last executing test programs: 2.945460216s ago: executing program 2 (id=9500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r12, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="58020000", @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf256500000008000300", @ANYRES32=r14, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) socket$nl_route(0x10, 0x3, 0x0) 2.869231563s ago: executing program 1 (id=9501): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000a00000095000000000000009500a5050000a05c3a3f19a578c06c500000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r1, 0x17}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x6f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4044010) 2.776384431s ago: executing program 1 (id=9503): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x86d637f14e17788c}, 0x40804) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 2.67530194s ago: executing program 3 (id=9505): socketpair(0x28, 0x6, 0x0, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000040)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @random="9015559c12e2", @device_b, {0x7, 0x6}, "", @value={0x7, 0x0, 0x1, 0x0, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @random="49d18d487ca0e4d74e76a1abbb7ce103e426476c7748657f88eb28db561fc5e4debb8fc8ed962db7d8b75fff0e07"}, 0x4c) 2.528325077s ago: executing program 2 (id=9506): r0 = socket(0x1, 0x4, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0), 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000004e002500ec06f4f995b2e8ff0a04f55f080001000201000208d3fc8005000080", 0x24) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@srh={0xf5, 0xc, 0x4, 0x6, 0x3, 0x8, 0x8, [@private0, @private2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x32}, @private0]}, 0x68) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r4, &(0x7f0000000580)=0x80, 0x43) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @remote, r1}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r5, 0x0, 0xffffffffffffff2b, 0x0, &(0x7f0000000180)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.469303946s ago: executing program 4 (id=9507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 2.340842825s ago: executing program 4 (id=9508): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x84, 0xb, 0x0, &(0x7f0000000dc0)) 2.340444141s ago: executing program 2 (id=9509): unshare(0x26020480) r0 = socket(0x2a, 0x2, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) unshare(0x8040600) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0xfa, 0x6, @remote}, 0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r2) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xc0}}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r6, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4077, 0xfed}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000006c0)=""/4083, 0xff3}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x7}, 0x32120) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) 2.23920866s ago: executing program 4 (id=9510): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006dfb752b11e026fb0af21a0713a7fc6cda9fb7203b3e4b67b85845ab21d266fcc8a529f6afc7e6b9b9da4a39b30f14ed1bb243736d1ba1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbfb, {0xb}}, 0x14}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) sendfile(r7, 0xffffffffffffffff, 0x0, 0x3050) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) vmsplice(r7, &(0x7f0000000500), 0x0, 0xf) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0a00030000000000140016808eff01800c000700ffffffff090000000800090000000000"], 0x3c}}, 0x0) 2.053931245s ago: executing program 3 (id=9511): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x64}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}}, 0x0) 1.945812306s ago: executing program 1 (id=9512): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x440a0}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x820}, 0xc0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x440a0}, 0x40004) (async) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x820}, 0xc0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) 1.82463882s ago: executing program 3 (id=9513): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x260, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="024ea320ebb2721a48c807e9d62e327b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "83f4d1c3ea00601e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "666cece8281ba230"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f7f76a319f23de5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8c3cebeacaf4801e848c628a6ab7e0b2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c36a00ed17d63c3090245331608b0fd96b2e32ba1879622f7b1ca11e1d4a522c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6b3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c5be593250283eb1355073d64660740e619f71ca431f1ef03975b92ec7576f02"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d8739ee66c9c62bd"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8001}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="60213446b81022884338177c6be999017cccbc51898b93de"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="af265f42d9b88fd69c96b79bbe269fb44e5b2fc548ffd3742473818ebbfa88e9"}]}, @NL80211_ATTR_REKEY_DATA={0xec, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be12299d6fdff50ba538e2800590d651"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b155334f0b525e07b21b1dcbf2fda541cc2ea234021373843b2235227cb47754"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="08f8d48ecbdeec84f45fde1fe73c56653e1a1bdfdbf04d3eebd0dd64ed961b6c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cc27fe1f1f770e151673d23c325d032a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6fcd3ef463f3a7e51aeaaee086a3d031cbcb0d3bd543f859f974f3fbf90e03c4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3a3b7e45a82b1e611d9c2f0b464e2ba6f4f35deca509ca05d2a073ad9933a9de"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d11258b7ab006012251a13ed9df342b3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "95fed2e977c5c571"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a6483f38f11d028a6c2918a7d26252d79070b03564cb32be413cd140e5c2269a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "77221143b2ed996b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="376b25556ec6b14ac2c53dc253e41a32"}]}]}, 0x260}, 0x1, 0x0, 0x0, 0xdb0d0a8a6b7d34e5}, 0x80) (async) close(r0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x65, {[@generic={0x13, 0x4, "2b93"}]}}}}}}}}, 0x0) 1.77409666s ago: executing program 1 (id=9514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x9, 0x6, 0x21bd]}]}, 0x54}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet(0x2, 0xa, 0x8001) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x60000016}) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x9, 0x6, 0x21bd]}]}, 0x54}}, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_create1(0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket$inet(0x2, 0xa, 0x8001) (async) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x60000016}) (async) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x1000, 0x0, 0x0) (async) close(r0) (async) 1.761951404s ago: executing program 3 (id=9515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={&(0x7f0000000000)="925fcd0a7503f59f3c1a9d030713045fb1442751031515abefc4e6668b028e74d0076c4194f82b624ddec35db965547f47a6bef6c4d56e9c50bc76865a4444f4e0c24dec8ffd938dfc442fefb31f06d2f3da0686712300758b2756e5ac2be5a43d24c6dc8ef5464213de2e98d2535d4a2ed3d90269e702ca01", &(0x7f0000000200)=""/188, &(0x7f0000000100)="69f0741e5d19cac73e6a2ae6953746e82083221b65c4d1", &(0x7f0000000480)="e7ed5fd281b1b6404dbd083aa6f3a3e00906555a0d75c194e833919ccedd341f60dbe93e1bfad995511267b28262a9b865adc58a664965ab9dd20762844e4496256b6acf4302c2c08eecdd2c4fce22899156dc3d64978bcd61390fbbe80f329a461b85d93c0b049a6b9d5502add93845f1357a3503292b0d4d05d2657f64b78febc75c19c44dc65e74505c88cdc8ff916040dedbd7168450b05e8bf8db726953d74b8f6ebeb00ca81134e385170f98b8fc49c3d06bc5c842a65824c5bfc7525224ce23abcba8b6e2f47b708cb26c3c1b496bf061e8202d71218f95a03d9a8c44f8af5859caefab3205", 0x911, r1, 0x4}, 0x38) (async, rerun: 32) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) 1.620726893s ago: executing program 0 (id=9516): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @dev}, &(0x7f0000000040)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0xf04, 0xfff, 0x51, 0x10010, 0x1, 0x3, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3}, 0x50) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000100)={{0xa3e, 0x2, 0xae1, 0x1a, 0xc9b}, [{0x100000001, 0x7, 0x4, 0x6}, {0x5, 0xffffffffffffffff, 0xa}]}) ioctl(r0, 0xff, &(0x7f0000000180)="82d061da84d4c0406e84f668ecf15a64c7a266b24d31f6d5b2e7757f848d2bfc95ec6216d4b972a39faba659b57518c0df16c18ec32c4b035f3a8001660c7467305100caa5290e962e41ebfa5cd47445d3ebb2960127f84738db638b85c592856a81c8ed1b283222b19f073c21d7e226eb8c00929322e2dbeb636c10c27366adc272aa789aaacfda09ccf3e2240e8289b9aadd56da99775e9aa7b380c4e9a99681f911137d97c75ed0c2a741ed69674a6154fce57621b4f716027673f21e30e5ef6ff836ee172e65275c978722e86a6778afc0f2bbb46f9ce232999f45603cb6feeaf4713824bda2a2a01ff658bb7492966c") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', r1, 0x29, 0xe, 0x18, 0x5, 0x20, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x9, 0xdb0}}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x420181, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @fwd={0x9}, @typedef={0xc}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x30, 0x2e, 0x2e, 0x30]}}, &(0x7f00000005c0)=""/76, 0x59, 0x4c, 0x0, 0x50}, 0x28) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x7, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x60a}], &(0x7f0000000440)='syzkaller\x00', 0x1, 0xaf, &(0x7f0000000480)=""/175, 0x40f00, 0x10, '\x00', 0x0, @flow_dissector=0x11, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x4, &(0x7f00000006c0)=[r2, r3, r2, r2, r2], &(0x7f0000000700)=[{0x3, 0xfffffc57, 0x0, 0x2}, {0x2, 0x4, 0xa, 0x9}, {0x3, 0x3, 0x8, 0x3}, {0x2, 0x3, 0x1, 0x2}], 0x10, 0x1}, 0x94) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000009c0)={{r6, &(0x7f0000000800)='\x00', 0x230800, &(0x7f0000000840)={@_ha_fsid={[0x8000]}, {0x4000, 0x2, 0xf, 0x4}}, 0x1, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x45e}, {[0x8, 0x4, 0xfffffff8]}, 0xfffffffe, 0x8d, &(0x7f0000000900)=""/141}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x20) sendto$inet6(r9, &(0x7f0000000a40)="e67026812537a1eecb541d5c059b567f4e456187cb608b02e7cea17423de74b5b3a761b5694e7b455bd710db67e31e6c433f278c871576764f0e98a6c7e52c48a79692d7d6a32e3d0ca952266708059fbe867c9ccd91aaa846abd1c257ec37a17a6f4aedcea8bee05eb95719feeaf605d99697dd49ef021e53b2758ac469b58f26168ee97a738fd2ed30f31410600737fb4b462a96466e56d6ce881f86773ca3453a1cbdce5e7fae67afd4c0ad7d88d940fac1528f22e8854821efa3fa1834e37f4876c64224ffafa025f716971ac9debf3ac62c4c2b66332d6e7e808c905e116f4c82973539d4a5b2cc4415e76628", 0xef, 0x2000c045, &(0x7f0000000b40)={0xa, 0x4e24, 0x0, @mcast1, 0x7fff}, 0x1c) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000b80)={0x5, 0x100, 0x0, 0x0, 0x200}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000c00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001e00)={r10, r13, "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", "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"}) sendmsg$nl_route(r5, &(0x7f0000002ec0)={&(0x7f0000002e00), 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)=@getstats={0x1c, 0x5e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x44804) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000002f00)=0x0, &(0x7f0000002f40)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=@base={0x19, 0x0, 0x86, 0xd5e, 0x2800, r2, 0x8, '\x00', r14, r9, 0x5, 0x1, 0x3}, 0x50) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000003000)={"94fa829ede21c3ba6f83fbef77ad8d2f", r12, r11, {0x7, 0x1}, {0x1, 0x5}, 0x200, [0x4a, 0x4, 0x7, 0x7, 0x5, 0x4, 0x100000001, 0x3, 0x642b, 0x682, 0x6, 0x88, 0x7fff, 0x6000000000, 0x8, 0x6]}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x5, 0x800, 0x0, 0x10400, 0xffffffffffffffff, 0x9, '\x00', r4, r6, 0x2, 0x4, 0x4, 0x0, @void, @value, @value=r9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003500)={0x11, 0x1a, &(0x7f0000003100)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0xb, 0x0, 0xffffffffffffffc0, 0x10}], &(0x7f0000003200)='syzkaller\x00', 0x5, 0xd7, &(0x7f0000003240)=""/215, 0x41000, 0x30, '\x00', r14, 0x0, r9, 0x8, &(0x7f0000003340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000003380)={0x0, 0xb, 0x10001, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000003440)=[r15], &(0x7f0000003480)=[{0x4, 0x1, 0xc, 0xc}, {0x2, 0x4, 0xe, 0x2}, {0x3, 0x4, 0x1, 0xc}, {0x3, 0x4, 0x0, 0xa}, {0x2, 0x3, 0x3, 0xa}, {0x1, 0x1, 0x3, 0x6}, {0x2, 0x4, 0x2, 0x4}], 0x10, 0x1000}, 0x94) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x10, 0x3fb, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000003700), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000003740)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x5c, r16, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '/dev/rfkill\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'syzkaller\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '%!\\,,-'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) 1.488879891s ago: executing program 0 (id=9517): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08"], 0x80}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000001c0)=0xffffffff, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.318684949s ago: executing program 2 (id=9518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 1.269419897s ago: executing program 0 (id=9519): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98021422576e1f8f1d2ac6dd60fa7599eba67979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330554e7680612e8d000224f9429bef58ae26f530809fe159a354b382c3870ba3d056636b917ddb64a17ce707d6e3d017c2c5b50be3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde8", 0xd6}, {&(0x7f00000002c0)="38007fd65c9029e981027b3a6c050fb3121743957001c2e59d46de25df78b5390bf3d6a6dc5d5b79bf8366de18ae307a8545e0e0d5d858fbd686d7fc8008e552b5bf913d0d0f23f778c03bbce9359f86bebb38ba426d3db6fbd1b2cd67ce985a87df6602c6baf3a2e41e762d77d4d9d1cb3f686dbd6f42357b9e689def3c95d869403ec988b10a0ed433b8307c4071bffc080683bf9f0e63932b5a37aebe7f7756d76c8ffc15f0084d62403b8fed94bc60f3", 0xb2}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="444bf65794ee0100240001006c625f686173685f737461747300000000000000030000000003000b0037982dbd0400000000000800070000000000ca2560ba7eb37b2b3e943690bd7f52fc525f603de8af8e35129266002d206c60749af0dce50ce031412a629fb7e433a6e14ea9322e34cedef8d4bae62ab3110668235fc9353e559e77ef2eda448126d4cd05b0e982"], 0x60}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x3f5}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}], {0x14, 0x3ed}}, 0x3c}}, 0xc144) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x421}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000140)={0x4, 0x3, 0x0, 0xffda}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x400, @remote, 0x2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e20, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x74) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x202, 0x1c, 0x1000}, 0x10) sendto$inet6(r6, &(0x7f0000000100)="ff", 0x1, 0x4000854, &(0x7f0000000300)={0xa, 0x4e1f, 0xbe7, @loopback, 0x800000c0}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', r3, 0x24}, 0x94) 1.268202881s ago: executing program 4 (id=9520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000800000006000000010000130400000002005f01cb4fb044e05000000e00000006000004030000000000000005000000f70a00000500000002000000970000000900000001000000030000000400000000000000ffffff7f0600000000000000060000000a0000000200000000000100002e71005f5f2e"], &(0x7f0000003340)=""/5, 0x8c, 0x5, 0x1, 0x6abb}, 0x28) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0xb) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00680ad5388e0f9a33801a6ffd50d38045f515", @ANYRES16=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x20000809}, 0x20004080) socket$inet6(0xa, 0x2, 0x0) close(0x3) bind(r1, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20020044}, 0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) r4 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x2, [{}, {}]}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)=ANY=[@ANYBLOB="4ca00000", @ANYRES16=r6, @ANYBLOB="01000000000000000000420000000e008e006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x4c}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4002}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x1b, 0xc, "9e2dbbf7668ba9feb91e8aedfd3965dad4000000000100"}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14}}, 0x88}}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000040)={'veth1\x00', {0x2, 0x0, @dev}}) 1.201392972s ago: executing program 2 (id=9521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6f}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.05140216s ago: executing program 3 (id=9522): r0 = socket$netlink(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 984.988374ms ago: executing program 2 (id=9523): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000e40)=""/248, 0xfb}, {&(0x7f0000000a40)=""/242, 0xf2}, {&(0x7f0000001380)=""/4097, 0x1001}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000780)=""/254, 0x64c84c1bcbe26ba6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20017c00000400428004000101000000800038952c1e4200"/42], 0x20}}, 0xc000) sendmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c53", 0x1d}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067", 0x33}], 0x2, &(0x7f0000003240)=ANY=[], 0xe10}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x40d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5419}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c845}, 0x20044050) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 892.47139ms ago: executing program 0 (id=9524): syz_emit_ethernet(0xe6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2030003d602226f383f86dd6757e16600b000ff00000000000000000000ffffe0000001fe8000000000000000000000000000bb1d0e04070400fcffff020000000000000000000000000001fc000000000000000000000000000001fc000000000000000000000000000001fe8000000000000000000000000700aafe8000000000000000000000000000bbfe800000000000000000000000000022fe8000000000000000000000000000aa210204013920f790ff020000000000000000000000000001330004000140000800010000000000000401f9c2040000000300000000000000"], 0x0) 809.391035ms ago: executing program 0 (id=9525): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x6, [0x3, 0xf9d0, 0x35a, 0x99, 0x7, 0x8]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x2, @private2, 0x7e}]}, &(0x7f0000000240)=0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000001680)={r0, 0x9, 0x101, "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"}) recvfrom(r0, &(0x7f0000000200)=""/29, 0x1d, 0x100, 0x0, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0xffffffff}, {0xfffffffd, 0x80000}]}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x6, [0x3, 0xf9d0, 0x35a, 0x99, 0x7, 0x8]}, &(0x7f0000000100)=0x14) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e24, 0x2, @private2, 0x7e}]}, &(0x7f0000000240)=0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000001680)={r0, 0x9, 