last executing test programs: 6.532202218s ago: executing program 2 (id=7965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)={0x98, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xb, 0x81, 0x6]}, @NL80211_ATTR_FRAME={0x6d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7ff0}, @device_a, @broadcast, @initial, {0x9, 0xf7}}, 0x2, @default, 0xac42, @void, @val, @void, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x16, 0x32, 0x7}}, @val={0x25, 0x3, {0x0, 0x3c, 0x5}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x95, 0x4}}, @val={0x2d, 0x1a, {0x4000, 0x3, 0x1, 0x0, {0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x4, 0x7}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x39, 0x10}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x810}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000600000000000000ffffffff181100009b9c6d6e7a8396cd5911db7ab3e0b9165405b97be0054edab5ff73d126874186ece692fcbb73fa99408c5ff36b740541299918918d93e9be7fd991495227bf6a446d33b61a3106d0018ab2370e861adcbe3f05f961360ecce2d27cee795403d821ce69c081fcadc67874c6909c5fda5162200fedba69963d6cd299e59f647981f822b9f432a02b3709cac18b6c26ee846768", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000002c0)={0x98, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0xb, 0x81, 0x6]}, @NL80211_ATTR_FRAME={0x6d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7ff0}, @device_a, @broadcast, @initial, {0x9, 0xf7}}, 0x2, @default, 0xac42, @void, @val, @void, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x16, 0x32, 0x7}}, @val={0x25, 0x3, {0x0, 0x3c, 0x5}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x95, 0x4}}, @val={0x2d, 0x1a, {0x4000, 0x3, 0x1, 0x0, {0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x4, 0x7}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x39, 0x10}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x810}, 0x40) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000600000000000000ffffffff181100009b9c6d6e7a8396cd5911db7ab3e0b9165405b97be0054edab5ff73d126874186ece692fcbb73fa99408c5ff36b740541299918918d93e9be7fd991495227bf6a446d33b61a3106d0018ab2370e861adcbe3f05f961360ecce2d27cee795403d821ce69c081fcadc67874c6909c5fda5162200fedba69963d6cd299e59f647981f822b9f432a02b3709cac18b6c26ee846768", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async) 6.35893668s ago: executing program 1 (id=7968): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000000000000100032001e000000000000000000000010003300000000000000000000000000fc02000000000000000000000000000003000500000000000200000dac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 6.25196768s ago: executing program 3 (id=7970): socketpair(0x29, 0x6, 0x1aff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x3, 0x9, 0x9, 0x500, 0x9, 0x80000020, r1}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x4, 0x0, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x24, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x207) 6.247098318s ago: executing program 2 (id=7972): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x3e, 0x0, 0x60}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xd}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x26, 0x7, 0x200, 0x1, 0x6, 0xe, 0x9, 0xe233, r2}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="8d348d8027fcb5c60bc389debe7a38f7bd7fb8f978bbb826", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6.138672522s ago: executing program 1 (id=7974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r2, 0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x479c, 0x4) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 6.045936845s ago: executing program 3 (id=7975): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)={r3, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x0, &(0x7f0000000000)={0x2, 0x4e27, @loopback}, 0x10) 5.965701009s ago: executing program 2 (id=7977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000080)=0x4, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000049", @ANYRES16=r5, @ANYBLOB="350625bd7000fddbdf25010000000500380000000000"], 0x1c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) close(r9) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x302, 0x5, 0x7, 0x0}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000440)={r12, @in6={{0xa, 0x4e20, 0x7, @local, 0x8000}}}, 0x84) 5.798395194s ago: executing program 3 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x8004b706, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r4, 0xfffffffc}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x30, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x8000002) 5.466165214s ago: executing program 4 (id=7982): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x2, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x34}]}, &(0x7f00000010c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async) 5.439347781s ago: executing program 3 (id=7983): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r3}, 0x8) (async) sendto$inet(r1, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, 0x0, 0x0) 5.233385125s ago: executing program 2 (id=7985): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) 5.233042345s ago: executing program 3 (id=7986): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}}, 0x0) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f00000004c0)={{0x200, 0x1, 0xfff, 0x2, 0xfffffffa}, [{0x9, 0xe, 0x40, 0x5}, {0xd61, 0x3, 0xd, 0x81}, {0xc2, 0x3, 0x10, 0xdf}, {0x9, 0x40, 0x6}, {0x6, 0x8, 0xaf, 0x1}, {0x3, 0xfffffffffffffffc, 0x9, 0x4d}, {0x0, 0x1c7b, 0x0, 0x9}, {0xd9f, 0x3, 0x5, 0xb3}]}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000006c0)={r5, r5, 0x2, 0xe9, &(0x7f00000005c0)="3ee98a73c3005d7289751c0b6be9a37ee32aefb6622df7661707f5d7f93e325d1f7d9f5f78d955096eefd126529091638ed20beb95bc1f73f91c7eed7b11a2c467ef74589dc9802ce742df238358b1c650c200c601f3f6380a7d4ab77a04e0c7194d5357fd0a35ac8505309c1ddd76b0769286b8173149c33be2ab85321a7aa6b31e2495def36dda4cf34293f468615e1c3098d942ac5d9f7ef55377c8dbf50bbcf7033213214dd908468d0d8fab37c808e890c2d0e6310e06fe3d6b758c46677eec079b6a5cf8479e746b0adb2627e1a2c8f7b0263616487eb5c26cfa32bd42261b525ae4ad21501a", 0x6, 0x6, 0x3, 0x4, 0x3, 0x1, 0x100, 'syz1\x00'}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 5.223108669s ago: executing program 4 (id=7987): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000000000000a00000900000000000000000c000c"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x73}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x411) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7a}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x912}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffa}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x47, 0xac, "ba5c7a09ec313d03b4af7d1aae39dda4268985bbfe72a1dd5f6547e2b04660534d95e06ee582bfd098995918f2d18e8c161bd59f290ef13d693c9491edc160d3060fd7"}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0xc010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000cc0)={&(0x7f00000007c0), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/119, 0x77}, {&(0x7f00000008c0)=""/164, 0xa4}, {&(0x7f0000000980)=""/41, 0x29}, {&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)}], 0x5}, 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x8, 0xb, 0x4, 0x244, 0x820c, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0x0, 0x2af7f38a, 0x18}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000013c0)={{0xffffffffffffffff, &(0x7f0000001180)='wlan0\x00', 0x200080, &(0x7f00000011c0)={@align=0xfffffffffffffff7, {0x8, 0x3b, 0x4}}, 0x7, &(0x7f0000001200), &(0x7f0000001240)=0xfffffffe}, 0x1, &(0x7f0000001380)=[{0x3, 0xffff, &(0x7f0000001280)='wlan0\x00', &(0x7f00000012c0)="80327d0f24541c0c51f1a6dd309ed12256e775cef04cb43952c2d04482d8108ebb0bc64d2239f1a043c4c1682cde390e8e5ddb33f885c95c7427c4b03297b2a674548534ac0e2d0293dba438365c25b848408ccf20c847405281d1c6376a3db8ccf3d9d8feca6e4543097e86f318ee1733811d87f01a4d65cd57a76122e8d54fe2aa08413c9ff90b6d17ede9e03557753e808808b204350dca1f472eceff8eebdadc3953591c1a634fe0705d90c693c4a90a576efbb7281c4f5235783b", 0xbd, 0x10}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x1c, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@alu={0x4, 0x0, 0x8, 0x4, 0x8, 0x80, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2f93, 0x0, 0x0, 0x0, 0x9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x9, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000f80)='GPL\x00', 0x276, 0x90, &(0x7f0000000fc0)=""/144, 0x41000, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000001480)=[{0x5, 0x4, 0xf, 0x6}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r10, 0x0) 5.125902316s ago: executing program 1 (id=7988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000015ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x10, 0x2, 0x0, 0x0, {0xd}, [@typed={0x8, 0x402, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000040)={0x11, 0x9, r3, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 4.864423055s ago: executing program 0 (id=7990): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x30, 0xffffffffffffffff, 0x2f788000) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x1e, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290e0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0x48, 0x51, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.930017743s ago: executing program 2 (id=7991): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x49}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)="d4339a45d350bf80b3ea7af5fd2aa0d92b3c3e377739b24d24affcf105f29a1c95f8a5e0c1391ad665195fb62dbd918e575eeda72709aa51056c78f591095a6520d9a872c3470f1e1d07e1fa336f95519baec480e0", 0x55}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="0ee2bf19b279d008b4b3c2c0f33c56838598f6e56a1f5076d1641b3bf377471fcee2bdfd5568f42fc1114bdeecc92a1ed3641688291ff6a3a6a2bfcda34bf3184e8ac60c074e2cb905095f4d275defd87618b5631bc4fd8ce8e266a5d9a265d0dddc0834de29a67d03d6b39fd0704d3360dedc094c26f4c00a7a4ebc623d52f3f718862507abe11d2cce0112805408f503bc595b5801ff3d8b6cea6151fcf5a0e95463b168b95ebb07f84ae76f", 0xad}, {&(0x7f0000000ac0)="74f3ac24c2adedcc42eb25fe17780208c12494dfff178344ed7f5e3ae3d6e6d0b5ac4728ee29da63e992", 0x2a}, {&(0x7f0000000b00)="75450873a1feaca6456a7c6a375dd74ba104eb8d6e884577b2cb7ea624093ca78c7788cd249fb34fadf054e992c3a269d21f8bbd77a2", 0x36}, {&(0x7f0000000b40)="d2004ec9c445f5b0d3aaab13192712dc813c107c181167442f1cf54de77c5511f9e315c222978f6a3fdc937fcc49fbdfcd39fce1f29778613afd1ea86e1ade3c1ed04a86ec97e76204159292cf952142bf4ca2dac184620d1b41de1b4731a897efb90c5639c87b8d850cf527df5eec91162fdbb4da50d3fe73fdcc09264540ce5347e51e51deadc571e26644630fd513de5629fa380728e52255284a79d9a79bb19889fa37f384c5ebfe3b095a2a9e18498058f017c356e74f8c8f2f95a0", 0xbe}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="1debd9659435fb0b35d4fd87cb488adf9011412ff107ae126376c45bcb260eac232707a014dec1f8024eb3fec09df51c6936aaf24c01678701756a38be2cea8fc54eec883891932198833378508aba906c6e9d74e3fcf6a059d75ccab6060c56f782c2b0303c313870bad3e0840bffadd67bc198df749038e072477cd92b50c80d433a77e0002cedbcd544faeee7e04afa5713cffa46e4a667", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000037c0)="0c73c649f55dafa9f64c2a3570d21628ed6126bfdfd7621b37a46ec947aa51e01c4f4523da29a6c597a7ce809c8335e2f88bf399ede02fd5c9469210b8ae0de5b6ab3b96dc8e2f366565df76d48eea2f814e274e266b8c066a6257ff65fb845b15acf663986204c0c5d609d1627a67440bb00cbb2a7c0ec5cab10b8fbe7769d2179b144fe84fb713b4cc34bbec005eab206d6a2fca10d88ee941f1df34ae3933edcf04a00febd0b0d27e605a6455b380421e835bb245b4a85cf23f8a21f77cfe03d89025c0464f1e67c89d65697dc3c80058a96dbbda5d994ffd3fdb85b32e37c02c28dfd2f9", 0xe6}, {&(0x7f00000038c0)="30806623109122bf8ef478e9700010607388d558c15e29", 0x17}, {&(0x7f0000003900)="d0a709d2f4b6f73c606c2da8fe783eea52b158d64b8ed3310b5ebf1ef9dea4f1fce50c542946d43b9ecf61c01b9841d93b1a13f187c85aad639ac9ae4b21530e5f62aeb9f49b8e3aec4ff5e41d470ba8cc08bca4e9cacafc5900737a57663c42d13b2e454799286c466bd7b46de19750a4ec24721fe26a033b6b5b", 