validate_parse: 32 callbacks suppressed [ 916.382334][ T1537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7312'. [ 916.413331][ T1525] macvlan2: entered promiscuous mode [ 916.413355][ T1525] macvlan2: entered allmulticast mode [ 916.418031][ T1525] bond4: entered promiscuous mode [ 916.420573][ T1525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 916.498477][ T1525] bond4: left promiscuous mode [ 916.647641][ T1541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7313'. [ 916.782253][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7315'. [ 916.782337][ T1549] bridge_slave_1: left allmulticast mode [ 916.782356][ T1549] bridge_slave_1: left promiscuous mode [ 916.782574][ T1549] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.799161][ T1549] bridge_slave_0: left allmulticast mode [ 916.799191][ T1549] bridge_slave_0: left promiscuous mode [ 916.799410][ T1549] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.921662][ T1558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7315'. [ 917.370453][ T1570] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.370545][ T1570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7320'. [ 917.398274][ T1572] netlink: 'syz.0.7321': attribute type 1 has an invalid length. [ 917.479515][ T1577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7323'. [ 917.611139][ T1572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 917.778675][ T1587] netlink: 59 bytes leftover after parsing attributes in process `syz.4.7318'. [ 917.832708][ T1584] bond7: (slave geneve3): making interface the new active one [ 917.844293][ T1584] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 918.070437][ T1607] syzkaller1: entered promiscuous mode [ 918.070463][ T1607] syzkaller1: entered allmulticast mode [ 918.154345][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7329'. [ 918.345393][ T1616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7330'. [ 918.401796][ T1623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7330'. [ 918.449782][ T1620] batman_adv: batadv0: Adding interface: syzkaller0 [ 918.449800][ T1620] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.449828][ T1620] batman_adv: batadv0: Interface activated: syzkaller0 [ 918.500315][ T1619] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 918.588108][ T1619] batman_adv: batadv0: Removing interface: syzkaller0 [ 918.865621][ T1643] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 918.902294][ T1646] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 919.106545][ T1662] netlink: 'syz.1.7344': attribute type 1 has an invalid length. [ 919.160097][ T1666] netlink: 'syz.0.7346': attribute type 1 has an invalid length. [ 919.204469][ T1666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 919.240764][ T1662] macvlan3: entered promiscuous mode [ 919.240787][ T1662] macvlan3: entered allmulticast mode [ 919.241506][ T1662] bond9: entered promiscuous mode [ 919.243905][ T1662] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 919.248448][ T1662] bond9: left promiscuous mode [ 919.491342][ T1679] netlink: 'syz.0.7350': attribute type 1 has an invalid length. [ 919.693265][ T1687] bond8: entered promiscuous mode [ 919.693283][ T1687] bond8: entered allmulticast mode [ 919.760014][ T1704] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 919.969402][ T1714] netlink: 'syz.2.7361': attribute type 3 has an invalid length. [ 920.134856][ T1731] netlink: 'syz.2.7363': attribute type 1 has an invalid length. [ 920.134879][ T1731] netlink: 'syz.2.7363': attribute type 1 has an invalid length. [ 920.243779][ T1738] netlink: 'syz.2.7363': attribute type 1 has an invalid length. [ 920.243802][ T1738] netlink: 'syz.2.7363': attribute type 1 has an invalid length. [ 920.386267][ T1748] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 920.388969][ T1745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.787339][ T1772] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 920.815561][ T1772] ip6gre1: entered promiscuous mode [ 920.872849][ T1772] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 920.898086][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 920.962137][ T1782] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 920.987284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.279448][ T1799] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 921.317538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 921.485384][ T1815] __nla_validate_parse: 14 callbacks suppressed [ 921.485406][ T1815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7380'. [ 921.905201][ T1834] syzkaller0: left promiscuous mode [ 921.905223][ T1834] syzkaller0: left allmulticast mode [ 