0x101, "ad16a5cc3ff0f481de25b0b53d21d5cfecd2736e7614814b4d5a2ae1175e3701550a2134cb960bdcb6f5babd88f2844d249311cc121671ac927bab42974be9546788d1869aaf6997fddb15aec2633ffee34c1c5747965c1ba03c2a43590a7b95df9b550a3e8cd0eb4b10d04dd253ebc9340869ded1d6ac8432590aa07513c2113812666043ac4b28c3ae2c019877c415713abb3a74d032b9b9349f3c004fbb5210ad4de29838f52bd433ec413a2f4cb2c670c9721eca5de830af14e908a2367cfa8bfdaab53d446169c4d80b29bc1de744c46db2d912d59f5ab32d950b965c2f6365285c6a110a521e20fe1087eabe6396b6cc42d96146d710b8a73a6f65ce62bd57b3b720e8ffedcfebad3937541e2aa8c98e33b7e8a2ccc2b8e8a7715385cb4a88ae968371751e5417229619eba37b163e58d3eebf9bb93923a51ac72a0dade68ac3d29e47f9c202042c427b9fb0c23932e7627fa72dda6e6c27aab418e1ce7402e7c2c0a6191c90b1b2ae5f3cd399b7c04515a566b14e7f4ed24ecc051dfa558e493cd17e161285cd32b12085de25f3117ffa548a70cccc8a33924ba06476e18591afb1add92faf424c030e33b6955c80947a61d5a306a76e2c67067b48b05af7819301597e8570f1136c3b1bf5511b6fe9df7b13ac38b0697cab2bfa84f947b47037615cd46b69f6dff7f170e207d13a26b40f67b411d7c8f04cdd32e8ba74be85aff29d10504f6f663fdccb8ac764b81ed388e6165eaf3959ebc3d3cd4fc59a78ba70aaee64932db38216bfef7ea3f1ed57ee7709ff6bebf3910da8782d02f5aa49f9fb64a13b02ffdf1be979a5660d3d5bcfeb40bfd043231e09e30d5dd8deff275374280cff1f2264cb89e8cea1e7715ed642f16777bb93c90d963d29a4d9f410abb04267433a0c5b405053428e665a5b53422ba98d300fc9fd09d946adc59819aabe226da8e138f5f68a9e47c2feddd8460ec97a6cda86a60e89c99531b18bd20732c0ef1677bbffbbf1457cb8c3d5526aaedeb0de7b92897ffd2c2d6381d02c8cc63b6fe6dc6a1422ef10f63303efe40793168ea00933df47adc3f3b41e1cbeed04928844c30a2b7c2ae4ae2a3d31a47a4f8640ff64596ee2134884526263d411cd478023884582a8e1bb1113334c52cc46494817c1c3bf1872ef53e4cc4e5769f8ca281f69fb7a7bcc0b0ee4cf3783aa40d27559e23c6e45e94c36fd19c55e43cfd90faa7e7d5b72280db5276712b610f540ebc4e8c793b8515532564f7ef5d04c61467e9a52acb4b0125467fcace2d0466a7c8be854d3864efe39cd5138f8a24d042eadba738b69adcc1379952818c0d79890dad08bec0ed759124aaac09e7f5f2b5a2c1e88e5e2e123805576c63039b880403ee9c58704d9eb9b0a0100a6d180c0647d112db30e5d22203fe37c24b7fc9307fa196fb6b58665f27bc5b3a192e1c3c5d0ec0c4113fd431f7349987d93900b3af6702b10a6c4da3ea6abd133fef8d5f63113d0948ad76563f43c41dee7be05f8e9a033707d2dda03c6846aadaea1b2b33ff6b8b530fb7ac08d0a805ebf1d09a1f10fb6d9ac63867fcd6a7f2920ba9022e5c022193acfb0b0ef1ced4e455a2d89480469402e3f77d34fa0228260fe5ad418786add52a7d0f92443a76c6cd94ccc31712b5f542dde15491146a6dd35e8a57e8ac86fbdfff364470bac08e4e20cd472d1d87c6e760ba4f178bd7b8ce9e398affc355776f6a5fbfabb0997e171c7a216bfe8967c200ac7594a8772e07b20c37a4a4506d8571b7a01645c54e8fd294d958ddb2abde8a4d0e5d7fc26e3d96a3ce9320f654153ce28f0589df9af5c5b309f56921bcbdc9274d1ff1ba0b0547f21b1b270e602ec4192027bfe3be1dca8b471c49c4f92b605c9e5c568cda5232eebd454b556608e230e07b6697241c42f52bd72d6ff63f3ee2fdeaac96e6351a64d65fb3a33039112b0bdfe0ff979a6fb8f863e2f042d8254031252f0fe1b8cda51118e871121ea518b069cf2efc8aa467195dc38835041fbb4c5739b106437026b362deca62b603cc2e48095f1e6b0ab4288bbf90d580936f17e0d69f0d7bdf2b752ef2c4ba57c2c320c042fcd71cdd4a881768feda8cb28fc4b78b0d9e442b7453d686c9c468e7472c4062d57b94bf8acacce1ecb54d791e8cb3a5cffa1ed2bd707081844d889fc1d660ef0bdfe7c69450d741e1d3d9a6618d3b0f61d59dbb6874f283c74fcef5de8ea982f54593094bd0b773a74bfee874b930222cfbba24126c59e77abadb4d744ac61ea1fca392b2805440a6addc6809ed3bb57fb53048a003ecab4e9fca713627877275cfe6e8b9cbe900ce1f8ddcfb85b8e310df24f9d2da356d3b9dc92e6493f5431d8bc2084c4f145fe043ffcee180f714aa1907b5d85684e92687eca0288bf45d15a2e6ed9f37aed06980ab2df092d64aab6ab76d39002abd433dd09ba260d6c5baf4a05463bbcbc2f5b8a1c4f7bd22e8790cccca1ed20eb54e29479c44d40f2e51db3300fe9b768c7c1c925a3bd840aac0a8da1f07736743edbcb483cd9f4774241e2aec19da8e08586bbe42eee96238a7ca7e215194142cb9514e39660d3dc47d88f207dcd4737beb89407b7b732720a10d079f40e08507d12ccdb6889b0ef560bcce5f0d6b4a0c934945285bd1ca988cdf93575145a15aa4cbeabee70f771b40758af352957d0e57fc68f1be4619318d8b07e903d4e2e770ece396fd1345ac913ea9a030ef13fa66570e15bcb0ea721d7fbea0c5918a79b5f92620af6ce78e38b66c0cd1af83f4ef65b6cf9e13288b435acd4bc3eefb52009291d629c073c5e235da70659cf31b001b5310ccd79fe6b763b255658c943cd5145dca75518c51d503b133e37ca586fa424902d89c0db034a55b59b4616a30ff32105e8883e19fb93bb38e379322f8297e50139bae65e681afed465138dd42b2a03e7163af2c5f1fb497c8a9690d12f74603de0e1d984b52c1a4766bb35b4d4054709797bbd5fc9c35bc925a1dd261cd2e95ec433c30deff7f8f8bdf8decde5a1bd906febcb0c66864a637a82887933e7e724c3c120ee8f0de30f3684529445e16f2377067c90e87108453c9bb488a336fd558503d4562985b52bc1c9ad68eb541a4725082df8c7ec102613119d231179251201deb126743690f0c10be5ac294b9d6fcf71585ae5b3a338707acffb9719e7f9d6be2b384a5072fad4a9b0a2ea8c949c7b4c21abd62896c0e9489dc8480d4d34f4b7c76266aecb9999a7855dc0ed6f2618edcf923531b82ea916331c3c1aa5010f15ede8d0a70a8ec9e52406635fa19f274627410db21f450f22d0bd30b6475263e9697956bdc8eb69aa82e4b4c4ed258a20d4bea2685c29301d23fd759e2aebc6fd866a6a57644c405c151c02e71a2537b8ab064ed1a6b99666d86354a085eb7e050e55880d695f7cbcc5540e47cb7d84979d68c61f2e60dc7dbc104cdae826daaa7887a1b9ebfd5344ec329b701165de36f32a61f66ba501766a769d7fa69f0441b1b6c6c021863b6d274770cf241383f84f662ecce5c51a19dcca2cefdab8543005713295313475bfa94709655257cb0a18f54c34eb7609c5e956085a6df06789f34382d213a31a02ef3927db6f572ac230aaedcc6f98b491e6d3531c5a69074b7684c7e205746d98cc54266637089e16514b0b2d4e10e89817d4081890ad6da14592b849d7769dd9659e0e7592efa87baf87c991d006223403f189d8541bae4bfbd808f71ef77047c132f097a41273041781fe269047c5728c97b3e7e853e01e1613204da50ccd233b038e57889c2670cbff51d289f3f50d8ef4c96e85ab5f5d1c5394e066941c1132901594e362a19809424afc82109e316b080585ced599a243e2225aee299ee04350175a0f158acf4e173d10239b09c3e65a2f57f3e8d5a3e6de7411db1c4a6cad22ab9b1352bfd0c1eee23bda6ed02a484d7d07bbd85a9f61427a0160ad40b62ed4aa22a293f89582bb2f92f926b4b82601b24ced7136dce9a4e17ebd31a4993d0f1ef08c29db60a65b376b1a76ef3d94636e0e5f0dc7c94f9c9b7e2723ba983b01609db40cfa8e4c1cbb4f0ac1bf3ba1adab5baa87a66fde1535942a6aada791c4def9fe6d097edd3109c026c80ea464fe4d9698b32860ede72908b5592de979eff65487109a086023c63f92b52e9de06bb9d5a9eb868fea22bd19bdf39e77f142b8b7930fcb331bbfbbf10a97b13f0ea72e407faa602703749aaf48c26db44d6def1fab068e45a892b3c913848f764498f09d468e1b9824d625a66fa058ce18f4a1fbd47880730cacfda272b79a067cfafc94c1edfd385863a7cd392eb2bd5de4bd8f6c990e4ecac338e6a76223ab2ccb5451c1a6d5a94b487c50193493db0096d1d760716985421770c744d74a80636afef9a8e05ae0d1d9f0689f903698849dc8c0652a18dfbe9bd087f531e8a3ef445cce8d1c95eed2ceeecef224c3ae74c8881bb3d44ad619cce2a52ddefb937be4e1396206b87f02a4130f359361daf88b64849f36c97aacf81578199df244be81088702f4b1df9b196c9db6308e933befe14cc452673516b4b48e1fdf27a1697b1b0dd2425bc70b23b7dae97adf7372ff3fd253f3af78a9019a2af70e34f94b0054d8738c24a459c8e058d5e1a7cb7ad2ef783a6dffe79875a9af9965ade6c2e26226a633d59dc6a18d64368ec9cc96928ee0f76386067aa35f2aded7601dc5626a8b65063b5230ed1d260f454267fb442664664b7523c188589fec22f879362fedc5bf36155064b6284ce38e43f7a30f05114c68b11cceb314cbd670ba7fe502a48399c0ca7a22399d313435e717789a66fe6185b218a90161e8f5a7dde9b02615768ceab1337bfb4a9fd6d17839a29ad46d623d665fda390f2e8624d0f53d6799c3926600191648773c9bd3362e461f1ebd93fc83fefc5668765f756b2f41e64b8bd36bc1454a4c49def8cc87b9654875197adcc138f815e4dda2f71e4371bf96d7867c549c5fd3094f8425f8ade94255dce80e9485c81f08720d037e883634a89964c0fde909568e66a337dd9f297b99f6367267f15c829297fce8cdd774c5d30d8a578b897b1452a8ec4b8bad8bb5821592f34be4e5e3b631aa9fbc87ffebe26df282e49afae72ec84044f1116ed72bc13d40a921fc62589a047e94c0f1a0a3c7ff49a0097f76804efa892d1863a391111da70e943d5a20449357e013e2cceb27a5362ffd6025517b1c8883dd7f81fd75e7f56ff34aecc28e762052dba3a1947d4dbd1e3738cba2afbebdbd54930627ffeeab46bfb4e7cf6c6e84772672a2eeacd929ea55cdeb245a9b2224dff8ca02fe601e41db112cf176bdf460029d4781d71f335bc4dc0c25197003d117cfd544350e4ff60095744b22ed7769b62ff1ca57d19aee2f9e34bdbfa39c97ba7718806cebcbf6139ebde4ae46cbd9461b44896c3991397315135c7b11db5b40d7b398270139cf348a153f4ab62145d7aee08df6a2b798a4acc53c8b12526a3659ee641cdaf1697d10a397c82ded2bb4f3d1fed1f513dd70c38ac78e28cd4b2b5280809a2b85501bacdea05e255aa7f37acd2ef71859fa3e825a813089d6bedb58093052731b59f186b8c53e9e1502b90d6c46bdacfc46d4a97338a61cb918f5eaa9b3e0e5fed9edeb4d97791f793ca357388ac1bfb82568f9511803a2559befc0d9a14f318c4194572fd31902780bd4060e418ee81151bdd65bcbc848352d039c72b4e415869236feec3bab3e41f80f7e6899d79c0e690c"}) (async) recvfrom(r0, &(0x7f0000000200)=""/29, 0x1d, 0x100, 0x0, 0x0) (async) socket$inet(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301, 0xffffffff}, {0xfffffffd, 0x80000}]}}) (async) 548.549402ms ago: executing program 1 (id=9526): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8c04}, 0x40810) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) socketpair(0x23, 0x800, 0xfb6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r5, 0x231, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x64a863f73ef017bb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2f68}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @NL80211_ATTR_DURATION={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c091}, 0xc080) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x18, {0x530, @bearer=@l2={'ib', 0x3a, 'gre0\x00'}}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004880) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000007c0)=0x2, &(0x7f0000000800)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$802154_dgram(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)="9f28ba38334d844266ae88e31f703083f20fd3e62100f5f1f5ac3aac50f18701dceef6baa4039b201073f6912a359d8c179818bfa58e7829b97ea0e397c6d837f5de8cd61abd1f060cf7f599275066e958533d5dc4b9b09ab0e7d8d20f681400dedb4545c922f6629676368b9a6e33e8fd0dd1", 0x73}}, 0x240000c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xfdcd2c5406843560}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1cc, 0x9, 0xa, 0x901, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_USERDATA={0xed, 0xd, 0x1, 0x0, "49046fc2b96f0a74d8d346fc61ce8bcf1675ca56807bd860376644e0c895eaa180bf22d6cc4925487ef3a973f61a6d99cbce59c9cace895db141c8c96bc0de1b957de03b718ec3bda28a61cb986380c880ab57bc11396af2b1591c2ad075dc090f0acaeb5a004db0eabd545b532d5eab9c58d361918eaefa42549ef322e1f8ee4d5cf63986593f021334f993abec973d8861d2b3232c88eb0eb9d3e173db925e2ebf36298bd73317a90c195beca63920b2c7adb315f613b9e07d77f5967e7fe665d0aa18632ade61a416b201e6406320a963878a0d6ae4dd0246e7b5a7d0a3687a74f949d226b1835d"}, @NFTA_SET_USERDATA={0x95, 0xd, 0x1, 0x0, "d0062e66bee81572f3c84a2156ef83edfc7ca59d512b077bad25edb0051d4a29831ca6d060d151542f54213e451170b4cd0b58e2fa10899fd675f02cf59f4e5eb622689aae7fa64477bf2e742f0262454953571496e46f3f8e510778b948dfc59b6673ac304b15ebfeea0aff9b8625355223ee29f9cc7fc109fa4f6ef882b3146fb7247ce0d60ff8fccb42c7fb7ce797df"}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x214}, 0x1, 0x0, 0x0, 0x14008080}, 0x80c4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000dc0)={r6, &(0x7f0000000cc0)=']$)\x00', 0x444500, &(0x7f0000000d00)={@_ha_fsid={[0x6, 0x3]}, {0x69, 0x1aa9, 0x6, 0x400}}, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)=0x10}) connect$vsock_stream(r7, &(0x7f0000000e00)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000e40)=0x10001) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@security={'security\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x0, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000e80), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0xc, 0x0, 0x7, 0x3, 0x8001, 0x104, 0x180}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5, 0x4}, {0x1, 0x2, 0x4}}}}, {{@ipv6={@private1, @mcast1, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff0000ff, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'wg1\x00', {0xff}, {0x6674c921c6f2d50}, 0x54, 0x3, 0x4, 0xb}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x8001, 0x1, 0x0, [0x4, 0x1dda, 0x10, 0x3, 0x9, 0x9, 0x7, 0x81, 0x4, 0x0, 0xda, 0x9, 0xa, 0x9, 0x3, 0x6], 0x1}}, @common=@icmp6={{0x28}, {0x12, 'MJ'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffff7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0xffffff00, 0xff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xffffffff], 'macvtap0\x00', 'wg2\x00', {0x3146d2e2072b7c7f}, {}, 0x2f, 0xf, 0x3, 0x52}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28}, {0x6, 0x5, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001380)={@local, @empty, 0x0}, &(0x7f00000013c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=@bridge_getvlan={0x38, 0x72, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000001640)={&(0x7f00000014c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000001600)={&(0x7f0000001500)="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", 0xfe}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000001680)={0x0, 0x5}) 375.540608ms ago: executing program 0 (id=9527): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r0, 0x44}], 0x1, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000100)=""/183}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r5 = epoll_create1(0x0) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/152, 0x98}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x10020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r9 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r9, 0x29, 0x3a, 0x0, &(0x7f0000000100)) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) r12 = socket$unix(0x1, 0x1, 0x0) close(r12) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r12, &(0x7f00000000c0)={0xa0028000}) 367.130879ms ago: executing program 1 (id=9528): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="380000006a0f000000fcd50002000000850000006a0000009500000010000000c4db99d1bb5a0ff897785b68de7ba4f626"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d3aa64fe"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000500"/120], 0x78) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_setlink={0x40, 0x13, 0x200, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x800, 0x28000}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8b4a}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x37, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277cff0700008017cb0b4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x48000) 160.934515ms ago: executing program 4 (id=9529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000017f200cad37269e90129bdbc0000000000cb12574b381a59d4e7d4a07d4272f7f70080a1acf5d4972a754347d9fa74bbf0de0ba063db538c98cabdb0d2faa1eb6cf249ed09714e8247ed34b42087b3636b073e8e3f41013c6b18fedde2025b4396b66e26528901f8f1ac9eace623320249ec285b30853d20aabf5b48d97cd800c447df42781ca52b8c529d952916515e4357599c9d84c9e1d5a9500ed8b0cc99830b51ae437ddb2ad3df2598a7e735012b078e41a0120fc19fee2bd025444a1b2d99c6dfbce3defe768007efbfa011ec1d818ee7b9481bfe5012a810199f9b014c0edbf789c489d79a2611271db88129eb7fc4212ac4d57a6adcef2cfdd808", @ANYRES32=0x0, @ANYBLOB="4db20200005a070014000300766574683100000000000000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x400c1}, 0x810) 62.888707ms ago: executing program 3 (id=9530): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfffffe71}}, 0x20) socket$kcm(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 0s ago: executing program 4 (id=9531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004) kernel console output (not intermixed with test programs): d syz2: ib_query_port failed (-19) [ 791.309474][ T4055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 791.433626][ T4062] netlink: 'syz.0.8161': attribute type 1 has an invalid length. [ 791.450772][ T4062] netlink: 'syz.0.8161': attribute type 3 has an invalid length. [ 791.459186][ T4062] netlink: 'syz.0.8161': attribute type 1 has an invalid length. [ 791.494198][ T4066] __nla_validate_parse: 1 callbacks suppressed [ 791.494218][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8162'. [ 791.511287][ T4062] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8161'. [ 791.561739][ T4068] geneve1: Caught tx_queue_len zero misconfig [ 791.623146][ T4076] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8165'. [ 791.669120][T32354] IPVS: stop unused estimator thread 0... [ 791.919229][T32354] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.920715][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8175'. [ 791.930793][T29006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.022302][ T4097] lo speed is unknown, defaulting to 1000 [ 792.042312][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8177'. [ 792.160633][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8173'. [ 792.173353][ T4097] lo speed is unknown, defaulting to 1000 [ 792.189582][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8179'. [ 792.248487][ T4120] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 792.600694][ T4136] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 792.630169][ T4136] bond6: (slave lo): Enslaving as an active interface with an up link [ 792.663144][ T4136] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 792.716316][ T4097] wlan1 speed is unknown, defaulting to 1000 [ 792.819295][ T4145] 8021q: VLANs not supported on xfrm0 [ 792.932451][ T4145] team0: Device gtp0 is of different type [ 793.147278][ T4156] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8187'. [ 793.354095][ T4161] x_tables: duplicate underflow at hook 3 [ 793.441893][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.484862][ T4168] lo speed is unknown, defaulting to 1000 [ 793.516278][ T4168] lo speed is unknown, defaulting to 1000 [ 793.632352][ T4183] xfrm0: entered promiscuous mode [ 793.696110][ T4183] xfrm0: entered allmulticast mode [ 793.735198][ T4183] netlink: 'syz.1.8196': attribute type 13 has an invalid length. [ 793.743813][ T4183] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.8196'. [ 793.924835][ T4168] wlan1 speed is unknown, defaulting to 1000 [ 794.342700][ T4213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8202'. [ 794.669018][ T4229] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 794.676810][ T4229] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 794.708669][ T4229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 794.872143][ T4235] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 795.169822][ T4249] netlink: 'syz.3.8211': attribute type 39 has an invalid length. [ 795.540492][ T4268] sctp: [Deprecated]: syz.0.8216 (pid 4268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 795.540492][ T4268] Use struct sctp_sack_info instead [ 795.756943][ T8394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.800612][ T4291] sctp: [Deprecated]: syz.4.8224 (pid 4291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 795.800612][ T4291] Use struct sctp_sack_info instead [ 795.849057][ T4291] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 795.902835][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 795.910905][ C1] lec:lec_tx_timeout: lec0 [ 795.915876][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 796.170588][ T4318] Unknown options in mask 6 [ 796.696000][ T4338] __nla_validate_parse: 4 callbacks suppressed [ 796.696018][ T4338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8236'. [ 796.917600][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8240'. [ 796.935845][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8241'. [ 796.994091][ T4357] netlink: 'syz.4.8242': attribute type 2 has an invalid length. [ 797.109886][ T4361] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8245'. [ 797.176308][ T4367] netlink: 'syz.1.8246': attribute type 1 has an invalid length. [ 797.222207][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8244'. [ 797.313582][ T4363] lo speed