0x7b}, {&(0x7f0000003980)="0095a25eaa11f77977beb0f20b1689a1fe6dae588c2f17bf2df2b06256fe0ce447a1cfb1ae90642ffb3c20dd42094bd63017e6bf3082d9b1ab4aa61d98207d95103424fd75dff679acb5571b5aec46b812f03c94c7781bfc0c23be64b2378ab12825a20c47877c6e678590fbf84ed86c2478edac10f55fffaf100362c9e8a1fd19e0a8335acde1ca77e44acd2bf2bc803ae0441aba63f4282ca08c660faf0313ca991024c1d4ab54fa452cf8d73e912797880a7d3e42f321f885dd2193488b37eac0a0", 0xc3}, {&(0x7f0000003a80)="3aa3d6392a0e2043b90e25554d28fba6a8b1750346eca2dbf1910e559e2ab7659a36f4ff6c2c179b67b9dc4370279d497ceb08f1b4f1bcb8d0bd27bb2bcd93e90ac6b1eb9fbea03d447fb79a83", 0x4d}, {&(0x7f0000003b00)="da3d0b87765e00f1cd34dd94493d87c2947c9ea4c73f4c867f5b0b96c73a3eb4fac786faa21b629e1ef7cc94af48c3f147b0bb7dad2085dd2b2ea2cb5fa00b3baaa7853b74cf842d03e2cc62d88c4cda2ce730c70fbec25e57f71c57efb3e5d671be6046b93e342c3ca871c488d87cc0c8dd600a755816492bc0817493eee7", 0x7f}], 0x6}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000003e80)="3e14bec6a9849d53b58946b0f857c747c8b8898c3fc0a8dc932e72b243ac979ab8412750e138ffa12076ec3d2a4d35602648523e118b669d9c879a6677cf016fa047a9a2062df1d527adeba4c3820654467d4477860111fe30a28e3173ae6a5eda41432f6d069ef043b81c98aca63071122973", 0x73}, {&(0x7f0000003f00)="d3e76306f06aa8ece7bf15a02bc1947614aafdd8bb021535958ec27e0707ad932697b7c3e7d4bedc84e0", 0x2a}, {&(0x7f0000003f40)="84aedd1a4a856657d4f570561e760724ef55eac47e721f43699b8788f0b85e36cb1489e67ef37b0a65583c9e7d47534539a7e935308b8ff09785847be9333ae834842366db33791a9c632aa93571d6565ee90e81bb126fcc502e090399ee8335d04d99fdd5fd6ffa82b2230a47b2fd2e702b1d9923bd2276a547866dc478053ba5f5b7b77f48d54cab8b2057349f9ab3b4", 0x91}, {&(0x7f0000004000)="a4dbda1bd8f9c72a0756a5cea0614558cc186c561b1dbf3f82435c2a7d55b924dadd93268bd086c7315ef880f899ec36", 0x30}, {&(0x7f0000004040)="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", 0x7a3}], 0x5}}], 0x5, 0x24040001) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getae={0x40, 0x1f, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, 0x4d3, 0xa, 0x2b}, @in6=@private2, 0x80000000, 0x3502}}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) sendmmsg$inet6(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)='\n6', 0x2}], 0x1}}], 0x1, 0x4c800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x24, &(0x7f0000000100)=0x4, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000900)={r2, &(0x7f0000000800)='\x00', 0x20100, &(0x7f0000000840)={@_ha_fsid={[0x2, 0x8]}, {0x4, 0x7, 0x3, 0x7}}, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x8}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r7, 0x89e1, &(0x7f0000000000)={@empty, @private2={0xfc, 0x2, '\x00', 0x1}}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="14010000230001000000000000000000010100800c000100020000000000000014000b002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3685b3a68209000000f137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000badf3237bebb112157a0f91f7ec77d84ed04a7ac845e4cc5d5e26782550b6d357a56def4daef3ef47fc47e27fbe5c779f49509075b33256382760b481071566cbc9390539ad934df09c6de3c716759b4f1b4fed3da6512cd38a1662433ba04c2eb000000"], 0x114}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf0, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4001801}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@can={0x1d, r3}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="d52b8e1ba424a383a282aa71bb37ca43994d6ecaaf513d055d1ba632d585d1495a81e88598e032d99681c852a9efdd4e75f99f8c987b297df093fff719493c4ab03f0cf560253aa88dd22d7f2b5dc60d8a01d6b38fec19c52b0b154b1c642d323d9a5fbcc25f1666ed06d7f76ea3cf243c083d6c2ba8f58585153599f1d581ff6092d649a8c064ae6c8c7be34a403622edd4270a25b164de70475a5c997c122e8d45e152ece6e841135b92de546c44ddfccab4244b57395ba06a678a77f00b4730892fd01532c453fa2a88820f5068ebd227d45fcf927bce6e8806bd66a1f29e0a465d387ea3cf2298ffff1fd6", 0xed}, {&(0x7f0000000240)="30fd30aebd428480297f8edba4a079bc97e0960bccbf8b7ce2734a9ca6bd654204e3286a0a46550b64668ff421a38de92e98397755be09", 0x37}, {&(0x7f00000003c0)="1a7a5baf985ce4369d3ac27514411f91fd4cfbd080c7fb6fe5d076689d9b17e244aab924008dfac6a831bb3e091bf0978284f0a3a871b19760f1ebc28590646179f230b44c54f7ae52d3dbdbe5fdfe2d11d58bc2186cecda725f502cd70fce105ffa7fa83b8bcaf2ab8e361c9b68396f2a5cd208ebbb8e72d4fa7a50f789a148b24dabe633d9c26143ed85513b3a231691c0d9e4df77760ef2fd2465724e9ef4548754bc469ce58784a5767ee3ecbe49d2c67a59f58886ce5e7688cf82f29f16ab06", 0xc2}, {&(0x7f0000000540)="7eda6ba6d72c935ac890207fcaf8e434fe3152add8388e8c867868804227e79702c1b2f854a73f16b6e03af39673724615c529880517aa3bdb12921540363dbbe4ff42fc1b26eee0fadeb459ffb57304c443af9b0576289bb98041c2d097ec7e196cf12ab9ef911700d2252def40a311d6b888e24d565fc2ab9d9a093dbbbae642bf1f620f4228c7e2ab0a944e7802fea6d6e033eab40db57c7ec680bbc469108e658c670ada79a9c8a3cd087944bcf2eccad6e70cb370c4293a67ef55ba991675bc642563e793162395b794ceb2d8187073221d064c9cb72941fa0dff63a8091c80b47a1da619eaf864d48e465cd6", 0xef}], 0x4, &(0x7f0000000680)=[{0x18, 0x88, 0x1, "b07ce35caed983"}, {0x78, 0xaed9fdece68977ec, 0xc6, "7cc4bcbd92be15d46d2423ffd3373dc131c9e576f82f71e92df0dff2f732332ec78bf1820e866c9211e169bd03e7db5d193d998958989278aa6419507be229dcc52a5d7a7bbff61178faded32f9fb2aa35c2735d5848fba8c4390f1c667110a916f902"}, {0xe8, 0x0, 0x2, "ada5e615b9e0f2ec94ac6b27122d8f2ae048a415daf997b7ce4c8d8ba5c585effd115ee2dc731af660c84fd40e7b137b8c45310cfe4b5cde737815c1aae878c29d4449ecb37308a34bbc8cb4c1bcebdff8620bc80d1d5610256c247a840eaac583fe2d101ec5f5f9e23299b65752d099c27c14f6f6f214ca497d29b809c3cf0dee98628699db4a0749004366bfa395ff25f26c0a5530a854d41f76503bec471e2bb5cf26de08a943e4f94ff884b5e3d8b816b4383fbbe39a5ea2c08821456747b479cf134f0f96f98c6a59505ab42f375ddc63e4"}], 0x178}}], 0x1, 0x4010) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000cc0)) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x40, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x40}}, 0x4000800) 1.760699763s ago: executing program 0 (id=7992): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xfa, 0x7, 0x5, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0x5697}}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_newneigh={0x44, 0x1c, 0x800, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r2, 0x80, 0x40, 0x7}, [@NDA_MASTER={0x8, 0x9, 0xffff1c1a}, @NDA_VNI={0x8, 0x7, 0x3}, @NDA_FLAGS_EXT={0x8}, @NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_VNI={0x8, 0x7, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.760286225s ago: executing program 1 (id=7993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000d0a038a21006900050000000000000006000006080004400000000108000440000000000800044000000b99090001002bc17a310000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20048041}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0xc080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa0008084500001c0010000000019078fffffffeac1414aae0009078fffd0000"], 0x0) 1.759905569s ago: executing program 3 (id=7994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x9) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380a988ca", 0xe}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="000000000100000014001280090001007665616800000000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) 1.481703199s ago: executing program 1 (id=7995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x80000) (rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r4, 0x0, 0xffffffff000) (async) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.40484374s ago: executing program 4 (id=7996): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x2d2, 0x5, 0x6}, 0x10) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c5090000190f0020c3aaf0ff50000000bf8600000000000016080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000af9800000000000056080000000000008500000007000000b7000000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x30, 0x61, 0x0]}}, &(0x7f0000000200)=""/19, 0x3c, 0x13, 0x0, 0x7}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x739ea08f}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x7d, &(0x7f0000000100)=""/125, 0x41100, 0x50, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x69, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0, r0, r4, r0], 0x0, 0x10, 0x136c}, 0x94) 1.316442753s ago: executing program 2 (id=7997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x7}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.089584865s ago: executing program 1 (id=7998): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000200)={0xffffffff, 0x4d6a, 0x7, 0x5, 0x3, 0x9, 0x9, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0xa}, 0x28) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x99}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}, 0xffff, 0xffc0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r7, 0x40049409, r7) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r8, @ANYRES16=r6, @ANYRES8=r2, @ANYRES16=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 1.041108094s ago: executing program 4 (id=7999): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0xa30, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local}}}}}}, 0x0) 758.151642ms ago: executing program 4 (id=8000): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 719.970438ms ago: executing program 0 (id=8001): r0 = socket$inet(0x2, 0x1, 0x5) r1 = accept(r0, 0x0, &(0x7f0000000000)) listen(r1, 0x0) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xff, 0x961, 0x44, @empty, @loopback, 0x700, 0x7, 0x26725e7a, 0xa}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x1, 0x4, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x1, 0x9, 0x1000}}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x10, 0x10, 0xaa, 0x4, {{0x2e, 0x4, 0x1, 0x0, 0xb8, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x41}]}, @cipso={0x86, 0x4a, 0x0, [{0x1, 0x11, "56d503b368df934d1ff361f8bf1ba9"}, {0x7, 0x5, "2bcb8d"}, {0x7, 0xe, "e335cacf44d7b71a08398265"}, {0x6, 0x11, "bc57e811099acf3e6fb586acdfffb8"}, {0x5, 0x5, "0ae76c"}, {0x6, 0xa, "1d0c369c34ebfae3"}]}, @timestamp_addr={0x44, 0x4c, 0xb0, 0x1, 0x2, [{@loopback, 0xfffffffc}, {@loopback, 0x891}, {@private=0xa010100, 0x5}, {@empty, 0x7}, {@remote, 0x3}, {@multicast1, 0x7}, {@multicast2, 0xd743}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8001}, {@multicast2, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x280, r2, 0x80a, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x86cae6ec6ace5c71}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x40044}, 0x8884) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000ac0)=0xffff8001) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000b00)={0x4, 0x80000001}) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r19 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) r20 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x5, [@restrict={0xc}, @datasec={0xf, 0x3, 0x0, 0xf, 0x2, [{0x4, 0xfffffffc, 0x7}, {0x1, 0x7, 0x4}, {0x5, 0x0, 0x42a2}], "ae3b"}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000000e00)=""/89, 0x5d, 0x59, 0x1, 0x10}, 0x28) (async) r21 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pB \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x19, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x4, 0x1, 0x0, r19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, r20, 0x8, &(0x7f0000000ec0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[r21, r22, 0xffffffffffffffff, r23, 0xffffffffffffffff], 0x0, 0x10, 0x9de0}, 0x94) 511.607388ms ago: executing program 0 (id=8002): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0xfffffffd, {{0xa, 0x4e22, 0x1000, @mcast2, 0x6}}}, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10001}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x2e) socket$inet6(0xa, 0x3, 0x8000000003c) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0xfffffffd, {{0xa, 0x4e22, 0x1000, @mcast2, 0x6}}}, 0x88) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10001}, 0x8) (async) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x2e) (async) 310.380881ms ago: executing program 0 (id=8003): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x6, 0x1, 0x19}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000240)={r0, &(0x7f00000000c0)=')\\^\x00', 0x40000, &(0x7f0000000100)={@_ha_fsid={[0x9]}, {0x3, 