922.354268][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7389'. [ 922.473132][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7389'. [ 922.473968][ T1864] netlink: 'syz.0.7390': attribute type 10 has an invalid length. [ 922.573771][ T1864] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 922.700411][ T1866] syzkaller0: entered promiscuous mode [ 922.700434][ T1866] syzkaller0: entered allmulticast mode [ 922.888857][ T1880] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 922.890460][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 922.890512][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 922.901177][ T1886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7396'. [ 922.926442][ T1880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7397'. [ 923.113486][ T1889] sctp: [Deprecated]: syz.1.7398 (pid 1889) Use of int in maxseg socket option. [ 923.113486][ T1889] Use struct sctp_assoc_value instead [ 923.319403][ T1898] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7401'. [ 923.319450][ T1898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7401'. [ 923.319464][ T1898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7401'. [ 923.474733][ T1911] x_tables: duplicate entry at hook 1 [ 923.987149][ T1950] batadv0: mtu less than device minimum [ 924.068631][ T1954] netlink: 'syz.2.7416': attribute type 4 has an invalid length. [ 924.133489][ T1957] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 924.419562][ T1976] netlink: 'syz.2.7422': attribute type 2 has an invalid length. [ 924.578691][ T1981] netlink: 'syz.4.7423': attribute type 3 has an invalid length. [ 924.578711][ T1981] netlink: 'syz.4.7423': attribute type 1 has an invalid length. [ 924.578904][ T1980] netlink: 'syz.4.7423': attribute type 1 has an invalid length. [ 924.579071][ T1981] netlink: 'syz.4.7423': attribute type 1 has an invalid length. [ 924.741787][ T1991] netlink: 'syz.3.7427': attribute type 1 has an invalid length. [ 924.840502][ T1991] macvlan2: entered promiscuous mode [ 924.840524][ T1991] macvlan2: entered allmulticast mode [ 924.842816][ T1991] bond9: entered promiscuous mode [ 924.843717][ T1991] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 924.874613][ T1991] bond9: left promiscuous mode [ 925.248601][ T2024] Bluetooth: MGMT ver 1.23 [ 925.248637][ T2024] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 925.260111][ T2024] vlan3: entered promiscuous mode [ 925.260130][ T2024] geneve1: entered promiscuous mode [ 925.260321][ T2024] vlan3: entered allmulticast mode [ 925.260335][ T2024] geneve1: entered allmulticast mode [ 925.320167][ T2030] netlink: 'syz.1.7438': attribute type 1 has an invalid length. [ 925.354701][ T2030] bond10: entered promiscuous mode [ 925.355345][ T2030] 8021q: adding VLAN 0 to HW filter on device bond10 [ 925.384319][ T2030] macvtap1: entered allmulticast mode [ 925.406702][ T2030] bond10: (slave bridge3): making interface the new active one [ 925.406737][ T2030] bridge3: entered promiscuous mode [ 925.408094][ T2030] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 925.679363][T10530] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 925.845572][ T2053] vlan4: entered promiscuous mode [ 925.845594][ T2053] erspan0: entered promiscuous mode [ 925.934406][ T2065] netlink: 'syz.2.7449': attribute type 2 has an invalid length. [ 926.122555][ T2074] net_ratelimit: 21 callbacks suppressed [ 926.122576][ T2074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.294598][ T2080] bond4: (slave bond0): Releasing active interface [ 926.358259][ T2080] bridge_slave_0: left allmulticast mode [ 926.360074][ T2080] bridge_slave_0: left promiscuous mode [ 926.360306][ T2080] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.398953][ T2080] bridge_slave_1: left allmulticast mode [ 926.398981][ T2080] bridge_slave_1: left promiscuous mode [ 926.399186][ T2080] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.451329][ T2080] bond0: (slave bond_slave_0): Releasing backup interface [ 926.464569][ T2080] bond0: (slave bond_slave_1): Releasing backup interface [ 926.482811][ T2080] team0: Port device team_slave_0 removed [ 926.493786][ T2093] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 926.509198][ T2080] team0: Port device team_slave_1 removed [ 926.509956][ T2080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.509974][ T2080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.515470][ T2080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.515490][ T2080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.525359][ T2080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 926.550754][ T2076] team0: Device xfrm0 is of different