is unknown, defaulting to 1000 [ 797.334274][ T4363] lo speed is unknown, defaulting to 1000 [ 797.397995][T26576] block nbd3: Receive control failed (result -32) [ 797.569340][ T4363] wlan1 speed is unknown, defaulting to 1000 [ 797.673014][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 797.681785][T32355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.683131][T32363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.789601][ T4397] netlink: 'syz.0.8252': attribute type 1 has an invalid length. [ 797.865522][ T4400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.132992][ T4413] IPVS: length: 168 != 8 [ 798.142356][ T4413] netlink: 'syz.3.8259': attribute type 83 has an invalid length. [ 798.463928][ T4435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8267'. [ 798.494399][ T4435] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8267'. [ 798.530053][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8267'. [ 798.706373][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8275'. [ 798.803204][ T4458] tipc: Enabled bearer , priority 0 [ 798.950387][ T4458] syzkaller0: entered promiscuous mode [ 798.968233][ T4458] syzkaller0: entered allmulticast mode [ 798.979472][ T4458] tipc: Resetting bearer [ 799.026339][T32363] tipc: Resetting bearer [ 799.036534][ T4481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 799.141023][ T4485] openvswitch: netlink: IP tunnel dst address not specified [ 799.224309][ T4490] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 799.244777][ T4490] syzkaller1: linktype set to 825 [ 799.359706][ T4505] IPVS: length: 13 != 8 [ 799.457315][ T4509] openvswitch: netlink: Actions may not be safe on all matching packets [ 799.510873][ T4514] netlink: 'syz.0.8290': attribute type 49 has an invalid length. [ 799.617913][ T4474] tipc: Resetting bearer [ 799.625117][ T4520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 799.748197][ T4528] netlink: 'syz.3.8296': attribute type 1 has an invalid length. [ 799.759011][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8296'. [ 799.873275][ T4537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.836891][ T4542] IPv6: NLM_F_CREATE should be specified when creating new route [ 800.923063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 800.931153][ C1] lec:lec_tx_timeout: lec0 [ 800.936058][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 801.372303][ T4474] tipc: Disabling bearer [ 801.404569][ T7642] tipc: Node number set to 3482021549 [ 801.494526][ T4544] netlink: 'syz.3.8299': attribute type 16 has an invalid length. [ 801.502387][ T4544] netlink: 'syz.3.8299': attribute type 17 has an invalid length. [ 801.515869][T29596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 801.566050][ T4544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.595851][ T4544] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.632941][ T4544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 801.942130][ T4581] __nla_validate_parse: 4 callbacks suppressed [ 801.942148][ T4581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8309'. [ 801.972548][ T4578] lo speed is unknown, defaulting to 1000 [ 802.000093][ T4584] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 802.007317][ T4584] syzkaller1: linktype set to 768 [ 802.030996][ T4578] lo speed is unknown, defaulting to 1000 [ 802.364873][ T4578] wlan1 speed is unknown, defaulting to 1000 [ 802.371774][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8312'. [ 802.547035][ T4614] pimreg: entered allmulticast mode [ 802.795243][T29020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.258631][ T4651] lo speed is unknown, defaulting to 1000 [ 803.268816][ T4651] lo speed is unknown, defaulting to 1000 [ 803.360325][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8327'. [ 803.434057][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.592316][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8333'. [ 803.634432][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8333'. [ 803.829084][ T4651] wlan1 speed is unknown, defaulting to 1000 [ 804.113517][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8340'. [ 804.201847][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8339'. [ 804.518811][ T4718] lo speed is unknown, defaulting to 1000 [ 804.540044][ T4718] lo speed is unknown, defaulting to 1000 [ 804.563381][ T4726] lo speed is unknown, defaulting to 1000 [ 804.585590][ T4720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8345'. [ 804.809774][ T4718] wlan1 speed is unknown, defaulting to 1000 [ 804.809787][ T4726] lo speed is unknown, defaulting to 1000 [ 804.868264][ T4740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8349'. [ 804.889851][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8349'. [ 805.127423][ T4749] netlink: 'syz.1.8352': attribute type 2 has an invalid length. [ 805.136401][ T4749] netlink: 'syz.1.8352': attribute type 2 has an invalid length. [ 805.583456][ T4726] wlan1 speed is unknown, defaulting to 1000 [ 805.643299][ T4770] netlink: 'syz.0.8357': attribute type 10 has an invalid length. [ 805.765716][ T4770] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 806.468533][ T4820] "syz.0.8370" (4820) uses obsolete ecb(arc4) skcipher [ 806.612034][ T4828] netlink: 'syz.2.8372': attribute type 1 has an invalid length. [ 806.712752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 806.720815][ C1] lec:lec_tx_timeout: lec0 [ 806.742924][ T4828] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 806.756788][ T4840] vlan2: entered promiscuous mode [ 806.772885][ T4840] bridge0: entered promiscuous mode [ 806.821386][ T4844] bond8: Unable to set up delay as MII monitoring is disabled [ 806.839391][ T4844] bond8 (unregistering): Released all slaves [ 807.098250][ T4847] lo speed is unknown, defaulting to 1000 [ 807.111743][ T4847] lo speed is unknown, defaulting to 1000 [ 807.273889][T29596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.392110][ T4885] batadv_slave_0: Caught tx_queue_len zero misconfig [ 807.417001][ T4886] __nla_validate_parse: 5 callbacks suppressed [ 807.417023][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8388'. [ 807.591916][ T4900] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8391'. [ 807.621272][ T4886] syzkaller0: entered promiscuous mode [ 807.642876][ T4886] syzkaller0: entered allmulticast mode [ 807.707694][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8390'. [ 807.776954][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8394'. [ 807.878548][ T4907] lo speed is unknown, defaulting to 1000 [ 807.914298][T29598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 807.926151][ T4908] lo speed is unknown, defaulting to 1000 [ 807.953928][ T4908] lo speed is unknown, defaulting to 1000 [ 807.973856][ T4847] wlan1 speed is unknown, defaulting to 1000 [ 808.086302][ T7661] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.329788][ T4907] lo speed is unknown, defaulting to 1000 [ 808.457495][ T4933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8401'. [ 808.497306][ T4908] wlan1 speed is unknown, defaulting to 1000 [ 808.512222][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8402'. [ 808.523812][ T7661] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.559046][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 808.870595][ T4947] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.985808][ T4907] wlan1 speed is unknown, defaulting to 1000 [ 809.065894][ T4951] lo speed is unknown, defaulting to 1000 [ 809.100121][ T4951] lo speed is unknown, defaulting to 1000 [ 809.195297][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 809.271256][ T4969] netlink: 'syz.3.8409': attribute type 29 has an invalid length. [ 809.298544][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8409'. [ 809.311560][ T4969] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8409'. [ 809.463433][ T4951] wlan1 speed is unknown, defaulting to 1000 [ 809.474255][ T4967] rdma_rxe: rxe_newlink: failed to add lo [ 809.684666][ T4981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8413'. [ 809.745896][ T4983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8414'. [ 810.525211][ T5022] x_tables: duplicate underflow at hook 2 [ 810.901163][ T5045] lo speed is unknown, defaulting to 1000 [ 810.924952][ T5045] lo speed is unknown, defaulting to 1000 [ 811.004591][ T5941] wlan1 speed is unknown, defaulting to 1000 [ 811.052873][ T5063] netlink: 'syz.3.8432': attribute type 1 has an invalid length. [ 811.177768][ T5063] bond6: entered promiscuous mode [ 811.219917][ T5063] bond6: entered allmulticast mode [ 811.226633][ T5063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 811.235422][ T5079] xt_bpf: check failed: parse error [ 811.259900][ T5064] erspan1: entered allmulticast mode [ 811.349867][ T5076] lo speed is unknown, defaulting to 1000 [ 811.520355][ T5096] openvswitch: netlink: Flow actions attr not present in new flow. [ 811.584675][ T5045] wlan1 speed is unknown, defaulting to 1000 [ 811.599421][ T5076] lo speed is unknown, defaulting to 1000 [ 811.964551][ T5117] bond7: option mode: invalid value (254) [ 811.987154][ T5117] bond7 (unregistering): Released all slaves [ 812.041580][ T5120] macsec3: entered promiscuous mode [ 812.047413][ T5120] macsec3: entered allmulticast mode [ 812.072087][ T5076] wlan1 speed is unknown, defaulting to 1000 [ 812.100263][ T5124] syz.3.8445 (5124) used obsolete PPPIOCDETACH ioctl [ 813.035776][T15261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.442022][ T5149] netlink: 'syz.3.8452': attribute type 27 has an invalid length. [ 813.673758][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.752798][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.760829][ C1] lec:lec_tx_timeout: lec0 [ 814.954189][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.270293][ T5149] macsec0: left allmulticast mode [ 815.293780][ T5149] macsec1: left allmulticast mode [ 815.306942][ T5149] bond6: left promiscuous mode [ 815.321973][ T5149] bond6: left allmulticast mode [ 815.328169][ T5149] erspan1: left allmulticast mode [ 815.345672][ T5129] lo speed is unknown, defaulting to 1000 [ 815.356951][ T5129] lo speed is unknown, defaulting to 1000 [ 815.653110][ T8393] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.673843][ T8393] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.684161][ T8393] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.693204][ T5166] __nla_validate_parse: 10 callbacks suppressed [ 815.693223][ T5166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8455'. [ 815.710913][ T8393] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.743909][ T5129] wlan1 speed is unknown, defaulting to 1000 [ 815.805511][ T8393] bond0: (slave bond_slave_0): interface is now down [ 815.815159][ T8393] bond0: (slave bond_slave_1): interface is now down [ 815.835524][ T8393] bond0: (slave syz_tun): interface is now down [ 815.964503][ T5190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8460'. [ 815.983298][ T8393] bond0: (slave bond_slave_0): interface is now down [ 815.990221][ T8393] bond0: (slave bond_slave_1): interface is now down [ 816.016460][ T8393] bond0: (slave syz_tun): interface is now down [ 816.150166][ T5198] tipc: Enabling of bearer rejected, failed to enable media [ 816.173187][T29014] bond0: (slave bond_slave_0): interface is now down [ 816.180533][T29014] bond0: (slave bond_slave_1): interface is now down [ 816.212655][T29014] bond0: (slave syz_tun): interface is now down [ 816.239531][T29014] bond0: now running without any active interface! [ 816.260595][ T5200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8463'. [ 816.320619][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8463'. [ 816.396452][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8465'. [ 816.420743][ T5211] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8466'. [ 816.438380][ T5211] IPv6: sit2: Disabled Multicast RS [ 816.446389][ T5211] sit2: entered allmulticast mode [ 816.587927][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8468'. [ 816.611765][ T5221] ip6erspan1: entered allmulticast mode [ 816.638541][ T5220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8468'. [ 816.721569][ T5226] geneve3: entered promiscuous mode [ 816.738051][ T5229] erspan0: entered promiscuous mode [ 816.746882][T15262] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 33289 - 0 [ 816.780446][T15262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 33289 - 0 [ 816.803373][T15262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 33289 - 0 [ 816.842995][T15262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 33289 - 0 [ 816.900641][ T5240] lo speed is unknown, defaulting to 1000 [ 816.923899][ T5240] lo speed is unknown, defaulting to 1000 [ 816.958184][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8476'. [ 817.013065][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8476'. [ 817.036265][ T5242] netlink: 'syz.3.8476': attribute type 20 has an invalid length. [ 817.337582][ T5240] wlan1 speed is unknown, defaulting to 1000 [ 817.487263][ T5268] lo speed is unknown, defaulting to 1000 [ 817.519333][ T5268] lo speed is unknown, defaulting to 1000 [ 818.054199][ T5293] IPVS: stopping backup sync thread 32711 ... [ 818.091447][ T5268] wlan1 speed is unknown, defaulting to 1000 [ 818.398994][ T5307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.479093][ T5310] netlink: 'syz.3.8494': attribute type 1 has an invalid length. [ 818.511994][ T5310] netlink: 'syz.3.8494': attribute type 2 has an invalid length. [ 818.796757][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 818.805183][T29598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.612580][ T5359] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 819.684631][ T5364] lo speed is unknown, defaulting to 1000 [ 819.714484][ T5364] lo speed is unknown, defaulting to 1000 [ 819.956647][ T5364] wlan1 speed is unknown, defaulting to 1000 [ 820.045464][ T5389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.073457][T29598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 820.084550][ T5392] netlink: 'syz.3.8514': attribute type 10 has an invalid length. [ 820.127907][ T5392] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 820.758155][ T5415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.065997][ T5424] __nla_validate_parse: 9 callbacks suppressed [ 821.066020][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8521'. [ 821.102206][ T5426] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 821.340427][ T5438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8525'. [ 821.418493][ T8393] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 821.428887][ T8393] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 821.450364][ T8393] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 821.469578][ T8393] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 821.578383][ T5448] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 821.772674][ T5455] netlink: 'syz.0.8529': attribute type 13 has an invalid length. [ 821.782707][ T5455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8529'. [ 821.810058][ T5455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8529'. [ 822.366195][ T5490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8538'. [ 822.606599][ T5496] lo speed is unknown, defaulting to 1000 [ 822.627271][ T5496] lo speed is unknown, defaulting to 1000 [ 822.766252][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8544'. [ 822.916447][ T5511] netlink: 'syz.4.8545': attribute type 1 has an invalid length. [ 823.161660][ T5496] wlan1 speed is unknown, defaulting to 1000 [ 823.331962][ T5504] lec:lec_atm_close: lec0: Shut down! [ 824.167158][ T5538] nbd: couldn't find a device at index 0 [ 824.553044][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 824.561282][T29014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.561282][T29596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.576857][ T5564] dvmrp12: entered allmulticast mode [ 824.651002][ T5557] dvmrp12: left allmulticast mode [ 824.974225][ T5582] xt_hashlimit: size too large, truncated to 1048576 [ 825.141148][ T5590] IPVS: ip_vs_edit_dest(): server weight less than zero [ 825.274276][ T5593] lo: Caught tx_queue_len zero misconfig [ 825.350076][ T5595] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 825.420869][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8569'. [ 825.462586][ T5607] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 825.494772][ T5604] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 825.513512][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8569'. [ 825.568456][ T5612] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 825.833433][T29015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.851067][ T5632] xt_TCPMSS: Only works on TCP SYN packets [ 826.008220][ T5637] syzkaller1: entered promiscuous mode [ 826.014183][ T5637] syzkaller1: entered allmulticast mode [ 826.046425][ T5617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8570'. [ 826.079606][ T5642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8578'. [ 826.115975][ T5617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8570'. [ 826.757621][ T5663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8584'. [ 826.925571][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8586'. [ 827.178643][ T5674] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 827.552174][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8594'. [ 827.563368][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8594'. [ 827.727898][ T5710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8597'. [ 827.898874][ T5717] netlink: 'syz.1.8599': attribute type 1 has an invalid length. [ 827.909170][ T5717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8599'. [ 827.990927][ T5721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8601'. [ 828.100885][ T5726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8602'. [ 828.373738][ T5748] netlink: 'syz.4.8607': attribute type 2 has an invalid length. [ 828.430974][ T5748] xfrm1: entered promiscuous mode [ 828.442383][ T5748] xfrm1: entered allmulticast mode [ 828.486467][ T5760] netlink: 'syz.2.8613': attribute type 1 has an invalid length. [ 828.494537][ T5760] netlink: 'syz.2.8613': attribute type 1 has an invalid length. [ 828.515692][ T5761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 828.613038][ T5757] veth0_vlan: left promiscuous mode [ 828.641843][ T5757] veth0_vlan: entered promiscuous mode [ 828.667378][ T5757] veth0_vlan: entered allmulticast mode [ 828.688512][ T5769] sctp: [Deprecated]: syz.2.8614 (pid 5769) Use of int in max_burst socket option deprecated. [ 828.688512][ T5769] Use struct sctp_assoc_value instead [ 828.696687][ T5772] tipc: New replicast peer: 255.255.255.255 [ 828.712361][ T5772] tipc: Enabled bearer , priority 10 [ 828.712844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 828.726571][ C1] lec:lec_tx_timeout: lec0 [ 828.731256][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 829.556454][ T5826] netlink: 'syz.3.8631': attribute type 7 has an invalid length. [ 829.564940][ T5826] netlink: 'syz.3.8631': attribute type 8 has an invalid length. [ 829.621481][ T5828] lo speed is unknown, defaulting to 1000 [ 829.633250][ T5828] lo speed is unknown, defaulting to 1000 [ 829.643646][ T5828] lo speed is unknown, defaulting to 1000 [ 829.699307][ T5828] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 829.789372][ T5828] lo speed is unknown, defaulting to 1000 [ 829.810261][ T5828] lo speed is unknown, defaulting to 1000 [ 829.817995][ T5828] lo speed is unknown, defaulting to 1000 [ 829.829515][ T5828] lo speed is unknown, defaulting to 1000 [ 829.889009][ T5844] netlink: 'syz.0.8635': attribute type 21 has an invalid length. [ 829.926763][ T5837] bond8: option updelay: invalid value (18446744072924056005) [ 829.939954][ T5837] bond8: option updelay: allowed values 0 - 2147483647 [ 829.958928][ T5837] bond8 (unregistering): Released all slaves [ 830.023010][ T5828] lo speed is unknown, defaulting to 1000 [ 830.033969][T29015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.044411][ T5828] lo speed is unknown, defaulting to 1000 [ 830.051971][ T5828] lo speed is unknown, defaulting to 1000 [ 830.315142][ T8393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.355411][ T5828] lo speed is unknown, defaulting to 1000 [ 830.396024][ T5828] lo speed is unknown, defaulting to 1000 [ 830.419063][ T5828] lo speed is unknown, defaulting to 1000 [ 830.426860][ T5828] lo speed is unknown, defaulting to 1000 [ 830.453048][ T5888] netlink: 'syz.0.8642': attribute type 1 has an invalid length. [ 830.590565][ T5894] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 830.630998][ T5896] netlink: 'syz.4.8645': attribute type 4 has an invalid length. [ 830.673769][ T5896] netlink: 'syz.4.8645': attribute type 4 has an invalid length. [ 830.683152][T25653] lo speed is unknown, defaulting to 1000 [ 830.688960][T25653] syz2: Port: 1 Link DOWN [ 830.699081][T25651] lo speed is unknown, defaulting to 1000 [ 830.711921][T25651] syz2: Port: 1 Link ACTIVE [ 830.939248][ T5924] syzkaller0: create flow: hash 1357691773 index 1 [ 830.980153][T29014] syzkaller0: tun_net_xmit 76 [ 830.987859][T29014] syzkaller0: tun_net_xmit 48 [ 831.003129][ T7661] syzkaller0: tun_net_xmit 76 [ 831.095632][ T5920] syzkaller0: delete flow: hash 1357691773 index 1 [ 831.138893][ T5933] __nla_validate_parse: 13 callbacks suppressed [ 831.138911][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8654'. [ 831.162873][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8654'. [ 831.767575][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8656'. [ 833.037679][ T5967] lo speed is unknown, defaulting to 1000 [ 833.058638][ T5967] lo speed is unknown, defaulting to 1000 [ 833.328227][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8670'. [ 833.358740][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8669'. [ 833.367988][ T5996] netlink: 'syz.0.8670': attribute type 29 has an invalid length. [ 833.368011][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8670'. [ 833.555634][ T6012] syzkaller1: entered promiscuous mode [ 833.561287][ T6012] syzkaller1: entered allmulticast mode [ 833.561895][ T6013] netlink: 'syz.0.8675': attribute type 11 has an invalid length. [ 833.587612][ T6013] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.8675'. [ 833.604970][ T5967] wlan1 speed is unknown, defaulting to 1000 [ 833.622103][ T5967] lo speed is unknown, defaulting to 1000 [ 833.639374][ T6015] netlink: 'syz.4.8674': attribute type 11 has an invalid length. [ 833.753478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 833.761547][ C1] lec:lec_tx_timeout: lec0 [ 833.801105][ T6023] tipc: Started in network mode [ 833.811651][ T6023] tipc: Node identity 2a880268080a, cluster identity 4711 [ 833.824440][ T6023] tipc: Enabled bearer , priority 0 [ 833.862095][ T6033] bond25: option mode: invalid value (254) [ 833.878438][ T6033] bond25 (unregistering): Released all slaves [ 834.068223][ T6022] tipc: Disabling bearer [ 834.082303][ T6043] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8684'. [ 834.221518][ T6045] 8021q: adding VLAN 0 to HW filter on device bond25 [ 834.238788][ T6056] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8689'. [ 834.464961][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8695'. [ 834.547288][ T6079] netlink: 'syz.0.8696': attribute type 1 has an invalid length. [ 834.628435][ T6079] 8021q: adding VLAN 0 to HW filter on device bond8 [ 834.769314][ T6095] netlink: 'syz.3.8700': attribute type 1 has an invalid length. [ 834.952296][ T6108] netlink: 'syz.3.8702': attribute type 1 has an invalid length. [ 835.017239][ T6108] bond8: entered promiscuous mode [ 835.022385][ T6108] bond8: entered allmulticast mode [ 835.030031][ T6108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 835.237674][ T6123] veth0_vlan: left allmulticast mode [ 835.323916][ T6123] sit2: left allmulticast mode [ 835.385951][ T6123] bond8: left promiscuous mode [ 835.397270][ T6123] bond8: left allmulticast mode [ 835.434002][T29598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.445513][ T8393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.570988][ T6127] syzkaller0: entered promiscuous mode [ 835.594912][ T6127] syzkaller0: entered allmulticast mode [ 835.628421][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 835.639706][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 835.658333][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 835.669444][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 835.678628][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.770542][T26576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 835.784989][T26576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 835.792411][T26576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 835.800453][T26576] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 835.808840][T26576] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.191242][ T6167] __nla_validate_parse: 4 callbacks suppressed [ 836.191261][ T6167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8718'. [ 837.716493][ T6163] lo speed is unknown, defaulting to 1000 [ 837.739277][ T6163] lo speed is unknown, defaulting to 1000 [ 837.746471][ T6141] lo speed is unknown, defaulting to 1000 [ 837.833548][ T5829] Bluetooth: hci3: command tx timeout [ 837.990624][ T8393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.018177][ T8393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.032702][ T8393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 838.057998][ T6141] lo speed is unknown, defaulting to 1000 [ 838.071276][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8723'. [ 838.098183][ T6184] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8723'. [ 838.137260][ T6163] wlan1 speed is unknown, defaulting to 1000 [ 838.137701][ T6188] syzkaller1: entered promiscuous mode [ 838.155506][ T6188] syzkaller1: entered allmulticast mode [ 838.167892][ T6178] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 838.213631][ T6183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 838.241944][ T6163] lo speed is unknown, defaulting to 1000 [ 838.265253][ T8393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.277053][ T8393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.289214][ T8393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 838.430150][ T8393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.451111][ T8393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.464853][ T8393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 838.491648][ T6141] wlan1 speed is unknown, defaulting to 1000 [ 838.513872][ T6141] lo speed is unknown, defaulting to 1000 [ 838.539633][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8729'. [ 838.549102][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8729'. [ 838.582479][ T8393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.594518][ T8393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.605511][ T8393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 838.888899][T29598] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.975558][T29598] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.048635][T29598] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.172467][T29598] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.467178][ T8393] geneve1 (unregistering): left allmulticast mode [ 839.508522][ T8393] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 839.572587][ T6244] xt_l2tp: missing protocol rule (udp|l2tpip) [ 839.582298][ T8393] bond0 (unregistering): Released all slaves [ 839.602298][ T8393] `: Port device bond1 removed [ 839.609651][ T8393] bond1 (unregistering): Released all slaves [ 839.630240][ T8393] bond2 (unregistering): Released all slaves [ 839.648886][ T8393] bond3 (unregistering): Released all slaves [ 839.679934][ T8393] bond4 (unregistering): Released all slaves [ 839.709022][ T8393] bond5 (unregistering): Released all slaves [ 839.729600][ T8393] bond6 (unregistering): Released all slaves [ 839.750380][ T8393] bond7 (unregistering): Released all slaves [ 839.770690][ T8393] bond8 (unregistering): Released all slaves [ 839.818588][ T6242] mac80211_hwsim hwsim82 wlan1: Caught tx_queue_len zero misconfig [ 839.856458][ T6239] syzkaller0: entered promiscuous mode [ 839.862057][ T6239] syzkaller0: entered allmulticast mode [ 839.914888][ T5829] Bluetooth: hci3: command tx timeout [ 839.935641][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8742'. [ 839.958114][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 839.967804][ T6259] xt_bpf: check failed: parse error [ 839.991602][ T6261] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 840.040236][ T8393] tipc: Disabling bearer [ 840.090025][ T8393] tipc: Disabling bearer [ 840.111081][ T8393] tipc: Left network mode [ 840.181709][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8745'. [ 840.389230][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.412258][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.419692][ T6141] bridge_slave_0: entered allmulticast mode [ 840.431313][ T6141] bridge_slave_0: entered promiscuous mode [ 840.442589][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.474622][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.483659][ T6141] bridge_slave_1: entered allmulticast mode [ 840.498257][ T6141] bridge_slave_1: entered promiscuous mode [ 840.722072][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.784571][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.976776][ T6303] tipc: Invalid UDP bearer configuration [ 840.976833][ T6303] tipc: Enabling of bearer rejected, failed to enable media [ 841.028985][ T6141] team0: Port device team_slave_0 added [ 841.102618][ T6141] team0: Port device team_slave_1 added [ 841.303461][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.310686][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.316921][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8759'. [ 841.337771][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.369838][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8756'. [ 841.409631][ T6335] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8759'. [ 841.468867][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.483591][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.545134][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.566998][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8762'. [ 841.847892][ T6343] lo speed is unknown, defaulting to 1000 [ 841.891441][ T6141] hsr_slave_0: entered promiscuous mode [ 841.914622][ T6141] hsr_slave_1: entered promiscuous mode [ 841.950398][ T6141] debugfs: 'hsr0' already exists in 'hsr' [ 841.972348][ T6141] Cannot create hsr debugfs directory [ 841.985767][ T6343] lo speed is unknown, defaulting to 1000 [ 842.006406][ T5829] Bluetooth: hci3: command tx timeout [ 842.101038][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8769'. [ 842.175025][ T8393] veth1_macvtap: left promiscuous mode [ 842.192959][ T8393] veth0_macvtap: left promiscuous mode [ 842.199491][ T8393] veth1_vlan: left promiscuous mode [ 842.223077][ T8393] veth0_vlan: left promiscuous mode [ 842.435571][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8769'. [ 842.956358][ T6393] geneve4: entered allmulticast mode [ 843.019296][ T6343] wlan1 speed is unknown, defaulting to 1000 [ 843.065862][ T6343] lo speed is unknown, defaulting to 1000 [ 843.429351][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'. [ 843.522399][ T6433] syzkaller1: entered promiscuous mode [ 843.557047][ T6433] syzkaller1: entered allmulticast mode [ 843.657740][ T6447] delete_channel: no stack [ 843.669903][ T8393] IPVS: stop unused estimator thread 0... [ 843.996921][ T6141] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.073767][ T5829] Bluetooth: hci3: command tx timeout [ 844.138245][ T6141] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.195883][ T6463] lo speed is unknown, defaulting to 1000 [ 844.228816][ T6463] lo speed is unknown, defaulting to 1000 [ 844.306352][ T6141] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.469466][ T6141] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.686248][ T6463] wlan1 speed is unknown, defaulting to 1000 [ 844.742203][ T6463] lo speed is unknown, defaulting to 1000 [ 844.753189][ T6495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 844.922648][ T6141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 844.969751][ T6141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 845.048078][ T6141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.143599][ T6518] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 845.176336][ T6518] netlink: 'syz.1.8795': attribute type 15 has an invalid length. [ 845.204900][ T6141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.442526][ T30] audit: type=1107 audit(1773580838.338:20): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nØèMÓ×ÖyëÙ†Sx´&`ÂH„°™' [ 845.637516][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.717894][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.796255][T29020] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.803477][T29020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.866306][T29020] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.873473][T29020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.956468][ T6141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 845.986547][ T6141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.129407][ T6568] macsec0: Caught tx_queue_len zero misconfig [ 846.222029][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8806'. [ 846.359470][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8810'. [ 846.397916][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8808'. [ 846.400289][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8810'. [ 846.408450][ T6592] netlink: 356 bytes leftover after parsing attributes in process `syz.1.8808'. [ 846.545289][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.607112][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8813'. [ 846.632465][ T6613] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 846.662621][ T6609] syzkaller0: entered promiscuous mode [ 846.670176][ T6609] syzkaller0: entered allmulticast mode [ 846.680486][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8814'. [ 846.691351][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8814'. [ 846.732489][ T6141] veth0_vlan: entered promiscuous mode [ 846.764471][ T6141] veth1_vlan: entered promiscuous mode [ 846.925173][ T6141] veth0_macvtap: entered promiscuous mode [ 846.952047][ T6141] veth1_macvtap: entered promiscuous mode [ 846.991301][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.025716][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.059379][ T8393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.084075][ T8393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.100950][ T8393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.131809][ T8393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.347882][ T8393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.378590][ T8393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.509402][T29015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.553102][T29015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.893283][ T6669] nbd4: detected capacity change from 0 to 63 [ 847.897999][ T6673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.900134][ T6670] nbd: couldn't find device at index 2 [ 847.917289][ T3528] block nbd4: Send control failed (result -32) [ 847.927682][ T3528] block nbd4: Request send failed, requeueing [ 847.954888][ T5829] block nbd4: Receive control failed (result -32) [ 847.967273][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8829'. [ 847.977880][ T3528] block nbd4: Dead connection, failed to find a fallback [ 848.004094][ T2675] block nbd4: Dead connection, failed to find a fallback [ 848.011535][ T2675] block nbd4: shutting down sockets [ 848.018832][ T2675] blk_print_req_error: 54 callbacks suppressed [ 848.018849][ T2675] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.035916][ T2675] buffer_io_error: 54 callbacks suppressed [ 848.035933][ T2675] Buffer I/O error on dev nbd4, logical block 0, async page read [ 848.049743][ T3528] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.060384][ T3528] Buffer I/O error on dev nbd4, logical block 1, async page read [ 848.067634][ T6674] syzkaller0: entered promiscuous mode [ 848.068714][ T3528] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.084125][ T3528] Buffer I/O error on dev nbd4, logical block 2, async page read [ 848.091927][ T3528] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.101602][ T3528] Buffer I/O error on dev nbd4, logical block 3, async page read [ 848.110295][ T3528] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.113665][ T6674] syzkaller0: entered allmulticast mode [ 848.120344][ T3528] Buffer I/O error on dev nbd4, logical block 0, async page read [ 848.134361][ T3528] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.143916][ T3528] Buffer I/O error on dev nbd4, logical block 1, async page read [ 848.151709][ T3528] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.161501][ T3528] Buffer I/O error on dev nbd4, logical block 2, async page read [ 848.169471][ T3528] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.179914][ T3528] Buffer I/O error on dev nbd4, logical block 3, async page read [ 848.195496][ T3528] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.238380][ T3528] Buffer I/O error on dev nbd4, logical block 0, async page read [ 848.270580][ T3528] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 848.293830][ T3528] Buffer I/O error on dev nbd4, logical block 1, async page read [ 848.302228][ T3528] ldm_validate_partition_table(): Disk read failed. [ 848.319590][ T3528] Dev nbd4: unable to read RDB block 0 [ 848.329099][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8832'. [ 848.329817][ T3528] nbd4: unable to read partition table [ 848.367645][ T3528] ldm_validate_partition_table(): Disk read failed. [ 848.383234][ T3528] Dev nbd4: unable to read RDB block 0 [ 848.389349][ T3528] nbd4: unable to read partition table [ 848.590994][ T6698] netlink: 'syz.0.8835': attribute type 1 has an invalid length. [ 848.619542][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8836'. [ 848.661005][ T6698] 8021q: VLANs not supported on ip6_vti0 [ 848.672944][ T6698] netlink: 'syz.0.8835': attribute type 9 has an invalid length. [ 