0x3, 0x1, 0x4}}, 0x7, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x74}) 155.064684ms ago: executing program 4 (id=8004): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x8, [@struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x2, 0x5}, {0x2, 0x5, 0x7}, {0x4, 0x3, 0xff}]}, @datasec={0x3, 0x4, 0x0, 0xf, 0x3, [{0x1, 0x8, 0x6}, {0x1, 0x10000, 0x9a}, {0x3, 0x10001, 0xb99}, {0x3, 0x1, 0x5}], "7664a6"}, @fwd={0x4}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x1}]}, @fwd={0x10}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x5f, 0x30, 0x30, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000200)=""/84, 0xcc, 0x54, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x1000, 0x89}, 0x50) getsockname$packet(r1, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a40)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r0, 0x4, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x3, 0x0, 0x3, 0x80}], &(0x7f0000000380)='GPL\x00', 0x100, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x1, 0xa, 0x7, 0x7}, 0x10, 0x2deb9, r3, 0x0, &(0x7f0000001b40)=[r1, r1, r4], 0x0, 0x10, 0x101}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r1, 0x0, 0x7}, 0x38) 0s ago: executing program 0 (id=8005): socket$kcm(0x23, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000404000009"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000001f2bf052ecc1c7d3b930ee0e5480f4a80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff800000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d000000000008001e0003000000b63f70951b626825704861a94cca7a13dd959205ace93fc5dd0dafab8e264e805ec4b76f336d3b364d471593df22f33cc6ffeb065551bdbb3a0d204b282f03c3fb9175f17a7994a6c3d9d71132ba654bbcce3a7ce43eba6f23e2681e9246f0911beeda5e3472cbb168b727c8576bde17b1c66db98e2e41cc90a44d092e72bc4a11e17a4f0bf586fe08a728750344d190e03155f61ed15f42b02d117f5c18af"], 0x148}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x1b, 0x0, &(0x7f0000000200)="083972bdb3a605c4c1188e9986dd02ff4284860186ddba71f16b7d", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 817.105286][T30488] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 817.468426][T30502] ip6erspan0: entered allmulticast mode [ 818.048372][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.071516][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.086850][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.096017][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.114775][ T5649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.512746][T30541] __nla_validate_parse: 2 callbacks suppressed [ 818.512769][T30541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6342'. [ 818.624410][T30545] netlink: 'syz.0.6343': attribute type 1 has an invalid length. [ 818.775392][T30545] netlink: 'syz.0.6343': attribute type 1 has an invalid length. [ 818.974172][T30557] tipc: Enabling of bearer rejected, failed to enable media [ 819.010404][T30553] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 819.027778][T30553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.040117][T30549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6343'. [ 819.055992][T30545] ip_vti0: entered promiscuous mode [ 819.233693][T30545] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 819.253766][T30545] bond1 (unregistering): Released all slaves [ 819.515741][T30581] xt_TCPMSS: Only works on TCP SYN packets [ 819.547627][T30580] xt_TCPMSS: Only works on TCP SYN packets [ 819.644494][T30586] netlink: 'syz.4.6348': attribute type 24 has an invalid length. [ 819.657613][T30578] syzkaller0: entered promiscuous mode [ 819.684049][T30578] syzkaller0: entered allmulticast mode [ 819.801206][T30584] bond0: (slave bond_slave_0): Releasing backup interface [ 819.834492][T30590] netlink: 'syz.0.6349': attribute type 3 has an invalid length. [ 819.860006][T30590] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6349'. [ 820.205142][T30602] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6351'. [ 820.215352][ T5649] Bluetooth: hci4: command tx timeout [ 820.227926][T30601] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6352'. [ 820.255797][T30601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6352'. [ 822.307720][ T5649] Bluetooth: hci4: command tx timeout [ 823.664083][T30606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6352'. [ 823.726019][T30525] speed is unknown, defaulting to 1000 [ 824.211620][T30628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6359'. [ 824.241003][T30628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6359'. [ 824.256544][T30629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6359'. [ 824.323315][T30629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6359'. [ 824.368169][T30639] wireguard: wg0: Could not create IPv4 socket [ 824.380064][ T5649] Bluetooth: hci4: command tx timeout [ 825.017621][T30671] netlink: 'syz.4.6370': attribute type 12 has an invalid length. [ 825.038532][T30671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6370'. [ 825.049623][T30525] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.060691][T30525] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.068156][T30525] bridge_slave_0: entered allmulticast mode [ 825.078166][T30525] bridge_slave_0: entered promiscuous mode [ 825.092059][T30525] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.102952][T30525] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.119308][T30525] bridge_slave_1: entered allmulticast mode [ 825.137722][T30525] bridge_slave_1: entered promiscuous mode [ 825.265906][T30525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.321635][T30525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.488451][T30525] team0: Port device team_slave_0 added [ 825.502240][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 120 seconds [ 825.513755][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 120 seconds [ 825.525937][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 120 seconds [ 825.537035][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 120 seconds [ 825.553249][T30525] team0: Port device team_slave_1 added [ 825.625170][T30525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.632998][T30525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.661034][T30525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.697459][T30525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.706857][T30525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.739274][T30525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.045793][T30525] hsr_slave_0: entered promiscuous mode [ 826.067381][T30525] hsr_slave_1: entered promiscuous mode [ 826.083162][T30525] debugfs: 'hsr0' already exists in 'hsr' [ 826.099719][T30525] Cannot create hsr debugfs directory [ 826.217062][T30711] vlan1: entered allmulticast mode [ 826.232393][T30711] hsr0: entered allmulticast mode [ 826.246287][T30711] hsr_slave_0: entered allmulticast mode [ 826.450460][ T5649] Bluetooth: hci4: command tx timeout [ 826.553683][T30717] veth5: entered promiscuous mode [ 827.325638][T30525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.357392][T30525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 35926 - 0 [ 827.663834][T30525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.702941][T30525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 35926 - 0 [ 827.894995][T30525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.919284][T30525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 35926 - 0 [ 828.649613][T30525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.688275][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.721629][T30525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.770660][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.800639][T30525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.840480][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.907702][T30525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.943417][T30525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.964239][T30800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6406'. [ 829.122445][T30814] netlink: 'syz.3.6409': attribute type 1 has an invalid length. [ 829.140889][T30809] syzkaller1: entered promiscuous mode [ 829.153048][T30814] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6409'. [ 829.160688][T30809] syzkaller1: entered allmulticast mode [ 829.481944][T30525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.559850][T30525] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.731323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.738840][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.801593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.808838][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.835831][T30846] netlink: 'syz.0.6416': attribute type 1 has an invalid length. [ 829.845324][T30846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6416'. [ 829.916648][T30846] netlink: 'syz.0.6416': attribute type 16 has an invalid length. [ 829.963970][T30854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6419'. [ 829.995513][T30846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6416'. [ 830.736937][T30885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6421'. [ 830.758223][T30885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6421'. [ 831.153142][T30914] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6428'. [ 831.217921][T30917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6429'. [ 831.333132][T30921] netlink: 'syz.4.6430': attribute type 1 has an invalid length. [ 831.390828][T30927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6430'. [ 831.452565][T30921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.465166][T30927] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 831.486150][T30927] bond2: entered allmulticast mode [ 831.782813][T30525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.850561][T30940] bond1: Removing last arp target with arp_interval on [ 831.906193][T30938] netlink: 'syz.4.6434': attribute type 1 has an invalid length. [ 832.085974][T30955] netlink: 'syz.3.6439': attribute type 12 has an invalid length. [ 832.139916][T30960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.934152][T30525] veth0_vlan: entered promiscuous mode [ 832.972398][T30525] veth1_vlan: entered promiscuous mode [ 833.166237][T30525] veth0_macvtap: entered promiscuous mode [ 833.200585][T30525] veth1_macvtap: entered promiscuous mode [ 833.255303][T30525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.303747][T30525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.345406][T30871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.371424][T30871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.399673][T30871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.482908][T30871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.783894][ T9249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.812681][ T9249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.905056][T30871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.938027][T30871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.204771][T31029] __nla_validate_parse: 5 callbacks suppressed [ 834.204793][T31029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6456'. [ 834.654248][T31042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6460'. [ 834.676750][T31042] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6460'. [ 834.737766][T31042] netlink: 'syz.0.6460': attribute type 6 has an invalid length. [ 834.800632][T31042] netlink: 'syz.0.6460': attribute type 5 has an invalid length. [ 834.831325][T31042] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6460'. [ 834.916605][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 834.946668][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 834.959894][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 834.972022][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 834.987799][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 835.191903][T31056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6464'. [ 