type [ 926.581427][ T2084] tipc: Started in network mode [ 926.581456][ T2084] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 926.581655][ T2084] tipc: Enabled bearer , priority 0 [ 926.609596][ T2088] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 926.617510][ T2088] bond11 (unregistering): Released all slaves [ 926.671069][ T2099] __nla_validate_parse: 130 callbacks suppressed [ 926.671090][ T2099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7459'. [ 926.671118][ T2099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7459'. [ 927.363156][ T2136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7473'. [ 927.469359][ T2141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7474'. [ 927.513655][ T2147] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7475'. [ 927.642588][ T2153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7479'. [ 927.642628][ T2153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7479'. [ 927.707211][ T25] tipc: Node number set to 11578026 [ 927.898146][ T2167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7484'. [ 927.898197][ T2167] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 927.942398][ T2168] validate_nla: 4 callbacks suppressed [ 927.942419][ T2168] netlink: 'syz.1.7485': attribute type 1 has an invalid length. [ 927.979449][ T2168] netlink: 'syz.1.7485': attribute type 1 has an invalid length. [ 927.990955][ T2175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7486'. [ 928.042431][ T2179] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7487'. [ 928.243502][ T2200] netlink: 'syz.1.7494': attribute type 10 has an invalid length. [ 928.283862][ T2200] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.304641][ T2200] bond0: (slave team0): Enslaving as an active interface with an up link [ 928.359044][ T2206] netlink: 'syz.0.7495': attribute type 2 has an invalid length. [ 928.620532][ T2222] bond9: option fail_over_mac: invalid value (16) [ 928.622578][ T2222] bond9 (unregistering): Released all slaves [ 928.715211][ T2229] tipc: Enabling of bearer rejected, failed to enable media [ 928.715383][ T2227] netlink: 'syz.2.7504': attribute type 21 has an invalid length. [ 929.303765][ T2271] syzkaller0: entered promiscuous mode [ 929.303787][ T2271] syzkaller0: entered allmulticast mode [ 929.321154][ T2269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 929.334124][ T2280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.617439][ T2321] sctp: [Deprecated]: syz.4.7530 (pid 2321) Use of int in max_burst socket option deprecated. [ 932.617439][ T2321] Use struct sctp_assoc_value instead [ 932.918668][ T2344] veth1_to_bond: entered allmulticast mode [ 932.919329][ T2344] veth1_to_bond: entered promiscuous mode [ 932.923033][ T2343] netlink: 'syz.3.7536': attribute type 1 has an invalid length. [ 932.991698][ T2338] xt_CT: No such helper "pptp" [ 933.012583][ T2343] bond10: entered promiscuous mode [ 933.014240][ T2343] 8021q: adding VLAN 0 to HW filter on device bond10 [ 933.133237][ T2343] 8021q: adding VLAN 0 to HW filter on device bond10 [ 933.133623][ T2343] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 933.133643][ T2343] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 933.153826][ T2343] bond10: (slave ip6gre2): making interface the new active one [ 933.153850][ T2343] ip6gre2: entered promiscuous mode [ 933.164123][ T2343] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 933.165009][ T2340] veth1_to_bond: left promiscuous mode [ 933.165198][ T2340] veth1_to_bond: left allmulticast mode [ 933.293094][ T2364] __nla_validate_parse: 12 callbacks suppressed [ 933.293113][ T2364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7541'. [ 933.464688][ T2372] netlink: 'syz.3.7545': attribute type 33 has an invalid length. [ 933.499168][ T2372] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 933.505194][ T2372] bond11 (unregistering): Released all slaves [ 933.621838][ T2375] netlink: 'syz.4.7544': attribute type 1 has an invalid length. [ 933.695054][ T2375] 8021q: adding VLAN 0 to HW filter on device bond5 [ 933.719186][ T2375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7544'. [ 933.978009][ T2398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7551'. [ 933.993600][ T2409] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 933.994425][ T2409] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 934.130526][ T2414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7556'. [ 934.387665][ T2441] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 934.440210][ T2448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7562'. [ 934.611369][T11993] IPVS: starting estimator thread 0... [ 934.691617][ T2461] sctp: [Deprecated]: syz.2.7570 (pid 2461) Use of int in maxseg socket option. [ 934.691617][ T2461] Use struct sctp_assoc_value instead [ 934.697525][ T2459] IPVS: using max 34 ests per chain, 81600 per kthread [ 934.741823][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 934.821581][ T2478] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7573'. [ 934.877088][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7571'. [ 934.877119][ T2471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7571'. [ 934.877253][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7571'. [ 935.124503][ T2490] netlink: 'syz.2.7578': attribute type 3 has an invalid length. [ 935.352600][ T2494] netlink: 'syz.3.7577': attribute type 2 has an invalid length. [ 935.389890][ T2494] : entered promiscuous mode [ 935.392491][ T2510] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.393014][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.394082][ T2510] bridge0: entered allmulticast mode [ 935.474965][ T2510] bridge_slave_1: left allmulticast mode [ 935.474992][ T2510] bridge_slave_1: left promiscuous mode [ 935.475193][ T2510] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.502804][ T2510] bridge_slave_0: left allmulticast mode [ 935.503828][ T2510] bridge_slave_0: left promiscuous mode [ 935.504117][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.744190][ T2530] xt_l2tp: invalid flags combination: 0 [ 935.986967][ T2552] block nbd6: Unsupported socket: should be TCP or UNIX. [ 936.409507][ T2585] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 936.410170][ T2589] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 936.440826][ T2584] sctp: [Deprecated]: syz.2.7601 (pid 2584) Use of int in max_burst socket option. [ 936.440826][ T2584] Use struct sctp_assoc_value instead [ 936.512765][ T2593] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 936.530176][ T2595] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 936.571052][ T2598] netlink: 'syz.3.7606': attribute type 1 has an invalid length. [ 936.571073][ T2598] netlink: 'syz.3.7606': attribute type 4 has an invalid length. [ 936.571727][ T2598] netlink: 'syz.3.7606': attribute type 1 has an invalid length. [ 936.571741][ T2598] netlink: 'syz.3.7606': attribute type 4 has an invalid length. [ 936.771859][ T2610] veth0_macvtap: entered allmulticast mode [ 936.771988][ T2610] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 937.024717][ T2635] netlink: 'syz.0.7615': attribute type 4 has an invalid length. [ 937.030526][ T2635] netlink: 'syz.0.7615': attribute type 7 has an invalid length. [ 937.214737][ T2649] nbd: must specify a device to reconfigure [ 937.845504][ T2688] nbd: must specify a device to reconfigure [ 938.052097][ T2707] xt_hashlimit: size too large, truncated to 1048576 [ 938.052097][ T2697] xt_hashlimit: size too large, truncated to 1048576 [ 938.137018][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.142167][ T2695] bridge_slave_0 (unregistering): left allmulticast mode [ 938.142193][ T2695] bridge_slave_0 (unregistering): left promiscuous mode [ 938.142259][ T2695] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.450007][ T2732] xt_MASQUERADE: bad MAP_IPS. [ 938.462042][ T2731] __nla_validate_parse: 74 callbacks suppressed [ 938.462061][ T2731] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7638'. [ 938.496385][ T2732] xt_MASQUERADE: bad MAP_IPS. [ 938.632476][ T2756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.640291][ T2758] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 938.671713][ T2741] veth5: entered allmulticast mode [ 938.759775][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7644'. [ 938.759798][ T2768] nbd: must specify a device to reconfigure [ 938.859156][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7645'. [ 938.859247][ T2772] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 938.859995][ T2772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7645'. [ 939.237994][ T2794] Cannot find add_set index 46338 as target [ 939.349388][ T2798] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 939.373726][ T2799] vlan1: entered allmulticast mode [ 939.373748][ T2799] veth0_vlan: entered allmulticast mode [ 939.374158][ T2798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7650'. [ 939.511288][ T2807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7653'. [ 939.512799][ T2807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7653'. [ 939.601391][ T2816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7656'. [ 939.601414][ T2816] nbd: must specify a device to reconfigure [ 939.749620][ T2832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7660'. [ 