848.753690][T26576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.765716][T26576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.776604][T26576] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.808503][T26576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.817149][T26576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 849.110879][ T6715] syzkaller1: entered promiscuous mode [ 849.129910][ T6715] syzkaller1: entered allmulticast mode [ 849.247715][ T6705] lo speed is unknown, defaulting to 1000 [ 849.396868][ T6705] lo speed is unknown, defaulting to 1000 [ 849.407192][ T6736] netlink: 'syz.4.8843': attribute type 1 has an invalid length. [ 849.520262][ T6736] bond10: entered promiscuous mode [ 849.537698][ T6736] 8021q: adding VLAN 0 to HW filter on device bond10 [ 849.789603][T29014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33289 - 0 [ 849.841542][T29014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 849.881909][ T6768] netlink: 'syz.2.8850': attribute type 83 has an invalid length. [ 849.969846][ T6705] wlan1 speed is unknown, defaulting to 1000 [ 849.979018][ T6705] lo speed is unknown, defaulting to 1000 [ 850.026044][T29014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33289 - 0 [ 850.037694][T29014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.108109][T29014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33289 - 0 [ 850.135585][T29014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.316634][T29014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33289 - 0 [ 850.327157][T29014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.523194][ T6759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 850.529554][ T6759] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 850.676380][T29020] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.729395][ T6759] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 850.757854][ T6759] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 850.831322][T29015] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.847091][T29015] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.867821][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 850.912169][ T6809] netlink: 'syz.0.8861': attribute type 1 has an invalid length. [ 850.936097][T29015] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.980727][ T6813] vxcan1: entered promiscuous mode [ 850.988503][ T6813] vxcan1: entered allmulticast mode [ 851.023894][ T6809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.039459][ T6817] siw: device registration error -23 [ 851.071994][T29014] veth0_to_bridge: left allmulticast mode [ 851.110435][T29014] veth0_to_bridge: left promiscuous mode [ 851.150723][T29014] bridge0: port 1(veth0_to_bridge) entered disabled state [ 851.210247][T29014] pimreg: left allmulticast mode [ 851.314453][ T6833] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 851.462904][ T6839] netlink: 'syz.0.8866': attribute type 1 has an invalid length. [ 851.487983][ T6839] netlink: 'syz.0.8866': attribute type 2 has an invalid length. [ 851.525778][ T6839] netlink: 'syz.0.8866': attribute type 1 has an invalid length. [ 851.552827][ T6839] __nla_validate_parse: 8 callbacks suppressed [ 851.552846][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8866'. [ 851.718768][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8871'. [ 851.737577][T29014] bond22 (unregistering): (slave gretap1): Releasing active interface [ 851.747002][ T6859] netlink: 'syz.3.8868': attribute type 27 has an invalid length. [ 851.869942][T29014] team0: Port device bridge0 removed [ 851.971266][T29014] bond18 (unregistering): (slave bridge2): Releasing backup interface [ 852.098208][T29014] bond24 (unregistering): (slave bridge5): Releasing active interface [ 852.106589][T29014] bridge5 (unregistering): left promiscuous mode [ 852.113241][T29014] bridge5 (unregistering): left allmulticast mode [ 852.129876][T29014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.140103][T29014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.151315][T29014] bond0 (unregistering): (slave team0): Releasing backup interface [ 852.161393][T29014] bond0 (unregistering): Released all slaves [ 852.172230][T29014] bond1 (unregistering): Released all slaves [ 852.186128][T29014] bond2 (unregistering): Released all slaves [ 852.199607][T29014] bond3 (unregistering): Released all slaves [ 852.219923][T29014] bond4 (unregistering): Released all slaves [ 852.232391][T29014] bond5 (unregistering): Released all slaves [ 852.247298][T29014] bond6 (unregistering): Released all slaves [ 852.263228][T29014] bond7 (unregistering): Released all slaves [ 852.283261][T29014] bond8 (unregistering): Released all slaves [ 852.296501][T29014] bond9 (unregistering): Released all slaves [ 852.309208][T29014] bond10 (unregistering): Released all slaves [ 852.333390][T29014] bond11 (unregistering): Released all slaves [ 852.352592][T29014] bond12 (unregistering): Released all slaves [ 852.661338][T29014] bond13 (unregistering): Released all slaves [ 852.676797][T29014] bond14 (unregistering): Released all slaves [ 852.696896][T29014] bond15 (unregistering): (slave veth3): Releasing active interface [ 852.711997][T29014] batadv1: entered promiscuous mode [ 852.738762][T29014] bond15 (unregistering): (slave batadv1): Releasing active interface [ 852.750153][T29014] bond15 (unregistering): Released all slaves [ 852.769643][T29014] bond16 (unregistering): Released all slaves [ 852.792617][T29014] bond17 (unregistering): (slave veth5): Releasing active interface [ 852.813437][T29014] bond17 (unregistering): Released all slaves [ 852.829132][T29014] bond18 (unregistering): Released all slaves [ 852.841686][T29014] bond19 (unregistering): Released all slaves [ 852.858129][T29014] bond20 (unregistering): Released all slaves [ 852.871278][T29014] bond21 (unregistering): Released all slaves [ 852.883656][T29014] bond22 (unregistering): Released all slaves [ 852.897008][T29014] bond23 (unregistering): Released all slaves [ 852.920661][T29014] bond24 (unregistering): Released all slaves [ 852.935088][T29014] bond25 (unregistering): Released all slaves [ 852.980301][ T6859] geneve4: left allmulticast mode [ 853.173216][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.180491][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.200669][ T6705] bridge_slave_0: entered allmulticast mode [ 853.215079][ T6705] bridge_slave_0: entered promiscuous mode [ 853.239724][T29014] !: left promiscuous mode [ 853.319631][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.340598][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.348366][ T6705] bridge_slave_1: entered allmulticast mode [ 853.366479][ T6705] bridge_slave_1: entered promiscuous mode [ 853.462499][T29014] : left promiscuous mode [ 853.470977][ T6898] siw: device registration error -23 [ 853.582204][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.638605][T29014] tipc: Left network mode [ 853.641237][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.785780][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8885'. [ 853.821869][ T6705] team0: Port device team_slave_0 added [ 853.840839][ T5941] IPVS: starting estimator thread 0... [ 853.878834][ T6705] team0: Port device team_slave_1 added [ 853.918239][ T6909] pimreg: entered allmulticast mode [ 853.927781][ T6908] pimreg: left allmulticast mode [ 853.934834][ T6926] IPVS: using max 33 ests per chain, 79200 per kthread [ 853.994331][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 854.048046][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.064327][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.111444][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.137798][ T6932] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.141700][ T6938] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8889'. [ 854.212452][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8889'. [ 854.222355][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8889'. [ 854.236564][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.260683][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.294572][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.318178][ T6932] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.387198][ T6932] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.569208][ T6932] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.606838][ T6705] hsr_slave_0: entered promiscuous mode [ 854.628278][ T6705] hsr_slave_1: entered promiscuous mode [ 854.638275][ T6957] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8891'. [ 854.640588][ T6705] debugfs: 'hsr0' already exists in 'hsr' [ 854.663155][ T6705] Cannot create hsr debugfs directory [ 854.694191][ T6945] lo speed is unknown, defaulting to 1000 [ 854.709936][ T6945] lo speed is unknown, defaulting to 1000 [ 855.011678][T29598] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.061635][T29015] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.120620][ T6705] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.209189][ T6945] lo speed is unknown, defaulting to 1000 [ 855.210027][T29596] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.249999][T29020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.365401][ T6980] sctp: [Deprecated]: syz.4.8899 (pid 6980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 855.365401][ T6980] Use struct sctp_sack_info instead [ 855.483203][ T6705] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.609978][ T6995] netlink: 'syz.2.8903': attribute type 11 has an invalid length. [ 855.669251][ T6998] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8904'. [ 855.737322][ T6705] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.782490][T29014] hsr_slave_0: left promiscuous mode [ 855.812966][T29014] hsr_slave_1: left promiscuous mode [ 856.185725][T29014] team0 (unregistering): Port device team_slave_1 removed [ 856.200540][T29014] team0 (unregistering): Port device team_slave_0 removed [ 856.347426][ T6705] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.558120][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8911'. [ 856.845884][ T6705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 856.885729][ T6705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 857.012458][ T6705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 857.031972][ T7056] netlink: 'syz.0.8918': attribute type 21 has an invalid length. [ 857.090981][ T7056] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8918'. [ 857.115420][ T6705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 857.157223][T29014] IPVS: stop unused estimator thread 0... [ 857.177881][ T7061] syzkaller0: entered promiscuous mode [ 857.183553][ T7061] syzkaller0: entered allmulticast mode [ 857.367026][ T7080] lo speed is unknown, defaulting to 1000 [ 857.375716][ T7080] lo speed is unknown, defaulting to 1000 [ 857.488525][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.534649][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.549083][T29596] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.556284][T29596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.592464][T29020] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.599664][T29020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.679107][ T7089] syzkaller0: entered promiscuous mode [ 857.695865][ T7089] syzkaller0: entered allmulticast mode [ 857.706449][ T7087] lo speed is unknown, defaulting to 1000 [ 857.714667][ T7080] lo speed is unknown, defaulting to 1000 [ 857.750718][ T7087] lo speed is unknown, defaulting to 1000 [ 857.758926][ T7089] ªªªªª-: renamed from bond_slave_0 [ 858.116063][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8926'. [ 858.325896][ T7087] lo speed is unknown, defaulting to 1000 [ 858.408203][ T7116] xfrm0: entered promiscuous mode [ 858.415325][ T7116] xfrm0: entered allmulticast mode [ 858.637413][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.795788][ T6705] veth0_vlan: entered promiscuous mode [ 858.836449][ T6705] veth1_vlan: entered promiscuous mode [ 858.978784][ T7141] Cannot find set identified by id 0 to match [ 858.980152][ T6705] veth0_macvtap: entered promiscuous mode [ 859.105517][ T6705] veth1_macvtap: entered promiscuous mode [ 859.216554][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.263530][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.357582][T29596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.424390][T29596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.439882][T29596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.486423][T29596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.972664][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8950'. [ 860.013450][ T7193] openvswitch: netlink: IPv4 tun info is not correct [ 860.015046][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8947'. [ 860.107208][ T7195] team0 (unregistering): Port device team_slave_0 removed [ 860.119145][ T7199] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8947'. [ 860.132348][ T7195] team0 (unregistering): Port device team_slave_1 removed [ 860.152456][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8947'. [ 860.177707][T29596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.208746][T29596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.330218][T29020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.359362][T29020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.578862][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8954'. [ 860.772286][ T7241] netlink: 'syz.3.8957': attribute type 10 has an invalid length. [ 860.789049][ T7206] syzkaller0: entered promiscuous mode [ 860.801036][ T7206] syzkaller0: entered allmulticast mode [ 860.825117][ T7241] team0: Device vxcan1 is of different type [ 861.028986][ T7259] netlink: 'syz.3.8961': attribute type 30 has an invalid length. [ 861.029025][ T7260] netlink: 'syz.3.8961': attribute type 30 has an invalid length. [ 861.065104][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8961'. [ 861.088557][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8961'. [ 862.659393][ T7259] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 862.724928][ T7260] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 862.758875][ T7260] bond9 (unregistering): Released all slaves [ 862.791765][ T7278] 8021q: VLANs not supported on ip6_vti0 [ 862.924077][ T7287] x_tables: duplicate underflow at hook 1 [ 863.027834][ T7290] lo speed is unknown, defaulting to 1000 [ 863.067152][ T7298] tipc: Enabling of bearer rejected, already enabled [ 863.077050][ T7290] lo speed is unknown, defaulting to 1000 [ 863.092246][ T7298] tipc: Enabling of bearer rejected, already enabled [ 863.150151][ T7298] tipc: Resetting bearer [ 863.180669][ T7304] syzkaller0: entered promiscuous mode [ 863.195672][ T7304] syzkaller0: entered allmulticast mode [ 863.330168][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8974'. [ 863.341432][ T7311] openvswitch: netlink: Multiple metadata blocks provided [ 863.354494][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8974'. [ 863.425672][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8973'. [ 863.593886][ T1766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.601276][ T7290] lo speed is unknown, defaulting to 1000 [ 863.605032][ T7642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 863.791516][ T7320] geneve2: entered promiscuous mode [ 863.797363][ T7320] geneve2: entered allmulticast mode [ 863.810312][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8977'. [ 863.844703][T15262] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.855912][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8977'. [ 863.857395][T15262] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.954003][T15262] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 863.968197][T15262] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 864.098641][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8979'. [ 864.108389][ T7326] netlink: 'syz.3.8979': attribute type 7 has an invalid length. [ 864.122909][ T7326] netlink: 'syz.3.8979': attribute type 8 has an invalid length. [ 864.177913][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8979'. [ 864.458117][ T7348] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 864.478664][ T7349] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 864.497296][ T7352] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 864.515919][ T7349] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8982'. [ 864.528258][ T7348] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8982'. [ 864.842015][ T7375] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8992'. [ 864.882853][ T1766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 865.104595][ T7382] veth1_to_bond: entered allmulticast mode [ 865.129523][ T7388] veth1_to_bond: left allmulticast mode [ 865.352577][ T7396] tipc: Started in network mode [ 865.361236][ T7396] tipc: Node identity 62f598bb34f, cluster identity 4711 [ 865.401425][ T7396] tipc: Enabled bearer , priority 0 [ 865.462249][ T7392] tipc: Resetting bearer [ 865.487810][ T7391] tipc: Disabling bearer [ 865.527515][ T7411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.656634][ T7420] syzkaller0: entered promiscuous mode [ 865.662560][ T7420] syzkaller0: entered allmulticast mode [ 865.953986][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.059532][ T7446] netlink: 'syz.3.9009': attribute type 10 has an invalid length. [ 866.095821][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.120355][ T7446] team0: Port device bond0 added [ 866.407981][ T7479] netlink: 'syz.3.9018': attribute type 1 has an invalid length. [ 866.441388][ T7479] bond9: (slave geneve5): making interface the new active one [ 866.450268][ T7479] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 866.459509][T28997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 866.468677][T28997] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 866.479804][ T7479] bond9 (unregistering): (slave geneve5): Releasing active interface [ 866.494334][ T7479] bond9 (unregistering): Released all slaves [ 866.510670][T29020] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 866.519404][T29020] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 869.168928][ T7454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.359728][ T7513] netlink: 'syz.0.9026': attribute type 7 has an invalid length. [ 869.397475][ T7513] netlink: 'syz.0.9026': attribute type 8 has an invalid length. [ 869.434973][ T7513] netlink: 'syz.0.9026': attribute type 9 has an invalid length. [ 869.545081][ T7527] __nla_validate_parse: 12 callbacks suppressed [ 869.545101][ T7527] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9026'. [ 869.559206][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9031'. [ 869.584451][ T7513] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.9026'. [ 869.664925][ T7532] bridge1: entered promiscuous mode [ 869.676864][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9032'. [ 869.691829][ T7532] bridge1: entered allmulticast mode [ 869.703553][ T7532] team0: Port device bridge1 added [ 869.743944][ T7545] bridge0: port 3(team0) entered blocking state [ 869.775185][ T7545] bridge0: port 3(team0) entered disabled state [ 869.803310][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9032'. [ 869.824949][ T7549] netlink: 83 bytes leftover after parsing attributes in process `syz.1.9031'. [ 869.857384][ T7545] team0: entered allmulticast mode [ 869.868085][ T7545] team_slave_0: entered allmulticast mode [ 869.874240][ T7545] team_slave_1: entered allmulticast mode [ 869.882584][ T7545] team0: entered promiscuous mode [ 869.888803][ T7545] team_slave_0: entered promiscuous mode [ 869.897540][ T7545] team_slave_1: entered promiscuous mode [ 869.905612][ T7545] bridge0: port 3(team0) entered blocking state [ 869.911979][ T7545] bridge0: port 3(team0) entered forwarding state [ 869.937400][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9030'. [ 869.937400][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9033'. [ 869.973636][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9032'. [ 869.974890][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9032'. [ 870.000323][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.241248][ T7574] netlink: 'syz.0.9036': attribute type 10 has an invalid length. [ 870.291308][ T7574] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 870.448734][ T7584] netlink: 'syz.3.9038': attribute type 11 has an invalid length. [ 870.565011][ T7593] tipc: Resetting bearer [ 871.102435][ T7623] macvtap1: entered promiscuous mode [ 871.111365][ T7623] macvtap1: entered allmulticast mode [ 871.125787][ T7623] dummy0: entered promiscuous mode [ 871.132061][ T7623] dummy0: entered allmulticast mode [ 871.141859][ T7623] team0: Device macvtap1 failed to register rx_handler [ 871.151670][ T7623] dummy0: left allmulticast mode [ 871.160178][ T7623] dummy0: left promiscuous mode [ 871.183621][ T7626] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 871.198018][ T7626] x_tables: duplicate underflow at hook 3 [ 871.348007][ T7639] wg0: entered allmulticast mode [ 871.469235][ T7651] pimreg: entered allmulticast mode [ 871.500151][ T7657] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 871.540573][ T7654] pimreg: left allmulticast mode [ 871.543202][ T7657] netlink: 'syz.2.9061': attribute type 2 has an invalid length. [ 871.595649][ T7666] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 871.614360][ T7657] netlink: 'syz.2.9061': attribute type 8 has an invalid length. [ 871.655794][ T7658] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 871.734262][ T7673] lo speed is unknown, defaulting to 1000 [ 871.741847][ T7673] lo speed is unknown, defaulting to 1000 [ 871.776516][ T7684] x_tables: duplicate underflow at hook 4 [ 871.992174][ T7673] lo speed is unknown, defaulting to 1000 [ 872.296085][ T7707] geneve3: entered promiscuous mode [ 872.673856][ T7726] netlink: 'syz.4.9078': attribute type 1 has an invalid length. [ 872.725229][ T7723] lo speed is unknown, defaulting to 1000 [ 872.756629][ T7723] lo speed is unknown, defaulting to 1000 [ 872.869389][ T7732] syz_tun: entered allmulticast mode [ 873.060175][ T7723] lo speed is unknown, defaulting to 1000 [ 873.253273][ T7747] tipc: New replicast peer: 255.255.255.255 [ 873.259932][ T7747] tipc: Enabled bearer , priority 10 [ 873.721758][ T7776] lo speed is unknown, defaulting to 1000 [ 873.745142][ T7776] lo speed is unknown, defaulting to 1000 [ 873.956109][ T7776] lo speed is unknown, defaulting to 1000 [ 874.015514][ T7784] netlink: 'syz.2.9094': attribute type 1 has an invalid length. [ 874.214544][ T7793] syzkaller1: entered promiscuous mode [ 874.220119][ T7793] syzkaller1: entered allmulticast mode [ 874.302573][ T7814] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 874.431907][ T7820] netlink: 'syz.4.9102': attribute type 1 has an invalid length. [ 874.449526][ T7820] netlink: 'syz.4.9102': attribute type 4 has an invalid length. [ 874.474095][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 874.583464][ T7824] __nla_validate_parse: 19 callbacks suppressed [ 874.583479][ T7824] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9104'. [ 874.721448][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9107'. [ 874.914771][ T7847] geneve2: entered promiscuous mode [ 875.124317][ T7856] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9113'. [ 875.250641][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.263812][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.282962][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 875.306980][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 875.315955][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 875.338222][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9115'. [ 875.548140][T28697] syz_tun (unregistering): left promiscuous mode [ 875.614551][ T7858] lo speed is unknown, defaulting to 1000 [ 875.633344][ T7858] lo speed is unknown, defaulting to 1000 [ 875.648367][ T7870] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9117'. [ 875.699484][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9117'. [ 875.753304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.761369][ C1] lec:lec_tx_timeout: lec0 [ 875.834768][ T7873] netlink: 'syz.1.9118': attribute type 3 has an invalid length. [ 876.107865][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9122'. [ 876.256087][ T7858] lo speed is unknown, defaulting to 1000 [ 876.264127][ T7881] syzkaller0: entered promiscuous mode [ 876.269633][ T7881] syzkaller0: entered allmulticast mode [ 876.339354][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9124'. [ 877.083080][ T7902] dvmrp12: entered allmulticast mode [ 877.183471][ T7858] chnl_net:caif_netlink_parms(): no params data found [ 877.290821][ T7900] dvmrp12: left allmulticast mode [ 877.353834][ T5829] Bluetooth: hci2: command tx timeout [ 877.415738][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.423495][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.430926][ T7858] bridge_slave_0: entered allmulticast mode [ 877.468861][ T7858] bridge_slave_0: entered promiscuous mode [ 877.529037][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.617282][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.643552][ T7858] bridge_slave_1: entered allmulticast mode [ 877.668071][ T7858] bridge_slave_1: entered promiscuous mode [ 877.714651][ T7922] SET target dimension over the limit! [ 877.742294][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.756774][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.846063][ T7858] team0: Port device team_slave_0 added [ 877.863328][ T7858] team0: Port device team_slave_1 added [ 877.911725][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.929521][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.989714][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.020626][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.038989][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.066712][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.220937][ T7858] hsr_slave_0: entered promiscuous mode [ 878.229494][ T7858] hsr_slave_1: entered promiscuous mode [ 878.236975][ T7858] debugfs: 'hsr0' already exists in 'hsr' [ 878.243422][ T7858] Cannot create hsr debugfs directory [ 878.249092][ T7947] ip6tnl0: Caught tx_queue_len zero misconfig [ 878.334887][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9138'. [ 878.348080][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9141'. [ 878.410784][ T7960] netlink: 'syz.0.9143': attribute type 33 has an invalid length. [ 878.591688][ T7858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.604277][ T7858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.610641][ T7965] netlink: 'syz.3.9144': attribute type 1 has an invalid length. [ 878.615690][ T7858] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 878.644738][ T7964] syzkaller0: entered promiscuous mode [ 878.650305][ T7964] syzkaller0: entered allmulticast mode [ 878.757760][ T7858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.770713][ T7858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.781590][ T7858] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 878.896533][ T7858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.913291][ T7858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.925162][ T7858] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 879.058248][ T7858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.077148][ T7858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.092692][ T7858] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 879.200545][ T7994] ip6gre1: entered promiscuous mode [ 879.210531][ T7994] ip6gre1: entered allmulticast mode [ 879.249059][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.283700][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.369089][ T8003] sctp: [Deprecated]: syz.2.9157 (pid 8003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 879.369089][ T8003] Use struct sctp_sack_info instead [ 879.404679][ T7858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 879.433282][ T5829] Bluetooth: hci2: command tx timeout [ 879.438863][ T7858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 879.458008][ T7858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 879.496165][ T7858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 879.646614][ T8024] __nla_validate_parse: 3 callbacks suppressed [ 879.646634][ T8024] netlink: 15 bytes leftover after parsing attributes in process `syz.0.9163'. [ 879.698420][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.725019][ T7858] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.740560][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.747793][T15261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.770127][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.777356][T15261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.790594][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9162'. [ 880.119603][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.237629][T29015] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 880.624532][ T7858] veth0_vlan: entered promiscuous mode [ 880.756179][ T7858] veth1_vlan: entered promiscuous mode [ 880.818185][ T8085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.831604][ T8085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 881.367044][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9182'. [ 881.513290][ T5829] Bluetooth: hci2: command tx timeout [ 882.651971][ T8085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.664538][ T8085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 882.685531][ T8103] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 882.697225][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.705044][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.717723][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.725550][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.733430][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.741150][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.749187][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.757048][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.766069][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.774216][ T8104] netlink: 'syz.2.9182': attribute type 1 has an invalid length. [ 882.795444][ T5941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 882.897297][ T8085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.907879][ T8085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 882.955631][ T7858] veth0_macvtap: entered promiscuous mode [ 882.986399][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9184'. [ 883.001367][ T8085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.012972][ T8085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 883.037308][ T8109] pim6reg1: entered promiscuous mode [ 883.042650][ T8109] pim6reg1: entered allmulticast mode [ 883.091012][ T7858] veth1_macvtap: entered promiscuous mode [ 883.154610][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.190504][T29020] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 883.205763][T29020] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.231661][T29020] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 883.240446][T29020] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.256276][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.276365][T15261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 883.286202][T15261] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.310649][T29015] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 883.319154][T29015] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.327965][T29015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.344728][T29015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.371263][T29015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.391831][T29015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.516975][T29015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.521428][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9190'. [ 883.535573][T29015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.552908][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9190'. [ 883.593896][ T5829] Bluetooth: hci2: command tx timeout [ 883.642297][ T8133] !: entered promiscuous mode [ 883.682137][T15261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.701807][T15261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.781503][ T8146] lo speed is unknown, defaulting to 1000 [ 883.781719][ T8141] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9193'. [ 883.837714][ T8146] lo speed is unknown, defaulting to 1000 [ 884.067047][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9195'. [ 884.115818][ T8155] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 884.127901][ T8159] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.9197'. [ 884.163735][ T8159] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 884.305126][T26576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 884.321678][T26576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 884.331469][T26576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 884.343195][T26576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 884.352461][T26576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.387591][ T8166] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9198'. [ 884.450194][ T8164] lo speed is unknown, defaulting to 1000 [ 884.768433][ T8146] lo speed is unknown, defaulting to 1000 [ 884.768478][ T8164] lo speed is unknown, defaulting to 1000 [ 884.867704][ T8183] __nla_validate_parse: 2 callbacks suppressed [ 884.867723][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9203'. [ 885.109844][ T8164] lo speed is unknown, defaulting to 1000 [ 885.384038][T29014] veth7: left allmulticast mode [ 885.389035][T29014] veth7: left promiscuous mode [ 885.394479][T29014] bridge3: port 3(veth7) entered disabled state [ 885.408151][T29014] veth0_to_bond: left allmulticast mode [ 885.414924][T29014] veth0_to_bond: left promiscuous mode [ 885.420882][T29014] bridge3: port 2(veth0_to_bond) entered disabled state [ 885.431203][T29014] veth5: left allmulticast mode [ 885.436619][T29014] veth5: left promiscuous mode [ 885.441787][T29014] bridge3: port 1(veth5) entered disabled state [ 885.457666][T29014] batman_adv: batadv0: Interface deactivated: gretap1 [ 885.559726][T29014] tipc: Resetting bearer [ 885.577059][T29014] ip6gretap0 (unregistering): left allmulticast mode [ 885.619963][T29014] tipc: Disabling bearer [ 885.817483][ T8202] netlink: 388 bytes leftover after parsing attributes in process `syz.0.9208'. [ 885.916832][T29014] gretap0 (unregistering): left promiscuous mode [ 885.962582][T29014] batman_adv: batadv0: Removing interface: gretap1 [ 885.999791][T29014] bond9 (unregistering): (slave geneve3): Releasing active interface [ 886.010812][ T8393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 886.038064][T29014] geneve1 (unregistering): left allmulticast mode [ 886.127558][T29014] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 886.136676][T29014] bridge2 (unregistering): left promiscuous mode [ 886.144658][T29014] bridge2 (unregistering): left allmulticast mode [ 886.306102][T29014] bond0 (unregistering): left promiscuous mode [ 886.312284][T29014] bond_slave_0: left promiscuous mode [ 886.318159][T29014] bond_slave_1: left promiscuous mode [ 886.329485][T29014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.342560][T29014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.352948][T29014] bond0 (unregistering): Released all slaves [ 886.362557][T29014] bond1 (unregistering): Released all slaves [ 886.375833][T29014] bond2 (unregistering): Released all slaves [ 886.388841][T29014] bond3 (unregistering): Released all slaves [ 886.395073][T26576] Bluetooth: hci1: command tx timeout [ 886.411653][T29014] bond4 (unregistering): Released all slaves [ 886.431458][T29014] bond5 (unregistering): Released all slaves [ 886.446638][T29014] bond6 (unregistering): Released all slaves [ 886.459519][T29014] bond7 (unregistering): Released all slaves [ 886.474665][T29014] bond8 (unregistering): Released all slaves [ 886.491305][T29014] bond9 (unregistering): Released all slaves [ 886.509658][T29014] bond10 (unregistering): (slave lo): Releasing backup interface [ 886.518112][T29014] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 886.536311][T29014] bond10 (unregistering): Released all slaves [ 886.552353][T29014] bond11 (unregistering): (slave veth13): Releasing active interface [ 886.563680][T29014] bond11 (unregistering): Released all slaves [ 886.580327][ T8164] chnl_net:caif_netlink_parms(): no params data found [ 886.779214][T29014] tipc: Left network mode [ 886.815152][T29014] IPVS: stopping backup sync thread 24702 ... [ 886.824421][ T8210] lo speed is unknown, defaulting to 1000 [ 886.877568][ T8210] lo speed is unknown, defaulting to 1000 [ 887.038025][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.055484][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.067800][ T8164] bridge_slave_0: entered allmulticast mode [ 887.076245][ T8164] bridge_slave_0: entered promiscuous mode [ 887.175744][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.185140][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.192515][ T8164] bridge_slave_1: entered allmulticast mode [ 887.193183][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9213'. [ 887.204370][ T8164] bridge_slave_1: entered promiscuous mode [ 887.230491][ T8232] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 887.241574][ T8232] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 887.257183][ T8210] lo speed is unknown, defaulting to 1000 [ 887.270826][ T8229] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 887.325132][ T8235] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 887.372532][ T8229] macvlan2: entered promiscuous mode [ 887.378120][ T8229] macvlan2: entered allmulticast mode [ 887.386147][ T8229] bond1: entered promiscuous mode [ 887.391664][ T8229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 887.400472][ T8229] bond1: left promiscuous mode [ 887.415001][ T8164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.451485][ T8164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.561688][ T8164] team0: Port device team_slave_0 added [ 887.651099][ T8164] team0: Port device team_slave_1 added [ 887.669744][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9216'. [ 887.804193][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.821644][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.902794][ T8164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.952274][ T8164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.970699][ T8164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.017794][ T8164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.304601][ T8164] hsr_slave_0: entered promiscuous mode [ 888.311490][ T8164] hsr_slave_1: entered promiscuous mode [ 888.398139][ T8164] debugfs: 'hsr0' already exists in 'hsr' [ 888.432769][ T8164] Cannot create hsr debugfs directory [ 888.485716][T26576] Bluetooth: hci1: command tx timeout [ 888.647018][T29014] hsr_slave_0: left promiscuous mode [ 888.661223][T29014] hsr_slave_1: left promiscuous mode [ 888.675428][T29014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.692004][T29014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.708009][T29014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.726109][T29014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.755240][T29014] veth1_macvtap: left promiscuous mode [ 888.767525][T29014] veth1_vlan: left promiscuous mode [ 889.112038][T29014] team0 (unregistering): Port device team_slave_1 removed [ 889.128723][T29014] team0 (unregistering): Port device team_slave_0 removed [ 889.653806][ T8303] validate_nla: 40 callbacks suppressed [ 889.653827][ T8303] netlink: 'syz.2.9230': attribute type 21 has an invalid length. [ 889.678784][ T8303] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9230'. [ 889.679478][T27257] lec:lec_start_xmit: lec0:No lecd attached [ 889.701811][ T8303] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9230'. [ 889.829022][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9232'. [ 889.859568][T29014] IPVS: stop unused estimator thread 0... [ 890.124025][ T8164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 890.171609][ T8164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 890.182216][ T8164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 890.192139][ T8323] lo speed is unknown, defaulting to 1000 [ 890.193576][ T8164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 890.219146][ T8323] lo speed is unknown, defaulting to 1000 [ 890.375064][ T8164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.409338][ T8164] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.425351][ T8336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.430352][T29020] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.441415][T29020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.511687][ T8323] lo speed is unknown, defaulting to 1000 [ 890.521760][T29015] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.529066][T29015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.554708][T26576] Bluetooth: hci1: command tx timeout [ 890.842200][ T8347] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 891.008497][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9237'. [ 891.510089][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9244'. [ 891.532416][ T8366] lo speed is unknown, defaulting to 1000 [ 891.535844][ T8164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.571053][ T8366] lo speed is unknown, defaulting to 1000 [ 891.756381][ T8393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 891.809023][ T8366] lo speed is unknown, defaulting to 1000 [ 891.937025][ T8164] veth0_vlan: entered promiscuous mode [ 891.960780][ T8164] veth1_vlan: entered promiscuous mode [ 892.019333][ T8164] veth0_macvtap: entered promiscuous mode [ 892.035458][ T8164] veth1_macvtap: entered promiscuous mode [ 892.057714][ T8164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.069227][ T8164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.115439][T29020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.136517][T29020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.159931][ T8389] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9248'. [ 892.236931][T29020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.247709][T29020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.504094][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9254'. [ 892.623313][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9254'. [ 892.634777][T26576] Bluetooth: hci1: command tx timeout [ 892.829405][T29020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.878362][T29020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.023377][ T8393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.044677][ T8393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.183832][ T8440] syzkaller1: entered promiscuous mode [ 893.190986][ T8440] syzkaller1: entered allmulticast mode [ 893.230116][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9260'. [ 893.492264][ T8446] lo speed is unknown, defaulting to 1000 [ 893.506509][ T8446] lo speed is unknown, defaulting to 1000 [ 893.730370][ T8446] lo speed is unknown, defaulting to 1000 [ 894.085555][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9268'. [ 894.260817][ T8483] lo speed is unknown, defaulting to 1000 [ 894.302538][ T8483] lo speed is unknown, defaulting to 1000 [ 894.346730][ T8493] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.9272'. [ 894.699436][ T8483] lo speed is unknown, defaulting to 1000 [ 894.713041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 894.721120][ C1] lec:lec_tx_timeout: lec0 [ 894.758271][ T8494] lo speed is unknown, defaulting to 1000 [ 894.807154][ T8517] netlink: 332 bytes leftover after parsing attributes in process `syz.2.9279'. [ 894.822034][ T8517] netlink: 'syz.2.9279': attribute type 9 has an invalid length. [ 894.830002][ T8494] lo speed is unknown, defaulting to 1000 [ 894.846557][ T8517] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9279'. [ 895.393869][ T8494] lo speed is unknown, defaulting to 1000 [ 895.616193][ T7642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.631144][T15261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 896.261380][ T8576] netlink: 'syz.0.9292': attribute type 2 has an invalid length. [ 896.430849][ T8578] bond2: Unable to set up delay as MII monitoring is disabled [ 896.467933][ T8578] bond2 (unregistering): Released all slaves [ 896.601132][ T8587] __nla_validate_parse: 4 callbacks suppressed [ 896.601151][ T8587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9296'. [ 896.691793][ T8587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9296'. [ 896.704524][ T8587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9296'. [ 896.717129][ T8587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9296'. [ 896.739360][ T8595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9294'. [ 896.755206][ T8587] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9296'. [ 896.768769][ T8587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9296'. [ 897.028440][ T8609] team0 (unregistering): Port device team_slave_0 removed [ 897.078151][ T8609] team0 (unregistering): Port device team_slave_1 removed [ 897.390116][ T8622] netlink: 'syz.0.9304': attribute type 13 has an invalid length. [ 897.400843][ T8622] gretap0: refused to change device tx_queue_len [ 897.410502][ T8622] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 897.516614][T29020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 897.540372][ T8625] batadv_slave_1: entered promiscuous mode [ 897.554849][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9306'. [ 897.584133][ T8629] erspan0: entered promiscuous mode [ 897.611739][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9305'. [ 897.621368][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.639350][ T8625] batadv_slave_1 (unregistering): left promiscuous mode [ 897.653010][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.735653][ T8632] bond1: invalid ARP target 0.0.0.0 specified for addition [ 897.743269][ T8632] bond1: option arp_ip_target: invalid value (0) [ 897.765367][ T8632] bond1 (unregistering): Released all slaves [ 897.841418][ T8640] netlink: 'syz.1.9311': attribute type 1 has an invalid length. [ 897.963755][ T8641] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 897.978799][ T8641] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 898.489724][ T8672] tun0: tun_chr_ioctl cmd 1074025681 [ 898.491493][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9321'. [ 898.651504][ T8680] lo speed is unknown, defaulting to 1000 [ 898.669400][ T8680] lo speed is unknown, defaulting to 1000 [ 898.673114][ T8690] netlink: 'syz.3.9323': attribute type 5 has an invalid length. [ 898.964200][ T8693] tipc: Enabling of bearer rejected, already enabled [ 899.514607][ T8680] lo speed is unknown, defaulting to 1000 [ 900.479539][ T8738] sctp: [Deprecated]: syz.1.9338 (pid 8738) Use of int in max_burst socket option. [ 900.479539][ T8738] Use struct sctp_assoc_value instead [ 901.196828][ T8768] syzkaller0: entered promiscuous mode [ 901.202513][ T8768] syzkaller0: entered allmulticast mode [ 901.354906][T15261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 901.582552][ T8789] lo speed is unknown, defaulting to 1000 [ 901.614971][ T8789] lo speed is unknown, defaulting to 1000 [ 901.638526][ T8792] ip_vti0: entered promiscuous mode [ 901.666114][ T8792] ip_vti0: entered allmulticast mode [ 902.104511][ T8789] lo speed is unknown, defaulting to 1000 [ 902.536079][ T8813] lo speed is unknown, defaulting to 1000 [ 902.627301][ T8813] lo speed is unknown, defaulting to 1000 [ 902.646615][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 902.785830][ T8813] lo speed is unknown, defaulting to 1000 [ 904.079837][ T8762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 904.335165][ T8829] netlink: 'syz.3.9350': attribute type 1 has an invalid length. [ 904.414143][ T8835] syzkaller0: entered promiscuous mode [ 904.430364][ T8835] syzkaller0: entered allmulticast mode [ 904.460268][ T8838] __nla_validate_parse: 2 callbacks suppressed [ 904.460288][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9351'. [ 904.977189][ T8863] netlink: 13 bytes leftover after parsing attributes in process `syz.2.9358'. [ 905.067416][ T8864] atomic_op ffff88807cd25998 conn xmit_atomic 0000000000000000 [ 905.219707][ T8868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.258450][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.281308][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.343891][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.391349][ T8868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.429716][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.458085][ T8891] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20001 [ 905.500340][ T8868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.530506][ T8886] lo speed is unknown, defaulting to 1000 [ 905.538085][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.557194][ T8886] lo speed is unknown, defaulting to 1000 [ 905.564097][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.600860][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.677939][ T8868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.747722][ T8876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9361'. [ 905.832001][ T8886] lo speed is unknown, defaulting to 1000 [ 905.953207][ T8908] netlink: 'syz.1.9366': attribute type 1 has an invalid length. [ 905.961001][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.328582][ T8920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.366573][ T8929] xt_hashlimit: size too large, truncated to 1048576 [ 906.564953][T15262] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.670454][T29014] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.730755][T29015] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.778559][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.844832][T29014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.115702][T29014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 907.399996][ T8963] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 907.420554][ T8970] lo speed is unknown, defaulting to 1000 [ 907.485148][ T8970] lo speed is unknown, defaulting to 1000 [ 907.801825][ T8985] bond0: Unable to set down delay as MII monitoring is disabled [ 907.819956][ T8970] lo speed is unknown, defaulting to 1000 [ 907.894303][ T8997] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.126570][ T8997] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.215345][ T9024] netlink: 'syz.1.9388': attribute type 1 has an invalid length. [ 908.266162][ T8997] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.370107][ T8997] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.395496][T29014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 908.847289][T15262] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.024299][T15262] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.055773][T15262] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.102894][T29014] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.141986][ T7661] IPVS: starting estimator thread 0... [ 909.243602][ T9070] IPVS: using max 26 ests per chain, 62400 per kthread [ 909.463675][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 909.484737][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 909.497397][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 909.505560][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 909.515836][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 909.581194][ T9085] lo speed is unknown, defaulting to 1000 [ 909.625722][ T9085] lo speed is unknown, defaulting to 1000 [ 909.810511][ T9098] __nla_validate_parse: 69 callbacks suppressed [ 909.810531][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9411'. [ 909.867822][ T9100] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9413'. [ 909.904283][ T9100] netlink: 'syz.4.9413': attribute type 1 has an invalid length. [ 909.944010][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9414'. [ 909.973729][ T9103] bond0: Unable to set up delay as MII monitoring is disabled [ 910.229929][T29902] syz_tun (unregistering): left allmulticast mode [ 910.241239][T29902] bond0: (slave syz_tun): Releasing backup interface [ 910.285314][ T9085] lo speed is unknown, defaulting to 1000 [ 910.300390][ T9111] netlink: 'syz.0.9417': attribute type 10 has an invalid length. [ 910.301962][ T9113] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 910.821806][ T9085] chnl_net:caif_netlink_parms(): no params data found [ 910.855204][ C0] vcan0: j1939_tp_rxtimer: 0xffff888087835c00: rx timeout, send abort [ 910.972555][ T9148] netlink: 'syz.4.9430': attribute type 10 has an invalid length. [ 911.020854][ T9148] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 911.087616][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9431'. [ 911.101204][ T9165] x_tables: duplicate underflow at hook 2 [ 911.141984][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.161382][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.184920][ T9085] bridge_slave_0: entered allmulticast mode [ 911.201996][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9436'. [ 911.203282][ T9085] bridge_slave_0: entered promiscuous mode [ 911.221568][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.235838][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.248188][ T9085] bridge_slave_1: entered allmulticast mode [ 911.265591][ T9085] bridge_slave_1: entered promiscuous mode [ 911.323577][ T9181] netlink: 'syz.3.9439': attribute type 2 has an invalid length. [ 911.354937][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9439'. [ 911.355329][ C0] vcan0: j1939_tp_rxtimer: 0xffff888087837c00: rx timeout, send abort [ 911.373567][ C0] vcan0: j1939_tp_rxtimer: 0xffff888087835c00: abort rx timeout. Force session deactivation [ 911.427033][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.440459][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9435'. [ 911.442456][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.493357][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9435'. [ 911.511202][ T9085] team0: Port device team_slave_0 added [ 911.529161][ T9085] team0: Port device team_slave_1 added [ 911.584898][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.594670][T26576] Bluetooth: hci4: command tx timeout [ 911.612385][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.644889][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.658235][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.665828][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.694519][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.752122][ T9085] hsr_slave_0: entered promiscuous mode [ 911.759839][ T9085] hsr_slave_1: entered promiscuous mode [ 911.791456][ T9085] debugfs: 'hsr0' already exists in 'hsr' [ 911.801818][ T9085] Cannot create hsr debugfs directory [ 911.808803][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9443'. [ 911.872049][ C0] vcan0: j1939_tp_rxtimer: 0xffff888087837c00: abort rx timeout. Force session deactivation [ 912.118449][ T9085] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.163052][ T9204] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9447'. [ 912.181711][ T9204] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 912.206323][ T9204] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.237269][ T9085] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.274951][ T9204] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 912.303916][ T9204] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.325949][ T9085] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.376785][ T9204] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 912.388602][ T9204] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.419156][ T9085] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.501030][ T9204] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 912.517004][ T9204] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.675280][T29014] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.684204][T29014] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.735825][ T8393] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.745286][ T8393] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.800284][ T8393] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.815487][ T8393] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.868552][ T9243] netlink: 'syz.0.9456': attribute type 21 has an invalid length. [ 912.874979][T15262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.912952][T15262] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.921540][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 913.415251][ T9085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 913.442406][ T9085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 913.459510][ T9085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 913.493766][ T9085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 913.626097][ T9085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.647030][ T9085] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.662594][T29015] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.669774][T29015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.677545][T26576] Bluetooth: hci4: command tx timeout [ 913.726392][T29598] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.733580][T29598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.050622][ T9085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.105907][ T9085] veth0_vlan: entered promiscuous mode [ 914.119074][ T9085] veth1_vlan: entered promiscuous mode [ 914.155876][T15262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.178859][ T9085] veth0_macvtap: entered