835.585830][T31070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6468'. [ 835.743101][T31080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6468'. [ 835.911412][T31080] geneve2: entered promiscuous mode [ 835.940743][T31083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6470'. [ 836.755218][T31050] speed is unknown, defaulting to 1000 [ 837.089913][ T5649] Bluetooth: hci3: command tx timeout [ 837.468024][T31150] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6483'. [ 838.028391][T31179] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6488'. [ 838.112625][T31180] xfrm1: entered promiscuous mode [ 838.124954][T31180] xfrm1: entered allmulticast mode [ 838.138006][T31181] tipc: Enabling of bearer rejected, failed to enable media [ 838.344749][T31198] xt_hashlimit: size too large, truncated to 1048576 [ 838.897442][T31050] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.927823][T31050] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.956832][T31050] bridge_slave_0: entered allmulticast mode [ 838.967917][T31050] bridge_slave_0: entered promiscuous mode [ 839.006701][T31050] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.046288][T31050] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.079879][T31050] bridge_slave_1: entered allmulticast mode [ 839.112910][T31050] bridge_slave_1: entered promiscuous mode [ 839.170092][ T5649] Bluetooth: hci3: command tx timeout [ 839.217233][T31050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.279503][T31050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.309900][T31236] __nla_validate_parse: 8 callbacks suppressed [ 839.309920][T31236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6498'. [ 839.564027][T31050] team0: Port device team_slave_0 added [ 839.588902][T31050] team0: Port device team_slave_1 added [ 839.696029][T31050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.723197][T31050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.767475][T31050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.786683][T31050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.795114][T31050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.865278][T31050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.976032][T31260] hsr0: entered promiscuous mode [ 840.125378][T31266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6506'. [ 840.200398][T31050] hsr_slave_0: entered promiscuous mode [ 840.204407][T31273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6506'. [ 840.211412][T31050] hsr_slave_1: entered promiscuous mode [ 840.251992][T31050] debugfs: 'hsr0' already exists in 'hsr' [ 840.274595][T31050] Cannot create hsr debugfs directory [ 840.322693][T31266] xfrm1: entered promiscuous mode [ 840.345422][T31266] xfrm1: entered allmulticast mode [ 840.357788][T31262] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 840.370716][T31262] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 840.387317][T31284] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 841.048797][T31313] x_tables: duplicate underflow at hook 1 [ 841.212938][T31320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6515'. [ 841.253240][ T5649] Bluetooth: hci3: command tx timeout [ 841.267718][T31322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6515'. [ 841.387174][T31327] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 841.465975][T31334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6518'. [ 841.590399][T31050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.602224][T31050] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.827187][T31350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6522'. [ 841.854179][T31050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.899936][T31050] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.954305][T31355] netlink: 'syz.3.6523': attribute type 5 has an invalid length. [ 842.037574][T31361] xt_hashlimit: size too large, truncated to 1048576 [ 842.063373][T31050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.075190][T31050] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.755271][T31385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6528'. [ 842.883136][T31388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6529'. [ 843.329907][ T5649] Bluetooth: hci3: command tx timeout [ 843.545366][T31404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 843.639751][T31415] netlink: 'syz.4.6534': attribute type 1 has an invalid length. [ 843.766865][T31425] netlink: 'syz.3.6535': attribute type 1 has an invalid length. [ 843.807398][T31415] bond4: entered promiscuous mode [ 843.822111][T31415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.220642][T31050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 844.285962][T31050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.311967][T31439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6539'. [ 844.318014][T31050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 844.390242][T31442] netlink: 'syz.0.6540': attribute type 8 has an invalid length. [ 844.393999][T31444] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6538'. [ 844.417826][T31448] netlink: 'syz.0.6540': attribute type 8 has an invalid length. [ 844.460415][T31050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.478268][T31438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6538'. [ 844.530863][T31438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6538'. [ 844.548173][T31438] netlink: 'syz.2.6538': attribute type 4 has an invalid length. [ 844.622974][T31050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 844.655307][T31050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.717661][T31452] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 844.768001][T31452] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 844.791647][T31452] gretap1: entered promiscuous mode [ 844.807530][T31452] gretap1: entered allmulticast mode [ 845.103488][T31476] netlink: 'syz.4.6545': attribute type 7 has an invalid length. [ 845.286290][T31483] netlink: 'syz.4.6546': attribute type 21 has an invalid length. [ 845.324843][T31050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.372911][T31050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.388655][T31461] : renamed from vxcan1 (while UP) [ 845.613029][T31492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6547'. [ 846.026477][T31513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'. [ 846.122375][T31050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.230496][T31520] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6552'. [ 846.273910][T31050] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.328249][T31523] netlink: 'syz.0.6553': attribute type 10 has an invalid length. [ 846.355410][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6553'. [ 846.375019][T31518] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6551'. [ 846.434287][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.441583][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.588529][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.595858][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.858676][T31543] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 846.898214][T31546] netlink: 'syz.3.6559': attribute type 1 has an invalid length. [ 846.910204][T31546] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6559'. [ 846.938783][T31546] netlink: 582 bytes leftover after parsing attributes in process `syz.3.6559'. [ 847.605381][T31560] tipc: Started in network mode [ 847.611221][T31560] tipc: Node identity c2211e914b3e, cluster identity 4711 [ 847.618720][T31560] tipc: Enabled bearer , priority 0 [ 848.072483][T31564] syzkaller0: entered promiscuous mode [ 848.078144][T31564] syzkaller0: entered allmulticast mode [ 848.095833][T31564] tipc: Resetting bearer [ 848.106219][T31585] validate_nla: 2 callbacks suppressed [ 848.106239][T31585] netlink: 'syz.4.6565': attribute type 22 has an invalid length. [ 848.116119][T31050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.152227][T31583] netlink: 'syz.4.6565': attribute type 22 has an invalid length. [ 848.206015][T31578] syzkaller0: entered promiscuous mode [ 848.213025][T31578] syzkaller0: entered allmulticast mode [ 848.221166][T31553] tipc: Resetting bearer [ 851.833674][T31553] tipc: Disabling bearer [ 851.861668][T15405] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 851.869553][T31585] netlink: 'syz.4.6565': attribute type 22 has an invalid length. [ 851.878327][T31585] __nla_validate_parse: 4 callbacks suppressed [ 851.878345][T31585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6565'. [ 855.358400][T31583] netlink: 'syz.4.6565': attribute type 22 has an invalid length. [ 855.366438][T31583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6565'. [ 855.367978][ T5747] tipc: Node number set to 2300518033 [ 855.385671][T15405] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.406233][T15405] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 855.507286][ T9249] bridge_slave_1: left allmulticast mode [ 855.533602][ T9249] bridge_slave_1: left promiscuous mode [ 855.559919][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.580884][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 150 seconds [ 855.592898][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 150 seconds [ 855.605509][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 150 seconds [ 855.617507][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 150 seconds [ 855.642770][ T9249] bridge_slave_0: left allmulticast mode [ 855.652547][ T9249] bridge_slave_0: left promiscuous mode [ 855.669938][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.683756][T31615] openvswitch: netlink: Missing valid actions attribute. [ 855.702669][T31615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.836893][T31623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6571'. [ 856.122693][ T9249] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 856.155981][ T9249] bond6 (unregistering): (slave gretap2): Releasing active interface [ 856.217375][ T9249] bond4 (unregistering): (slave geneve2): Releasing active interface [ 856.757150][ T9249]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.767799][ T9249]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.779279][ T9249]  (unregistering): Released all slaves [ 856.796696][ T9249] bond1 (unregistering): Released all slaves [ 856.814330][ T9249] bond2 (unregistering): (slave bond3): Releasing backup interface [ 856.823403][ T9249] bond2 (unregistering): Released all slaves [ 856.840270][ T9249] bond3 (unregistering): Released all slaves [ 856.862967][ T9249] bond4 (unregistering): Released all slaves [ 856.882297][ T9249] bond5 (unregistering): Released all slaves [ 856.902220][ T9249] bond6 (unregistering): Released all slaves [ 856.941022][ T9249] bond7 (unregistering): Released all slaves [ 856.956613][ T9249] bond8 (unregistering): Released all slaves [ 856.980961][ T9249] bond9 (unregistering): (slave veth5): Releasing active interface [ 856.990981][ T9249] bond9 (unregistering): Released all slaves [ 857.006492][ T9249] bond10 (unregistering): Released all slaves [ 857.032854][ T9249] bond11 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 857.045030][ T9249] bond11 (unregistering): Released all slaves [ 857.067389][ T9249] bond12 (unregistering): Released all slaves [ 857.084851][ T9249] bond13 (unregistering): Released all slaves [ 857.102235][ T9249] bond14 (unregistering): Released all slaves [ 857.118487][ T9249] bond0 (unregistering): Released all slaves [ 857.156072][ T9249] bond15 (unregistering): Released all slaves [ 857.176782][ T9249] bond16 (unregistering): Released all slaves [ 857.210916][T15405] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 857.706352][ T9249] : left promiscuous mode [ 857.883921][ T9249] tipc: Disabling bearer [ 857.967775][ T9249] tipc: Left network mode [ 858.268780][T31658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6581'. [ 858.366947][T31663] IPv6: Can't replace