939.926373][ T2841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.523625][ T2818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.565122][ T2818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.764921][ T2861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7663'. [ 940.953683][ T2818] veth1_vlan: left allmulticast mode [ 941.134571][ T2876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.138060][ T59] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.138091][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.138898][ T59] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.138922][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.138953][ T59] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.138976][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.139005][ T59] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.139026][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.180498][ T2876] tipc: Enabled bearer , priority 0 [ 941.459894][ T2898] nbd: must specify a device to reconfigure [ 941.541439][ T2910] 8021q: VLANs not supported on gre0 [ 942.300298][T13086] tipc: Node number set to 2035774871 [ 942.521092][ T2959] nbd: must specify a device to reconfigure [ 942.541356][ T2953] syzkaller0: entered promiscuous mode [ 942.541378][ T2953] syzkaller0: entered allmulticast mode [ 943.065221][ T2999] nbd: must specify a device to reconfigure [ 943.467777][ T3034] IPv4: Oversized IP packet from 127.202.26.0 [ 943.610994][ T3039] __nla_validate_parse: 12 callbacks suppressed [ 943.611007][ T3039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7707'. [ 943.611017][ T3039] nbd: must specify a device to reconfigure [ 943.719595][ T3045] validate_nla: 1 callbacks suppressed [ 943.719614][ T3045] netlink: 'syz.1.7711': attribute type 4 has an invalid length. [ 943.737915][ T3049] netlink: 'syz.3.7710': attribute type 1 has an invalid length. [ 943.737934][ T3049] netlink: 'syz.3.7710': attribute type 4 has an invalid length. [ 943.737946][ T3049] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7710'. [ 943.990208][ T3062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7714'. [ 943.990392][ T3061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7714'. [ 944.102860][ T3073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7718'. [ 944.181385][ T3078] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7720'. [ 944.181406][ T3078] nbd: must specify a device to reconfigure [ 944.246802][ T3079] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 944.246916][ T3079] syzkaller1: Refused to change device type [ 944.271739][ T3082] netlink: 'syz.1.7721': attribute type 9 has an invalid length. [ 944.477798][ T3094] openvswitch: netlink: IP tunnel dst address not specified [ 944.723262][ T3109] openvswitch: netlink: VXLAN extension 61 out of range max 1 [ 944.821045][ T3113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7729'. [ 944.939898][ T3120] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7731'. [ 944.939950][ T3120] nbd: must specify a device to reconfigure [ 945.062526][ T3128] IPVS: set_ctl: invalid protocol: 44 172.30.1.3:20003 [ 945.418141][ T3149] macvtap0: entered allmulticast mode [ 945.590769][ T3165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7743'. [ 945.610464][ T3165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7743'. [ 945.678032][ T3174] nbd: must specify a device to reconfigure [ 945.881458][ T3192] netlink: 'syz.2.7752': attribute type 1 has an invalid length. [ 945.935081][ T3192] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 945.963645][ T3192] macvlan1: entered promiscuous mode [ 945.963660][ T3192] macvlan1: entered allmulticast mode [ 945.964098][ T3192] bond16: entered promiscuous mode [ 945.964752][ T3192] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 945.965303][ T3192] bond16: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 945.965566][ T3192] bond16: left promiscuous mode [ 946.612700][ T3254] netlink: 'syz.2.7763': attribute type 1 has an invalid length. [ 946.817771][ T3268] team0: Device gtp0 is up. Set it down before adding it as a team port [ 946.881699][ T3275] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 947.016889][ T3280] bond17: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 947.021763][ T3280] bond17 (unregistering): Released all slaves [ 947.222339][ T3292] netlink: 'syz.2.7774': attribute type 1 has an invalid length. [ 947.222360][ T3292] netlink: 'syz.2.7774': attribute type 268 has an invalid length. [ 947.401402][ T3301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.488815][ T3301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.508479][ T3307] Cannot