promiscuous mode [ 914.199058][ T9085] veth1_macvtap: entered promiscuous mode [ 914.220362][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.247801][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.298735][T29598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.310769][T29598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.348782][T29598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.359041][T29598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.487697][T15262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.520055][T15262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.592859][T29598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.600734][T29598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.879502][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.890606][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.984336][ T9329] netlink: 'syz.3.9474': attribute type 13 has an invalid length. [ 915.046048][T15261] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.049492][ T9346] __nla_validate_parse: 10 callbacks suppressed [ 915.049511][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9477'. [ 915.058441][T15261] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.089035][T15261] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.149945][T15261] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 915.305289][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9479'. [ 915.326782][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9479'. [ 915.550835][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9487'. [ 915.755177][T26576] Bluetooth: hci4: command tx timeout [ 916.073396][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 917.172976][ T9403] netlink: 'syz.1.9493': attribute type 10 has an invalid length. [ 917.235669][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9493'. [ 917.486797][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.494511][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.832801][T26576] Bluetooth: hci4: command tx timeout [ 918.637878][T29020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 918.685022][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.707057][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.123403][ T9403] bridge0: port 3(team0) entered disabled state [ 919.130678][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.165343][ T9403] bridge0: port 3(team0) entered blocking state [ 919.171801][ T9403] bridge0: port 3(team0) entered forwarding state [ 919.178590][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.185784][ T9403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.200058][ T9403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 919.219003][ T9406] team0: left allmulticast mode [ 919.233841][ T9406] team_slave_0: left allmulticast mode [ 919.239356][ T9406] team_slave_1: left allmulticast mode [ 919.256623][ T9406] team0: left promiscuous mode [ 919.261513][ T9406] team_slave_0: left promiscuous mode [ 919.267514][ T9406] team_slave_1: left promiscuous mode [ 919.281540][ T9406] bridge0: port 3(team0) entered disabled state [ 919.292295][ T9406] bridge_slave_1: left allmulticast mode [ 919.298986][ T9406] bridge_slave_1: left promiscuous mode [ 919.308213][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.323751][ T9406] bridge_slave_0: left allmulticast mode [ 919.334717][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9497'. [ 919.340271][ T9406] bridge_slave_0: left promiscuous mode [ 919.357743][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.410478][ T9406] bond0: (slave bridge0): Releasing backup interface [ 919.490919][T15262] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.519359][T15262] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.695080][T15262] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.726584][T15262] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.766886][ T9440] syzkaller0: entered promiscuous mode [ 919.773236][ T9440] syzkaller0: entered allmulticast mode [ 919.806135][ T9440] tipc: Started in network mode [ 919.812125][ T9440] tipc: Node identity 4a918a924bfa, cluster identity 4711 [ 919.821254][ T9440] tipc: Enabled bearer , priority 0 [ 919.840809][ T9440] tipc: Resetting bearer [ 919.854399][ T9440] netlink: 'syz.2.9500': attribute type 3 has an invalid length. [ 919.863842][ T9440] netlink: 316 bytes leftover after parsing attributes in process `syz.2.9500'. [ 919.885141][ T9439] tipc: Resetting bearer [ 919.908563][ T9439] tipc: Disabling bearer [ 919.924703][T28997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 920.114278][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9506'. [ 920.660021][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.911242][ T9500] tipc: Resetting bearer [ 921.176787][ T9500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.187194][ T9500] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 921.189603][ T9514] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9517'. [ 921.335860][ T9500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 921.347401][ T9500] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 921.603680][ T9500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 921.609624][ T9500] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 921.610721][ T9526] lo speed is unknown, defaulting to 1000 [ 921.644311][ T9526] lo speed is unknown, defaulting to 1000 [ 921.690616][ T9535] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9522'. [ 921.866574][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 921.996703][ T9536] lo speed is unknown, defaulting to 1000 [ 922.007599][ T9526] lo speed is unknown, defaulting to 1000 [ 922.027083][ T9536] lo speed is unknown, defaulting to 1000 [ 922.269927][ T9561] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9527'. [ 922.414065][ T9571] netlink: 'syz.1.9528': attribute type 21 has an invalid length. [ 922.553089][ T9571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9528'. [ 922.581604][ T9571] netlink: 'syz.1.9528': attribute type 1 has an invalid length. [ 922.631839][ T9578] ================================================================== [ 922.639946][ T9578] BUG: KASAN: slab-out-of-bounds in fib6_info_nh_dev+0x37/0x310 [ 922.647608][ T9578] Read of size 8 at addr ffff8880346396d0 by task syz.3.9530/9578 [ 922.655396][ T9578] [ 922.657706][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.3.9530 Not tainted syzkaller #0 PREEMPT(full) [ 922.657721][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 922.657729][ T9578] Call Trace: [ 922.657735][ T9578] [ 922.657741][ T9578] dump_stack_lvl+0xe8/0x150 [ 922.657760][ T9578] print_report+0xba/0x230 [ 922.657774][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 922.657790][ T9578] kasan_report+0x117/0x150 [ 922.657804][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 922.657822][ T9578] fib6_info_nh_dev+0x37/0x310 [ 922.657838][ T9578] nft_fib6_info_nh_uses_dev+0xbc/0x150 [ 922.657854][ T9578] ? nft_fib6_eval+0x883/0xba0 [ 922.657870][ T9578] nft_fib6_eval+0x88e/0xba0 [ 922.657888][ T9578] ? __pfx_nft_fib6_eval+0x10/0x10 [ 922.657906][ T9578] ? __lock_acquire+0x6b5/0x2cf0 [ 922.657926][ T9578] nft_do_chain+0x45e/0x1990 [ 922.657937][ T9578] ? lockdep_hardirqs_on+0x7a/0x110 [ 922.657953][ T9578] ? ip6t_do_table+0x137d/0x1560 [ 922.657964][ T9578] ? skb_copy_bits+0x8a/0x8f0 [ 922.657982][ T9578] ? __pfx_nft_do_chain+0x10/0x10 [ 922.658002][ T9578] nft_do_chain_inet+0x29d/0x380 [ 922.658013][ T9578] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 922.658024][ T9578] ? nf_nat_ipv6_in+0x203/0x2c0 [ 922.658038][ T9578] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 922.658051][ T9578] ? stack_trace_save+0xa9/0x100 [ 922.658062][ T9578] ? lock_acquire+0xf0/0x2e0 [ 922.658075][ T9578] ? ip_sabotage_in+0x57/0x270 [ 922.658090][ T9578] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 922.658100][ T9578] nf_hook_slow+0xc5/0x220 [ 922.658117][ T9578] NF_HOOK+0x21f/0x3c0 [ 922.658132][ T9578] ? skb_orphan+0x4f/0xd0 [ 922.658146][ T9578] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 922.658160][ T9578] ? NF_HOOK+0x9e/0x3c0 [ 922.658174][ T9578] ? __pfx_NF_HOOK+0x10/0x10 [ 922.658189][ T9578] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 922.658204][ T9578] ? netif_receive_skb+0x102/0xc50 [ 922.658218][ T9578] netif_receive_skb+0x278/0xc50 [ 922.658232][ T9578] ? __pfx_netif_receive_skb+0x10/0x10 [ 922.658244][ T9578] ? __lock_acquire+0x6b5/0x2cf0 [ 922.658258][ T9578] ? tun_rx_batched+0x185/0x790 [ 922.658274][ T9578] tun_rx_batched+0x1de/0x790 [ 922.658288][ T9578] ? __build_skb+0x62/0x440 [ 922.658304][ T9578] ? __pfx_tun_rx_batched+0x10/0x10 [ 922.658326][ T9578] ? tun_get_user+0x2354/0x3dd0 [ 922.658342][ T9578] ? __local_bh_enable_ip+0xd0/0x130 [ 922.658357][ T9578] ? tun_get_user+0x2669/0x3dd0 [ 922.658372][ T9578] tun_get_user+0x2a78/0x3dd0 [ 922.658392][ T9578] ? aa_file_perm+0x50e/0x15e0 [ 922.658407][ T9578] ? __pfx_tun_get_user+0x10/0x10 [ 922.658421][ T9578] ? aa_file_perm+0x192/0x15e0 [ 922.658439][ T9578] ? ref_tracker_alloc+0x35c/0x4c0 [ 922.658455][ T9578] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 922.658470][ T9578] ? tun_get+0x1c/0x2f0 [ 922.658485][ T9578] ? tun_get+0x1c/0x2f0 [ 922.658499][ T9578] ? tun_get+0x1c/0x2f0 [ 922.658514][ T9578] tun_chr_write_iter+0x113/0x200 [ 922.658529][ T9578] vfs_write+0x61d/0xb90 [ 922.658543][ T9578] ? __pfx_vfs_write+0x10/0x10 [ 922.658556][ T9578] ? __fget_files+0x2a/0x420 [ 922.658573][ T9578] ksys_write+0x150/0x270 [ 922.658585][ T9578] ? __pfx_ksys_write+0x10/0x10 [ 922.658598][ T9578] do_syscall_64+0x14d/0xf80 [ 922.658613][ T9578] ? trace_irq_disable+0x3b/0x150 [ 922.658629][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.658640][ T9578] ? clear_bhb_loop+0x40/0x90 [ 922.658651][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.658663][ T9578] RIP: 0033:0x7f8f5715cfce [ 922.658675][ T9578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 922.658685][ T9578] RSP: 002b:00007f8f553f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 922.658699][ T9578] RAX: ffffffffffffffda RBX: 00007f8f553f66c0 RCX: 00007f8f5715cfce [ 922.658707][ T9578] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 922.658715][ T9578] RBP: 00007f8f57232c99 R08: 0000000000000000 R09: 0000000000000000 [ 922.658722][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.658728][ T9578] R13: 00007f8f57416038 R14: 00007f8f57415fa0 R15: 00007ffd3fdee258 [ 922.658741][ T9578] [ 922.658746][ T9578] [ 923.060432][ T9578] Allocated by task 9098: [ 923.064747][ T9578] kasan_save_track+0x3e/0x80 [ 923.069417][ T9578] __kasan_kmalloc+0x93/0xb0 [ 923.073998][ T9578] __kmalloc_cache_noprof+0x31c/0x660 [ 923.079363][ T9578] rtm_new_nexthop+0x28b4/0x8620 [ 923.084296][ T9578] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 923.089224][ T9578] netlink_rcv_skb+0x232/0x4b0 [ 923.093978][ T9578] netlink_unicast+0x80f/0x9b0 [ 923.098727][ T9578] netlink_sendmsg+0x813/0xb40 [ 923.103479][ T9578] ____sys_sendmsg+0x972/0x9f0 [ 923.108227][ T9578] ___sys_sendmsg+0x2a5/0x360 [ 923.112886][ T9578] __x64_sys_sendmsg+0x1bd/0x2a0 [ 923.117810][ T9578] do_syscall_64+0x14d/0xf80 [ 923.122392][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.128272][ T9578] [ 923.130589][ T9578] The buggy address belongs to the object at ffff888034639600 [ 923.130589][ T9578] which belongs to the cache kmalloc-256 of size 256 [ 923.144627][ T9578] The buggy address is located 8 bytes to the right of [ 923.144627][ T9578] allocated 200-byte region [ffff888034639600, ffff8880346396c8) [ 923.159107][ T9578] [ 923.161413][ T9578] The buggy address belongs to the physical page: [ 923.167819][ T9578] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34638 [ 923.176562][ T9578] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 923.185047][ T9578] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 923.192576][ T9578] page_type: f5(slab) [ 923.196558][ T9578] raw: 00fff00000000040 ffff88813fea8b40 dead000000000100 dead000000000122 [ 923.205130][ T9578] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 923.213700][ T9578] head: 00fff00000000040 ffff88813fea8b40 dead000000000100 dead000000000122 [ 923.222353][ T9578] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 923.231007][ T9578] head: 00fff00000000001 ffffea0000d18e01 00000000ffffffff 00000000ffffffff [ 923.239663][ T9578] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 923.248313][ T9578] page dumped because: kasan: bad access detected [ 923.254725][ T9578] page_owner tracks the page as allocated [ 923.260418][ T9578] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21082, tgid 21081 (syz.2.4011), ts 435397290413, free_ts 387404932835 [ 923.281337][ T9578] post_alloc_hook+0x231/0x280 [ 923.286099][ T9578] get_page_from_freelist+0x24dc/0x2580 [ 923.291636][ T9578] __alloc_frozen_pages_noprof+0x18d/0x380 [ 923.297429][ T9578] allocate_slab+0x77/0x660 [ 923.301924][ T9578] refill_objects+0x331/0x3c0 [ 923.306596][ T9578] __pcs_replace_empty_main+0x2f9/0x5e0 [ 923.312131][ T9578] __kmalloc_noprof+0x474/0x760 [ 923.316964][ T9578] hash_ipportnet6_resize+0xe84/0x1f00 [ 923.322410][ T9578] call_ad+0x463/0xb60 [ 923.326465][ T9578] ip_set_ad+0x824/0x9d0 [ 923.330699][ T9578] nfnetlink_rcv_msg+0xc00/0x12c0 [ 923.335712][ T9578] netlink_rcv_skb+0x232/0x4b0 [ 923.340464][ T9578] nfnetlink_rcv+0x2c0/0x27b0 [ 923.345127][ T9578] netlink_unicast+0x80f/0x9b0 [ 923.349879][ T9578] netlink_sendmsg+0x813/0xb40 [ 923.354632][ T9578] ____sys_sendmsg+0x972/0x9f0 [ 923.359380][ T9578] page last free pid 23 tgid 23 stack trace: [ 923.365339][ T9578] __free_frozen_pages+0xc2b/0xdb0 [ 923.370439][ T9578] tlb_remove_table_rcu+0x85/0x100 [ 923.375544][ T9578] rcu_core+0x7cd/0x1070 [ 923.379781][ T9578] handle_softirqs+0x22a/0x870 [ 923.384537][ T9578] run_ksoftirqd+0x36/0x60 [ 923.388946][ T9578] smpboot_thread_fn+0x541/0xa50 [ 923.393878][ T9578] kthread+0x388/0x470 [ 923.397951][ T9578] ret_from_fork+0x51e/0xb90 [ 923.402538][ T9578] ret_from_fork_asm+0x1a/0x30 [ 923.407311][ T9578] [ 923.409624][ T9578] Memory state around the buggy address: [ 923.415239][ T9578] ffff888034639580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 923.423285][ T9578] ffff888034639600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 923.431335][ T9578] >ffff888034639680: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 923.439375][ T9578] ^ [ 923.446029][ T9578] ffff888034639700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 923.454075][ T9578] ffff888034639780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 923.462114][ T9578] ================================================================== [ 923.470273][ T9578] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 923.477489][ T9578] CPU: 1 UID: 0 PID: 9578 Comm: syz.3.9530 Not tainted syzkaller #0 PREEMPT(full) [ 923.486778][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.496840][ T9578] Call Trace: [ 923.500133][ T9578] [ 923.503073][ T9578] vpanic+0x56c/0xa60 [ 923.507072][ T9578] ? __pfx_vpanic+0x10/0x10 [ 923.511587][ T9578] ? irqentry_exit+0x59e/0x620 [ 923.516365][ T9578] panic+0xc5/0xd0 [ 923.520105][ T9578] ? __pfx_panic+0x10/0x10 [ 923.524553][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 923.529510][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 923.534458][ T9578] check_panic_on_warn+0x89/0xb0 [ 923.539396][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 923.544344][ T9578] end_report+0x73/0x180 [ 923.548592][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 923.553537][ T9578] kasan_report+0x128/0x150 [ 923.558046][ T9578] ? fib6_info_nh_dev+0x37/0x310 [ 923.563001][ T9578] fib6_info_nh_dev+0x37/0x310 [ 923.567774][ T9578] nft_fib6_info_nh_uses_dev+0xbc/0x150 [ 923.573330][ T9578] ? nft_fib6_eval+0x883/0xba0 [ 923.578103][ T9578] nft_fib6_eval+0x88e/0xba0 [ 923.582718][ T9578] ? __pfx_nft_fib6_eval+0x10/0x10 [ 923.587849][ T9578] ? __lock_acquire+0x6b5/0x2cf0 [ 923.592812][ T9578] nft_do_chain+0x45e/0x1990 [ 923.597414][ T9578] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.602632][ T9578] ? ip6t_do_table+0x137d/0x1560 [ 923.607579][ T9578] ? skb_copy_bits+0x8a/0x8f0 [ 923.612288][ T9578] ? __pfx_nft_do_chain+0x10/0x10 [ 923.617335][ T9578] nft_do_chain_inet+0x29d/0x380 [ 923.622293][ T9578] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 923.627769][ T9578] ? nf_nat_ipv6_in+0x203/0x2c0 [ 923.632634][ T9578] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 923.637844][ T9578] ? stack_trace_save+0xa9/0x100 [ 923.642791][ T9578] ? lock_acquire+0xf0/0x2e0 [ 923.647393][ T9578] ? ip_sabotage_in+0x57/0x270 [ 923.652179][ T9578] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 923.657650][ T9578] nf_hook_slow+0xc5/0x220 [ 923.662075][ T9578] NF_HOOK+0x21f/0x3c0 [ 923.666148][ T9578] ? skb_orphan+0x4f/0xd0 [ 923.670471][ T9578] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 923.675663][ T9578] ? NF_HOOK+0x9e/0x3c0 [ 923.679816][ T9578] ? __pfx_NF_HOOK+0x10/0x10 [ 923.684399][ T9578] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 923.689598][ T9578] ? netif_receive_skb+0x102/0xc50 [ 923.694706][ T9578] netif_receive_skb+0x278/0xc50 [ 923.699638][ T9578] ? __pfx_netif_receive_skb+0x10/0x10 [ 923.705084][ T9578] ? __lock_acquire+0x6b5/0x2cf0 [ 923.710017][ T9578] ? tun_rx_batched+0x185/0x790 [ 923.714863][ T9578] tun_rx_batched+0x1de/0x790 [ 923.719531][ T9578] ? __build_skb+0x62/0x440 [ 923.724031][ T9578] ? __pfx_tun_rx_batched+0x10/0x10 [ 923.729236][ T9578] ? tun_get_user+0x2354/0x3dd0 [ 923.734089][ T9578] ? __local_bh_enable_ip+0xd0/0x130 [ 923.739369][ T9578] ? tun_get_user+0x2669/0x3dd0 [ 923.744213][ T9578] tun_get_user+0x2a78/0x3dd0 [ 923.748891][ T9578] ? aa_file_perm+0x50e/0x15e0 [ 923.753648][ T9578] ? __pfx_tun_get_user+0x10/0x10 [ 923.758664][ T9578] ? aa_file_perm+0x192/0x15e0 [ 923.763430][ T9578] ? ref_tracker_alloc+0x35c/0x4c0 [ 923.768536][ T9578] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 923.773995][ T9578] ? tun_get+0x1c/0x2f0 [ 923.778165][ T9578] ? tun_get+0x1c/0x2f0 [ 923.782319][ T9578] ? tun_get+0x1c/0x2f0 [ 923.786472][ T9578] tun_chr_write_iter+0x113/0x200 [ 923.791492][ T9578] vfs_write+0x61d/0xb90 [ 923.795730][ T9578] ? __pfx_vfs_write+0x10/0x10 [ 923.800485][ T9578] ? __fget_files+0x2a/0x420 [ 923.805071][ T9578] ksys_write+0x150/0x270 [ 923.809390][ T9578] ? __pfx_ksys_write+0x10/0x10 [ 923.814233][ T9578] do_syscall_64+0x14d/0xf80 [ 923.818818][ T9578] ? trace_irq_disable+0x3b/0x150 [ 923.823840][ T9578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.829896][ T9578] ? clear_bhb_loop+0x40/0x90 [ 923.834566][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.840448][ T9578] RIP: 0033:0x7f8f5715cfce [ 923.844857][ T9578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 923.864465][ T9578] RSP: 002b:00007f8f553f5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.872876][ T9578] RAX: ffffffffffffffda RBX: 00007f8f553f66c0 RCX: 00007f8f5715cfce [ 923.880844][ T9578] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 923.888826][ T9578] RBP: 00007f8f57232c99 R08: 0000000000000000 R09: 0000000000000000 [ 923.896785][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.904742][ T9578] R13: 00007f8f57416038 R14: 00007f8f57415fa0 R15: 00007ffd3fdee258 [ 923.912714][ T9578] [ 923.916073][ T9578] Kernel Offset: disabled [ 923.920380][ T9578] Rebooting in 86400 seconds..