route, no match found [ 858.387216][T31663] IPv6: Can't replace route, no match found [ 858.572235][T31050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.485205][T31050] veth0_vlan: entered promiscuous mode [ 859.634965][T31050] veth1_vlan: entered promiscuous mode [ 859.987077][T31050] veth0_macvtap: entered promiscuous mode [ 860.071741][T31050] veth1_macvtap: entered promiscuous mode [ 860.245462][T31732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6599'. [ 860.268234][T31732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6599'. [ 860.282820][T31050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.401253][T31733] netlink: 'syz.4.6598': attribute type 1 has an invalid length. [ 860.440254][T31733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6598'. [ 860.546913][T31050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.623666][T30872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.672840][T30872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.728157][ T9249] hsr_slave_0: left promiscuous mode [ 860.756445][ T9249] hsr_slave_1: left promiscuous mode [ 860.817596][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'. [ 861.738356][ T9249] team0 (unregistering): Port device team_slave_1 removed [ 861.764449][ T9249] team0 (unregistering): Port device team_slave_0 removed [ 861.987300][ T1038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.995713][T15403] smbdirect: ib_dev[sy2] removed [ 862.038419][ T1038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.085701][T31751] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 862.137633][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'. [ 862.305186][T31798] tc_dump_action: action bad kind [ 862.338671][T15403] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.359847][T15403] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.382445][T15403] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.420495][T15403] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.696409][T31811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6611'. [ 862.933205][ T9249] IPVS: stop unused estimator thread 0... [ 862.948244][T31816] netlink: 'syz.2.6613': attribute type 1 has an invalid length. [ 862.982324][T31821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 863.093677][T31821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.106090][T30872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.164238][T30872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.287198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.322784][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.855962][T31857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6621'. [ 863.955020][T31861] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6621'. [ 864.610579][ T4946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 864.633649][ T4946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 864.645507][ T4946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 864.658269][ T4946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 864.670267][ T4946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.093213][T31891] sctp: [Deprecated]: syz.0.6629 (pid 31891) Use of int in max_burst socket option. [ 865.093213][T31891] Use struct sctp_assoc_value instead [ 865.128726][T31898] netlink: 'syz.4.6631': attribute type 10 has an invalid length. [ 865.184906][T31896] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6631'. [ 865.267359][T31906] netlink: 'syz.4.6631': attribute type 10 has an invalid length. [ 865.335445][T31898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.405775][T31898] team0: Port device netdevsim1 added [ 865.567799][T31906] team0: Port device netdevsim1 removed [ 865.578099][T31906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.593267][T31906] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 865.883934][T31931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6637'. [ 866.015945][T31933] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 866.078919][T31933] bond2 (unregistering): Released all slaves [ 866.082395][T31941] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6637'. [ 866.746189][T31961] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 866.772072][ T4946] Bluetooth: hci0: command tx timeout [ 866.903941][T31967] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 867.062090][T31968] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 867.128310][T31980] gre1: entered promiscuous mode [ 867.148548][T31980] gre1: entered allmulticast mode [ 867.170235][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6644'. [ 867.471407][T31997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6649'. [ 867.988525][T32018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6654'. [ 868.012442][T32021] netlink: 'syz.0.6656': attribute type 32 has an invalid length. [ 868.021699][T32021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6656'. [ 868.105000][T32026] netlink: 'syz.0.6657': attribute type 7 has an invalid length. [ 868.148030][T30872] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.149741][T32026] netlink: 'syz.0.6657': attribute type 7 has an invalid length. [ 868.186698][T30872] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.265983][T30872] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.291458][T30872] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.502569][T32036] sctp: [Deprecated]: syz.0.6660 (pid 32036) Use of int in max_burst socket option deprecated. [ 868.502569][T32036] Use struct sctp_assoc_value instead [ 868.708384][T32047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6663'. [ 868.737118][T31877] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.777945][T32051] netlink: 'syz.4.6665': attribute type 11 has an invalid length. [ 868.782626][T31877] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.803621][T32054] netlink: 'syz.4.6665': attribute type 11 has an invalid length. [ 868.818686][T31877] bridge_slave_0: entered allmulticast mode [ 868.850777][ T4946] Bluetooth: hci0: command tx timeout [ 868.860305][T31877] bridge_slave_0: entered promiscuous mode [ 868.900489][T31877] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.942527][T31877] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.962472][T31877] bridge_slave_1: entered allmulticast mode [ 868.995622][T31877] bridge_slave_1: entered promiscuous mode [ 869.164123][T32067] __nla_validate_parse: 2 callbacks suppressed [ 869.164144][T32067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'. [ 869.322162][T32073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6668'. [ 869.337757][T32073] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.6668'. [ 869.521136][T32064] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.530778][T32064] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.793304][T32078] netlink: 'syz.1.6669': attribute type 1 has an invalid length. [ 869.828936][T32064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 869.848145][T32079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6669'. [ 869.881646][T32067] veth1_macvtap: left promiscuous mode [ 869.921486][T32074] tipc: Enabling of bearer rejected, failed to enable media [ 869.958004][T31877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.007006][T31877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.254906][T31877] team0: Port device team_slave_0 added [ 870.283994][T31877] team0: Port device team_slave_1 added [ 870.317640][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6673'. [ 870.372151][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6673'. [ 870.542237][T32096] netlink: 808 bytes leftover after parsing attributes in process `syz.2.6673'. [ 870.552323][T31877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.597009][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.653416][T31877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.692147][T31877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.719194][T31877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.768430][T31877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.934444][ T4946] Bluetooth: hci0: command tx timeout [ 871.034439][T32128] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6678'. [ 871.220572][T32136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6681'. [ 871.263366][T31877] hsr_slave_0: entered promiscuous mode [ 871.263897][T32136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6681'. [ 871.284469][T31877] hsr_slave_1: entered promiscuous mode [ 871.301118][T31877] debugfs: 'hsr0' already exists in 'hsr' [ 871.316589][T31877] Cannot create hsr debugfs directory [ 871.471584][T32141] veth3: entered allmulticast mode [ 871.695647][T32143] team0: Port device team_slave_1 removed [ 871.810888][ T1167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.841038][ T1167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.741215][T31877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.753194][T31877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.787432][T31877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 873.010153][ T4946] Bluetooth: hci0: command tx timeout [ 873.138116][T31877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.190376][T31877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.235771][T31877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 873.393798][T32200] netlink: 'syz.2.6694': attribute type 4 has an invalid length. [ 873.522342][T31877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.548852][T31877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.560591][T31877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 874.027033][T31877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 874.056130][ T5747] IPVS: starting estimator thread 0... [ 874.064429][T31877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.093133][T31877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 874.161938][T32234] IPVS: using max 23 ests per chain, 55200 per kthread [ 874.765814][T32258] netlink: 'syz.0.6703': attribute type 1 has an invalid length. [ 874.813473][T32258] __nla_validate_parse: 4 callbacks suppressed [ 874.813498][T32258] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6703'. [ 874.872730][T32258] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.6703'. [ 875.321534][T31877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 875.376484][T31877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 875.416200][T31877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 875.457223][T31877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.486247][T31877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 875.538189][T31877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.578758][T31877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 875.616964][T32291] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6710'. [ 875.638311][T31877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.836675][T32306] netlink: 'syz.1.6713': attribute type 1 has an invalid length. [ 875.877617][T32306] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6713'. [ 875.948412][T32313] netlink: 'syz.4.6715': attribute type 1 has an invalid length. [ 875.998253][T31877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.074550][T31877] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.145146][T30872] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.152419][T30872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.244299][T30872] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.251602][T30872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.330584][T32325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'. [ 876.334896][T32327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'. [ 876.412056][T32325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'. [ 876.439889][T32327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6719'. [ 876.456852][T31877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 876.833722][T32347] netlink: 'syz.0.6723': attribute type 