find set identified by id 0 to match [ 947.535725][ T3305] bond13: option arp_all_targets: invalid value (18446744073709551613) [ 947.538836][ T3305] bond13 (unregistering): Released all slaves [ 947.723437][ T3313] ip_tables: iptables: counters copy to user failed while replacing table [ 947.743358][ T3321] netlink: Invalid conntrack timeout [ 947.743390][ T3321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.362199][ T3361] netlink: 'syz.3.7793': attribute type 2 has an invalid length. [ 948.519401][ T3373] vlan4: entered allmulticast mode [ 948.519419][ T3373] bridge0: entered allmulticast mode [ 948.521540][ T3373] bridge0: port 1(erspan0) entered blocking state [ 948.521714][ T3373] bridge0: port 1(erspan0) entered disabled state [ 948.521842][ T3373] erspan0: entered allmulticast mode [ 948.524009][ T3373] erspan0: entered promiscuous mode [ 948.524960][ T3373] bridge0: port 1(erspan0) entered blocking state [ 948.525056][ T3373] bridge0: port 1(erspan0) entered forwarding state [ 948.632391][ T3378] __nla_validate_parse: 50 callbacks suppressed [ 948.632411][ T3378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7799'. [ 948.885108][ T3395] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7804'. [ 948.904850][ T3395] gretap0: entered promiscuous mode [ 949.045762][ T3399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7805'. [ 949.452169][ T3420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7809'. [ 949.583697][ T3426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7812'. [ 949.583732][ T3426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7812'. [ 949.698935][ T3431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7814'. [ 950.820628][ T3436] netlink: 'syz.4.7816': attribute type 4 has an invalid length. [ 951.006975][ T3441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.007677][ T3441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.346857][ T31] INFO: task kworker/0:1H:1992 blocked for more than 143 seconds. [ 951.346881][ T31] Not tainted syzkaller #0 [ 951.346891][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 951.346899][ T31] task:kworker/0:1H state:D stack:26848 pid:1992 tgid:1992 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 951.346948][ T31] Workqueue: kblockd blk_mq_run_work_fn [ 951.347144][ T31] Call Trace: [ 951.347155][ T31] [ 951.347167][ T31] __schedule+0x17db/0x58f0 [ 951.347304][ T31] ? __pfx___schedule+0x10/0x10 [ 951.347333][ T31] ? schedule+0x90/0x2b0 [ 951.347355][ T31] schedule+0x164/0x2b0 [ 951.347376][ T31] schedule_timeout+0x152/0x2c0 [ 951.347437][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 951.347463][ T31] ? __pfx_process_timeout+0x10/0x10 [ 951.347527][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 951.347547][ T31] ? prepare_to_wait_event+0x436/0x480 [ 951.347595][ T31] nbd_queue_rq+0x96f/0xff0 [ 951.347682][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 951.347699][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 951.347728][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 951.347758][ T31] ? sbitmap_get+0x229/0x390 [ 951.347903][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 951.347924][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 951.347950][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 951.347992][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 951.348021][ T31] ? lock_acquire+0x115/0x350 [ 951.348043][ T31] ? process_scheduled_works+0x97a/0x1630 [ 951.348085][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 951.348107][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 951.348137][ T31] blk_mq_run_work_fn+0x16c/0x300 [ 951.348161][ T31] ? process_scheduled_works+0x97a/0x1630 [ 951.348184][ T31] process_scheduled_works+0xc3d/0x1630 [ 951.348241][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 951.348310][ T31] ? assign_work+0x3cf/0x5d0 [ 951.348337][ T31] worker_thread+0xa47/0xfb0 [ 951.348374][ T31] ? __kthread_parkme+0x71/0x1f0 [ 951.348408][ T31] kthread+0x38b/0x480 [ 951.348426][ T31] ? __pfx_worker_thread+0x10/0x10 [ 951.348446][ T31] ? __pfx_kthread+0x10/0x10 [ 951.348465][ T31] ret_from_fork+0x514/0xb70 [ 951.348496][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 951.348512][ T31] ? __switch_to+0xc89/0x1420 [ 951.348562][ T31] ? __pfx_kthread+0x10/0x10 [ 951.348580][ T31] ret_from_fork_asm+0x1a/0x30 [ 951.348629][ T31] [ 951.348827][ T31] [ 951.348827][ T31] Showing all locks held in the system: [ 951.348839][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 951.348852][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 951.348916][ T31] locks held by kworker/u8:7/1023: 3, on CPU#0: [ 951.348929][ T31] #0: ffff88803284e940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.348975][ T31] #1: ffffc90004f37c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349022][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 951.349178][ T31] locks held by kworker/0:1H/1992: 4, on CPU#0: [ 951.349191][ T31] #0: ffff88801f2a2940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349237][ T31] #1: ffffc90006a17c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349283][ T31] #2: ffff888026dd5198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 951.349329][ T31] #3: ffff88802745e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 951.349380][ T31] locks held by getty/5372: 2, on CPU#1: [ 951.349392][ T31] #0: ffff888032f240a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 951.349527][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 951.349574][ T31] locks held by kworker/u8:16/11993: 3, on CPU#0: [ 951.349587][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349631][ T31] #1: ffffc9001b257c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349669][ T31] #2: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 951.349799][ T31] locks held by kworker/u8:17/23736: 5, last CPU#0: [ 951.349812][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349857][ T31] #1: ffffc900041afc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 951.349902][ T31] #2: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 951.349955][ T31] #3: ffffffff8ee38920 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 951.349997][ T31] #4: ffffffff8ebff6e0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 951.350050][ T31] locks held by udevd/26879: 1, on CPU#0: [ 951.350062][ T31] #0: ffff888026f97350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 951.350160][ T31] locks held by syz.0.7808/3404: 1, on CPU#0: [ 951.350173][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 951.350261][ T31] locks held by syz.0.7808/3406: 1, last CPU#1: [ 951.350274][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 951.350316][ T31] locks held by syz.0.7808/3407: 1, on CPU#0: [ 951.350328][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 951.350368][ T31] locks held by syz.0.7808/3410: 1, on CPU#0: [ 951.350380][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 951.350420][ T31] locks held by syz.0.7808/3411: 1, on CPU#0: [ 951.350479][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 951.350526][ T31] locks held by syz.0.7808/3413: 1, on CPU#0: [ 951.350540][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x37f/0x490 [ 951.350631][ T31] locks held by syz.2.7812/3426: 2, on CPU#0: [ 951.350646][ T31] #0: ffffffff907bbeb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 951.350701][ T31] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 951.350748][ T31] locks held by syz.1.7813/3428: 1, on CPU#0: [ 951.350761][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250 [ 951.350836][ T31] locks held by syz.3.7814/3427: 1, on CPU#0: [ 951.350850][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410 [ 951.350978][ T31] locks held by syz.3.7814/3431: 2, on CPU#0: [ 951.350992][ T31] #0: ffffffff907bece8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 951.351045][ T31] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 951.351087][ T31] locks held by syz.4.7820/3447: 1, on CPU#1: [ 951.351098][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 951.351150][ T31] locks held by syz.4.7820/3448: 1, on CPU#0: [ 951.351163][ T31] #0: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 951.351207][ T31] [ 951.351212][ T31] ============================================= [ 951.351212][ T31] [ 951.351226][ T31] NMI backtrace for cpu 0 [ 951.351242][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 951.351262][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.351272][ T31] Call Trace: [ 951.351280][ T31] [ 951.351287][ T31] dump_stack_lvl+0xe8/0x150 [ 951.351313][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 951.351404][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 951.351440][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 951.351469][ T31] sys_info+0x135/0x170 [ 951.351518][ T31] watchdog+0xfd7/0x1030 [ 951.351555][ T31] ? watchdog+0x1c7/0x1030 [ 951.351580][ T31] kthread+0x38b/0x480 [ 951.351599][ T31] ? __pfx_watchdog+0x10/0x10 [ 951.351614][ T31] ? __pfx_kthread+0x10/0x10 [ 951.351632][ T31] ret_from_fork+0x514/0xb70 [ 951.351653][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 951.351671][ T31] ? __switch_to+0xc89/0x1420 [ 951.351699][ T31] ? __pfx_kthread+0x10/0x10 [ 951.351718][ T31] ret_from_fork_asm+0x1a/0x30 [ 951.351760][ T31] [ 951.351767][ T31] Sending NMI from CPU 0 to CPUs 1: [ 951.351798][ C1] NMI backtrace for cpu 1 [ 951.351812][ C1] CPU: 1 UID: 0 PID: 10530 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 951.351833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.351845][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 951.351923][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 951.351954][ C1] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 951.351972][ C1] RSP: 0018:ffffc90003a9f340 EFLAGS: 00000293 [ 951.351988][ C1] RAX: ffffffff8a8f459b RBX: ffff88802bec3880 RCX: ffff88802e871f40 [ 951.352003][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 951.352014][ C1] RBP: 0000000000000037 R08: ffffffff8a8f408f R09: 0000000000000000 [ 951.352027][ C1] R10: 000000000000000a R11: 0000000000000000 R12: 0000000000000000 [ 951.352039][ C1] R13: 00000000000000f9 R14: dffffc0000000000 R15: 0000000000008002 [ 951.352052][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 951.352068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.352081][ C1] CR2: 000000110c39db37 CR3: 000000003d7c6000 CR4: 00000000003526f0 [ 951.352098][ C1] Call Trace: [ 951.352105][ C1] [ 951.352112][ C1] __ipv6_addr_label+0x2eb/0x3b0 [ 951.352142][ C1] ? ipv6_addr_label+0x2f/0x240 [ 951.352167][ C1] ipv6_addr_label+0xdd/0x240 [ 951.352193][ C1] ipv6_get_saddr_eval+0x53d/0xee0 [ 951.352215][ C1] __ipv6_dev_get_saddr+0x1af/0x440 [ 951.352274][ C1] ipv6_dev_get_saddr+0x2bf/0xbb0 [ 951.352301][ C1] ? lock_acquire+0x115/0x350 [ 951.352319][ C1] ? ipv6_dev_get_saddr+0x159/0xbb0 [ 951.352346][ C1] ? __pfx_ipv6_dev_get_saddr+0x10/0x10 [ 951.352376][ C1] ? ip6_route_output_flags+0x462/0x5d0 [ 951.352425][ C1] ? ip6_dst_lookup_tail+0x1ff/0x1610 [ 951.352448][ C1] ip6_dst_lookup_tail+0xeaf/0x1610 [ 951.352470][ C1] ? __alloc_skb+0x27a/0x7a0 [ 951.352521][ C1] ? worker_thread+0xa47/0xfb0 [ 951.352545][ C1] ? ret_from_fork+0x514/0xb70 [ 951.352561][ C1] ? ip6_dst_lookup_tail+0x1ff/0x1610 [ 951.352585][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 951.352607][ C1] ? lock_acquire+0x115/0x350 [ 951.352636][ C1] ? dst_cache_get_ip6+0xf8/0x7a0 [ 951.352692][ C1] ip6_dst_lookup_flow+0x89/0x150 [ 951.352716][ C1] send6+0x4ea/0x920 [ 951.352741][ C1] ? send6+0x255/0x920 [ 951.352760][ C1] ? __pfx_send6+0x10/0x10 [ 951.352779][ C1] ? lock_acquire+0x115/0x350 [ 951.352802][ C1] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 951.352829][ C1] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 951.352853][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 951.352877][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 951.352898][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 951.352934][ C1] ? rcu_is_watching+0x16/0xb0 [ 951.352967][ C1] ? process_scheduled_works+0x97a/0x1630 [ 951.352991][ C1] process_scheduled_works+0xc3d/0x1630 [ 951.353031][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 951.353058][ C1] ? assign_work+0x3cf/0x5d0 [ 951.353084][ C1] worker_thread+0xa47/0xfb0 [ 951.353122][ C1] kthread+0x38b/0x480 [ 951.353140][ C1] ? __pfx_worker_thread+0x10/0x10 [ 951.353164][ C1] ? __pfx_kthread+0x10/0x10 [ 951.353182][ C1] ret_from_fork+0x514/0xb70 [ 951.353201][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 951.353218][ C1] ? __switch_to+0xc89/0x1420 [ 951.353244][ C1] ? __pfx_kthread+0x10/0x10 [ 951.353262][ C1] ret_from_fork_asm+0x1a/0x30 [ 951.353298][ C1] [ 951.353882][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 952.523028][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 952.532132][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.542206][ T31] Call Trace: [ 952.545504][ T31] [ 952.548435][ T31] vpanic+0x56d/0xa60 [ 952.552426][ T31] ? __pfx___schedule+0x10/0x10 [ 952.557273][ T31] ? __pfx_vpanic+0x10/0x10 [ 952.561782][ T31] panic+0xc5/0xd0 [ 952.565535][ T31] ? __pfx_panic+0x10/0x10 [ 952.569953][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 952.575412][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 952.580818][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 952.586980][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 952.593151][ T31] watchdog+0x1030/0x1030 [ 952.597497][ T31] ? watchdog+0x1c7/0x1030 [ 952.601919][ T31] kthread+0x38b/0x480 [ 952.605987][ T31] ? __pfx_watchdog+0x10/0x10 [ 952.610670][ T31] ? __pfx_kthread+0x10/0x10 [ 952.615259][ T31] ret_from_fork+0x514/0xb70 [ 952.619846][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 952.624952][ T31] ? __switch_to+0xc89/0x1420 [ 952.629639][ T31] ? __pfx_kthread+0x10/0x10 [ 952.634229][ T31] ret_from_fork_asm+0x1a/0x30 [ 952.639012][ T31] [ 952.642185][ T31] Kernel Offset: disabled [ 952.646542][ T31] Rebooting in 86400 seconds..