1 has an invalid length. [ 877.013183][T32347] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 877.298315][T32369] sock: sock_timestamping_bind_phc: sock not bind to device [ 877.368527][T32373] xt_socket: unknown flags 0x50 [ 877.655947][T32379] syzkaller0: entered promiscuous mode [ 877.670813][T32379] syzkaller0: entered allmulticast mode [ 877.967108][T32400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6734'. [ 878.276662][T31877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.534792][T32422] openvswitch: netlink: IP tunnel dst address not specified [ 878.665817][T31877] veth0_vlan: entered promiscuous mode [ 878.705642][T31877] veth1_vlan: entered promiscuous mode [ 878.838017][T31877] veth0_macvtap: entered promiscuous mode [ 878.892867][T31877] veth1_macvtap: entered promiscuous mode [ 878.925840][T32435] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6742'. [ 879.044457][T31877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.088491][T31877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.218711][T15405] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.264520][T15405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.425499][T15405] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.471225][T15405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.814352][T32467] netlink: 'syz.2.6750': attribute type 1 has an invalid length. [ 879.854048][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.888676][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.343267][T32484] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 880.362983][T32484] netlink: 'syz.4.6752': attribute type 29 has an invalid length. [ 880.376354][T32484] netlink: 'syz.4.6752': attribute type 32 has an invalid length. [ 880.395650][T32484] __nla_validate_parse: 2 callbacks suppressed [ 880.395671][T32484] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6752'. [ 880.493926][T32489] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.6754'. [ 880.504095][T32489] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.6754'. [ 880.580535][T32467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 880.592462][T32467] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 880.669924][T32467] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 880.682033][T32467] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 880.712913][T32467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 880.723052][T32467] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 880.745407][T32467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 880.754131][T32467] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 880.813761][T32467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 880.821702][T32467] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 881.313628][T32494] syzkaller0: entered promiscuous mode [ 881.327481][T32494] syzkaller0: entered allmulticast mode [ 881.703685][T15405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.030015][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6762'. [ 882.126408][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.142325][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.155904][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.173965][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.182502][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.303615][ T4946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.316370][ T4946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.403245][ T4946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.415213][ T4946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.424982][ T4946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.626169][ T5649] Bluetooth: hci0: command tx timeout [ 885.664313][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 180 seconds [ 885.675732][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 180 seconds [ 885.687697][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 180 seconds [ 885.699856][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 180 seconds [ 885.710967][ T4995] udevd[4995]: worker [25389] /devices/virtual/block/nbd1 timeout; kill it [ 885.711069][ T4995] udevd[4995]: seq 27199 '/devices/virtual/block/nbd1' killed [ 886.566590][T15405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.642489][T32550] xt_cluster: node mask cannot exceed total number of nodes [ 886.690920][ T5649] Bluetooth: hci0: command tx timeout [ 886.815791][T32553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6767'. [ 886.888831][T32554] syz_tun: entered allmulticast mode [ 886.930305][T32552] syz_tun: left allmulticast mode [ 887.110191][T15405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.190124][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6772'. [ 887.370872][T15405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.396660][T32575] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 887.426743][T32575] bond1: (slave lo): Enslaving as an active interface with an up link [ 887.442624][T32575] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 887.893186][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.906800][T32600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.056144][T32604] netlink: 'syz.1.6780': attribute type 1 has an invalid length. [ 888.095100][T32604] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6780'. [ 888.117413][T32604] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6780'. [ 888.181274][ T1167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.252940][ T1167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.307078][T32616] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 888.485766][ T1038] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.769797][ T5649] Bluetooth: hci0: command tx timeout [ 888.804110][T15405] bridge_slave_1: left allmulticast mode [ 888.817484][T15405] bridge_slave_1: left promiscuous mode [ 888.831003][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.836525][T32642] netlink: 'syz.2.6786': attribute type 2 has an invalid length. [ 888.868864][T15405] bridge_slave_0: left allmulticast mode [ 888.884476][T32642] netlink: 'syz.2.6786': attribute type 2 has an invalid length. [ 888.889100][T15405] bridge_slave_0: left promiscuous mode [ 888.906982][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.966847][T32650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6790'. [ 889.395354][T15405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.414723][T15405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.432730][T15405] bond0 (unregistering): Released all slaves [ 889.567964][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 889.894186][T32682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6796'. [ 889.905461][T32682] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6796'. [ 889.915634][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6796'. [ 890.394000][T32522] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.402188][T32522] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.413455][T32522] bridge_slave_0: entered allmulticast mode [ 890.423484][T32522] bridge_slave_0: entered promiscuous mode [ 890.487472][T15405] hsr_slave_0: left promiscuous mode [ 890.519688][T15405] hsr_slave_1: left promiscuous mode [ 890.541564][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.559862][T15405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.584978][T15405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.604594][T15405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.625992][T32717] netlink: 'syz.4.6803': attribute type 4 has an invalid length. [ 890.649839][T32717] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6803'. [ 890.684428][T15405] veth1_macvtap: left promiscuous mode [ 890.719831][T15405] veth0_macvtap: left promiscuous mode [ 890.750080][T15405] veth1_vlan: left promiscuous mode [ 890.761213][T15405] veth0_vlan: left promiscuous mode [ 890.828666][T32727] netlink: 'syz.1.6805': attribute type 23 has an invalid length. [ 890.851078][ T5649] Bluetooth: hci0: command tx timeout [ 891.058441][T32734] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6809'. [ 891.383054][T15405] team0 (unregistering): Port device team_slave_1 removed [ 891.419938][T15405] team0 (unregistering): Port device team_slave_0 removed [ 891.684058][T32522] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.693694][T32522] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.702121][T32522] bridge_slave_1: entered allmulticast mode [ 891.714699][T32522] bridge_slave_1: entered promiscuous mode [ 891.855808][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 892.024664][T32522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.108722][T32522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.237253][T32522] team0: Port device team_slave_0 added [ 892.252552][T32522] team0: Port device team_slave_1 added [ 892.406929][T32522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.454282][T32522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.543135][T32522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.608187][T32761] lo speed is unknown, defaulting to 1000 [ 892.623767][T32522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.628046][T32767] __nla_validate_parse: 2 callbacks suppressed [ 892.628065][T32767] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6817'. [ 892.648815][T32522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.737889][T32522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.831249][T32761] lo speed is unknown, defaulting to 1000 [ 892.951843][T32761] lo speed is unknown, defaulting to 1000 [ 892.996549][T32522] hsr_slave_0: entered promiscuous mode [ 893.035190][T32522] hsr_slave_1: entered promiscuous mode [ 893.060700][T32522] debugfs: 'hsr0' already exists in 'hsr' [ 893.081934][T32522] Cannot create hsr debugfs directory [ 893.623987][ T337] No such timeout policy "syz0" [ 893.656455][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.691150][ T337] nbd: couldn't find a device at index 2 [ 893.809335][T32761] infiniband syz0: set active [ 893.842975][T32761] infiniband syz0: added lo [ 893.874441][T32761] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 893.893854][T32761] infiniband syz0: Couldn't open port 1 [ 893.928659][ T5747] lo speed is unknown, defaulting to 1000 [ 893.950673][T32761] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 894.001860][T32761] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 894.036312][T32761] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 894.187727][T32761] RDS/IB: syz0: added [ 894.197232][T32761] smc: adding ib device syz0 with port count 1 [ 894.211959][T32761] smc: ib device syz0 port 1 has no pnetid [ 894.224732][T32522] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.353884][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 894.385208][ T5747] lo speed is unknown, defaulting to 1000 [ 894.404022][T32761] lo speed is unknown, defaulting to 1000 [ 894.674770][T32522] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.748166][ T362] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6832'. [ 894.882941][T32522] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.356878][ T368] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 895.442687][T32522] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.761456][T32761] lo speed is unknown, defaulting to 1000 [ 895.782870][ T402] syz_tun: entered allmulticast mode [ 895.900252][ T402] bond0: entered promiscuous mode [ 895.913388][ T402] bond_slave_0: entered promiscuous mode [ 895.954173][ T402] bond_slave_1: entered promiscuous mode [ 896.061959][ T409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6840'. [ 896.465989][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.473253][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.508518][T32761] lo speed is unknown, defaulting to 1000 [ 896.717676][T32522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 896.780966][T32522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.807244][T32522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 896.821144][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 896.868233][T32522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.902254][T32522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 896.938762][T32522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.973082][ T425] netlink: 'syz.2.6843': attribute type 1 has an invalid length. [ 896.990042][ T425] netlink: 'syz.2.6843': attribute type 2 has an invalid length. [ 897.012238][T32522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 897.043777][T32522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.094561][ T421] netlink: 'syz.0.6841': attribute type 1 has an invalid length. [ 897.217794][ T421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.376343][ T432] bond3: (slave gretap1): making interface the new active one [ 897.402613][ T432] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 897.581689][T32761] lo speed is unknown, defaulting to 1000 [ 897.665714][ T462] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 897.714870][ T459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6848'. [ 897.727191][ T459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6848'. [ 897.737966][ T458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6849'. [ 897.764702][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6849'. [ 897.941948][ T458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6849'. [ 897.967712][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6849'. [ 898.035596][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6851'. [ 898.067091][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6851'. [ 898.167178][T32522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.193152][ T474] netlink: 'syz.2.6852': attribute type 4 has an invalid length. [ 898.302085][T32522] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.345377][T15402] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.352645][T15402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.537507][T30872] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.544970][T30872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.664675][T32761] lo speed is unknown, defaulting to 1000 [ 898.758790][ T492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6855'. [ 899.224763][ T512] Cannot find add_set index 46338 as target [ 899.561016][ T525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.592392][ T528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6863'. [ 899.692403][T32761] lo speed is unknown, defaulting to 1000 [ 899.923996][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.969741][ T536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.013288][ T536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.054590][ T536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.227532][ T550] xt_policy: neither incoming nor outgoing policy selected [ 900.818391][T32761] lo speed is unknown, defaulting to 1000 [ 900.848584][T32522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.071390][ T580] netlink: 'syz.2.6875': attribute type 33 has an invalid length. [ 901.214971][ T580] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 901.274982][ T580] bond2 (unregistering): Released all slaves [ 901.553785][T32522] veth0_vlan: entered promiscuous mode [ 901.648817][ T599] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 901.665263][T32522] veth1_vlan: entered promiscuous mode [ 901.715508][T32761] lo speed is unknown, defaulting to 1000 [ 901.814677][T32522] veth0_macvtap: entered promiscuous mode [ 901.850208][T32522] veth1_macvtap: entered promiscuous mode [ 901.927752][T32522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.988910][T32522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.035388][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.066730][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.135753][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.160541][T15405] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.554521][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.563339][ T620] syzkaller0: entered promiscuous mode [ 902.577446][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.585714][ T620] syzkaller0: entered allmulticast mode [ 902.594906][ T9247] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 902.600436][T32761] lo speed is unknown, defaulting to 1000 [ 902.736950][ T630] __nla_validate_parse: 8 callbacks suppressed [ 902.736972][ T630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6888'. [ 902.756888][ T626] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 902.817307][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.832350][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.565961][ T663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6895'. [ 904.145941][ T690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6902'. [ 904.428923][ T694] netlink: 'syz.3.6903': attribute type 8 has an invalid length. [ 904.626287][ T695] bond2 (unregistering): Released all slaves [ 906.056020][ T713] Bluetooth: MGMT ver 1.23 [ 906.281478][ T718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6909'. [ 906.521020][ T725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6913'. [ 906.619570][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 906.640048][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 906.677512][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6914'. [ 906.730643][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031d30000: rx timeout, send abort [ 906.758921][ T725] bond1 (unregistering): Released all slaves [ 907.082041][ T745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6916'. [ 907.232552][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804bde5400: rx timeout, send abort [ 907.241149][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031d30000: abort rx timeout. Force session deactivation [ 907.405519][ T755] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6918'. [ 907.731641][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804bde7400: rx timeout, send abort [ 907.741143][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804bde5400: abort rx timeout. Force session deactivation [ 907.822745][ T763] __nla_validate_parse: 2 callbacks suppressed [ 907.822768][ T763] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6921'. [ 907.873802][ T767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6921'. [ 907.969944][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6925'. [ 908.011010][ T773] veth1_macvtap: left promiscuous mode [ 908.082594][ T778] erspan0: entered allmulticast mode [ 908.095077][ T776] batman_adv: batadv0: Adding interface: dummy0 [ 908.113666][ T776] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.160664][ T776] batman_adv: batadv0: Interface activated: dummy0 [ 908.212752][ T783] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6928'. [ 908.240128][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804bde7400: abort rx timeout. Force session deactivation [ 908.263386][ T784] tipc: Started in network mode [ 908.283621][ T784] tipc: Node identity 76ef7b8974a5, cluster identity 4711 [ 908.327468][ T784] tipc: Enabled bearer , priority 0 [ 908.387534][ T795] syzkaller0: entered promiscuous mode [ 908.411855][ T795] syzkaller0: entered allmulticast mode [ 908.586362][ T784] tipc: Resetting bearer [ 908.655254][ T781] tipc: Resetting bearer [ 908.733188][ T781] tipc: Disabling bearer [ 908.747725][ T809] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 908.788370][ T808] vlan2: entered allmulticast mode [ 908.798901][ T808] bond0: entered allmulticast mode [ 908.809736][ T808] bond_slave_0: entered allmulticast mode [ 908.822284][ T808] bond_slave_1: entered allmulticast mode [ 908.837104][ T815] netlink: 'syz.3.6934': attribute type 4 has an invalid length. [ 909.775533][ T865] gre2: entered promiscuous mode [ 910.171691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.192210][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.292187][ T894] netlink: 'syz.4.6959': attribute type 61 has an invalid length. [ 910.817823][ T934] bond0: (slave gre0): refused to change device type [ 910.925604][ T937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6970'. [ 911.026445][ T952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6971'. [ 911.038403][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6971'. [ 911.048120][ T952] netlink: 'syz.0.6971': attribute type 14 has an invalid length. [ 911.057448][ T952] netlink: 'syz.0.6971': attribute type 13 has an invalid length. [ 911.357848][ T975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6977'. [ 911.443441][ T984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 911.470304][ T982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 911.596435][ T984] bond1: Invalid ad_actor_system MAC address. [ 911.603300][ T984] bond1: option ad_actor_system: invalid value (1) [ 911.617007][ T984] bond1 (unregistering): Released all slaves [ 911.718329][ T982] bond1: Invalid ad_actor_system MAC address. [ 911.725856][ T982] bond1: option ad_actor_system: invalid value (1) [ 911.735360][ T982] bond1 (unregistering): Released all slaves [ 911.996658][ T1004] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 912.155729][ T1013] xt_hashlimit: size too large, truncated to 1048576 [ 912.196974][ T1007] tipc: Started in network mode [ 912.216336][ T1007] tipc: Node identity 080211000001, cluster identity 4711 [ 912.250024][ T1007] tipc: Enabled bearer , priority 0 [ 912.282485][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.392818][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.437159][ T1037] netlink: 'syz.3.6993': attribute type 1 has an invalid length. [ 912.481363][ T1037] netlink: 'syz.3.6993': attribute type 1 has an invalid length. [ 912.506676][ T1037] netlink: 'syz.3.6993': attribute type 2 has an invalid length. [ 913.082982][ T1073] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 913.369737][T15382] tipc: Node number set to 134418688 [ 913.606846][ T1098] __nla_validate_parse: 1 callbacks suppressed [ 913.606871][ T1098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7008'. [ 913.711028][ T1114] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7015'. [ 913.895109][ T1121] netlink: 780 bytes leftover after parsing attributes in process `syz.1.7018'. [ 914.457286][ T1148] netlink: 'syz.0.7028': attribute type 1 has an invalid length. [ 914.558338][ T1148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 914.628220][ T1152] team0: Port device team_slave_0 removed [ 914.635059][ T1157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7030'. [ 914.677004][ T1152] bond4: (slave team_slave_0): Enslaving as a backup interface with an up link [ 914.805256][ T1164] netlink: 'syz.2.7032': attribute type 1 has an invalid length. [ 914.905743][ T1174] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 915.245660][ T1195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7040'. [ 915.291158][ T1197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7041'. [ 915.686080][ T29] audit: type=1804 audit(1779822733.770:18): pid=1216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7046" name="/newroot/218/cgroup.controllers" dev="tmpfs" ino=1126 res=1 errno=0 [ 915.752289][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 210 seconds [ 915.765215][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 210 seconds [ 915.777016][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 210 seconds [ 915.789666][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 210 seconds [ 915.818533][ T29] audit: type=1800 audit(1779822733.770:19): pid=1216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7046" name="cgroup.controllers" dev="tmpfs" ino=1126 res=0 errno=0 [ 916.226643][ T1230] syzkaller0: entered promiscuous mode [ 916.256196][ T1230] syzkaller0: entered allmulticast mode [ 916.506385][ T1253] netlink: 'syz.2.7055': attribute type 9 has an invalid length. [ 916.538872][ T1255] netlink: 'syz.4.7057': attribute type 12 has an invalid length. [ 916.558288][ T1255] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 916.635289][ T1256] syzkaller0: entered promiscuous mode [ 916.654687][ T1256] syzkaller0: entered allmulticast mode [ 916.685099][ T1258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.888426][ T1269] tipc: Enabling of bearer rejected, media not registered [ 916.953637][ T1269] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 917.029905][ T1278] sctp: [Deprecated]: syz.3.7063 (pid 1278) Use of int in max_burst socket option deprecated. [ 917.029905][ T1278] Use struct sctp_assoc_value instead [ 917.039632][ T1275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7064'. [ 917.064939][ T1272] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 917.089660][ T5649] Bluetooth: hci0: command tx timeout [ 917.101143][ T1276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7064'. [ 917.143404][ T1272] bond2 (unregistering): Released all slaves [ 917.314161][ T1282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7065'. [ 917.374434][ T1282] ip6gre0: entered promiscuous mode [ 917.408204][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'. [ 918.077305][ T1321] x_tables: duplicate underflow at hook 2 [ 918.094064][ T1323] netlink: 'syz.4.7076': attribute type 1 has an invalid length. [ 918.124168][ T1323] netlink: 'syz.4.7076': attribute type 2 has an invalid length. [ 918.160771][ T1330] netlink: 'syz.4.7076': attribute type 1 has an invalid length. [ 918.185434][ T1330] netlink: 'syz.4.7076': attribute type 2 has an invalid length. [ 918.641114][ T1363] __nla_validate_parse: 8 callbacks suppressed [ 918.641138][ T1363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 918.662160][ T1363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7083'. [ 918.701318][ T1363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7083'. [ 921.098758][ T1325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 921.228828][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7089'. [ 921.310499][ T1384] Cannot find add_set index 0 as target [ 921.653199][ T1401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7094'. [ 922.015128][ T1416] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7101'. [ 922.120780][ T1424] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7101'. [ 922.174805][ T1419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7102'. [ 922.228368][ T1414] syzkaller0: entered promiscuous mode [ 922.263970][ T1414] syzkaller0: entered allmulticast mode [ 922.284429][ T1431] sctp: [Deprecated]: syz.4.7105 (pid 1431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 922.284429][ T1431] Use struct sctp_sack_info instead [ 922.315682][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7106'. [ 922.326429][ T1431] sctp: [Deprecated]: syz.4.7105 (pid 1431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 922.326429][ T1431] Use struct sctp_sack_info instead [ 922.547010][ T1445] netlink: 'syz.1.7108': attribute type 1 has an invalid length. [ 922.570224][ T1448] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7110'. [ 922.637654][ T1444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.058069][ T1468] netlink: 'syz.2.7116': attribute type 21 has an invalid length. [ 923.218359][ T1476] xt_TCPMSS: Only works on TCP SYN packets [ 923.708091][ T1500] syzkaller1: entered promiscuous mode [ 923.726543][ T1500] syzkaller1: entered allmulticast mode [ 923.761291][ T1499] __nla_validate_parse: 7 callbacks suppressed [ 923.761314][ T1499] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7126'. [ 924.212279][ T1526] x_tables: duplicate underflow at hook 3 [ 924.262790][ T1535] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7133'. [ 924.453081][ T1544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7138'. [ 924.470764][ T1541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7138'. [ 925.068037][ T1568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7145'. [ 925.216545][ T1564] syzkaller0: entered promiscuous mode [ 925.234351][ T1564] syzkaller0: entered allmulticast mode [ 925.266900][ T1582] netlink: 'syz.4.7150': attribute type 1 has an invalid length. [ 925.402162][ T1568] hsr_slave_1 (unregistering): left promiscuous mode [ 925.785364][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7154'. [ 925.816898][ T1595] netlink: 'syz.3.7155': attribute type 8 has an invalid length. [ 925.891772][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7154'. [ 926.400710][ T1623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7160'. [ 926.550789][ T1628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7161'. [ 931.147773][ T1592] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 931.277018][ T1630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7161'. [ 931.380240][ T1634] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 931.416837][ T1636] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 931.693513][ T1653] syzkaller1: entered promiscuous mode [ 931.710667][ T1653] syzkaller1: entered allmulticast mode [ 931.744876][ T1653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7167'. [ 931.894276][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 931.946717][ T1662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7172'. [ 931.948094][ T1663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 932.026040][ T1674] ip6t_rpfilter: unknown options [ 932.040804][ T1663] gretap1: entered promiscuous mode [ 932.056836][ T1663] gretap1: entered allmulticast mode [ 932.081941][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.214355][ T1683] xt_hashlimit: size too large, truncated to 1048576 [ 932.245601][ T1662] macvtap1: entered promiscuous mode [ 932.263986][ T1662] vlan0: entered promiscuous mode [ 932.278229][ T1662] macvtap1: entered allmulticast mode [ 932.292128][ T1662] vlan0: entered allmulticast mode [ 932.297353][ T1662] veth0_vlan: entered allmulticast mode [ 932.364801][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.375827][ T1682] tipc: Enabled bearer , priority 0 [ 932.412729][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.445173][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.508633][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.548618][ T1684] tipc: Disabling bearer [ 932.596420][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7172'. [ 932.742179][ T1703] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 933.108591][ T1718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.136436][ T1720] netlink: 'syz.1.7187': attribute type 11 has an invalid length. [ 933.140778][ T1725] netlink: 'syz.0.7188': attribute type 10 has an invalid length. [ 933.356352][ T1725] team0: Port device dummy0 added [ 934.273965][ T1775] netlink: 'syz.2.7195': attribute type 21 has an invalid length. [ 935.216276][ T1812] tls_set_device_offload_rx: netdev not found [ 935.754468][ T1835] lo: entered promiscuous mode [ 935.786755][ T1835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 936.251308][ T1819] bond0: (slave bond_slave_0): Releasing backup interface [ 936.286011][ T1819] bond_slave_0 (unregistering): left promiscuous mode [ 936.316637][ T1819] bond_slave_0 (unregistering): left allmulticast mode [ 936.370007][ T1850] netlink: 'syz.2.7219': attribute type 4 has an invalid length. [ 936.501713][ T1858] syzkaller0: entered promiscuous mode [ 936.525521][ T1858] syzkaller0: entered allmulticast mode [ 936.565600][ T1853] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 936.579995][ T1859] __nla_validate_parse: 19 callbacks suppressed [ 936.580016][ T1859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7222'. [ 936.631764][ T1853] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 936.654138][ T1864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7223'. [ 937.161697][ T1873] dvmrp0: entered allmulticast mode [ 937.182382][ T1873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7226'. [ 937.231443][ T1878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7228'. [ 938.038172][ T1914] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 938.798455][ T1943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7249'. [ 938.813910][ T1945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7250'. [ 938.852306][ T1950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7252'. [ 938.884646][ T1947] sctp: [Deprecated]: syz.2.7251 (pid 1947) Use of int in maxseg socket option. [ 938.884646][ T1947] Use struct sctp_assoc_value instead [ 938.903691][ T1945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7250'. [ 939.135049][ T1963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7255'. [ 939.162504][ T1963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7255'. [ 939.172713][ T1967] netlink: 'syz.1.7256': attribute type 10 has an invalid length. [ 939.202087][ T1963] netlink: 'syz.3.7255': attribute type 2 has an invalid length. [ 939.499667][ T1976] netlink: 'syz.2.7261': attribute type 12 has an invalid length. [ 939.525437][ T1976] netlink: 'syz.2.7261': attribute type 29 has an invalid length. [ 939.555942][ T1976] netlink: 'syz.2.7261': attribute type 1 has an invalid length. [ 939.596612][ T1984] netlink: 'syz.4.7263': attribute type 2 has an invalid length. [ 939.611040][ T1976] netlink: 'syz.2.7261': attribute type 2 has an invalid length. [ 940.458109][ T2030] netlink: 'syz.4.7278': attribute type 1 has an invalid length. [ 941.080417][ T2042] syzkaller0: entered promiscuous mode [ 941.086992][ T2050] block nbd4: not configured, cannot reconfigure [ 941.096604][ T2042] syzkaller0: entered allmulticast mode [ 941.147839][ T2050] syzkaller1: entered promiscuous mode [ 941.153725][ T2050] syzkaller1: entered allmulticast mode [ 941.800472][T24365] IPVS: starting estimator thread 0... [ 941.900693][ T2078] IPVS: using max 26 ests per chain, 62400 per kthread [ 942.121336][ T2087] __nla_validate_parse: 11 callbacks suppressed [ 942.121361][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7292'. [ 942.182772][ T2091] netlink: 'syz.0.7293': attribute type 4 has an invalid length. [ 942.244779][ T2087] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 942.280997][ T2100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7293'. [ 942.308063][ T2087] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 942.330193][ T2087] gretap1: entered promiscuous mode [ 942.376916][ T2087] gretap1: entered allmulticast mode [ 942.683218][ T2113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7298'. [ 942.925670][ T2122] netlink: 'syz.4.7299': attribute type 1 has an invalid length. [ 943.526768][ T2159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7311'. [ 943.637144][ T2162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7310'. [ 943.797725][ T2172] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 944.308338][ T2195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.405992][ T2201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7322'. [ 944.417913][ T2195] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.7320'. [ 944.486230][ T2204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7323'. [ 944.645915][ T2210] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7325'. [ 944.660615][ T2211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7324'. [ 944.975743][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.016563][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.098675][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.139809][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.506034][ T2249] netlink: 'syz.4.7334': attribute type 12 has an invalid length. [ 945.621702][ T2249] bond5: option primary_reselect: invalid value (255) [ 945.672834][ T2249] bond5 (unregistering): Released all slaves [ 945.816004][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 240 seconds [ 945.829530][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 240 seconds [ 945.841294][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 240 seconds [ 945.853302][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 240 seconds [ 946.088146][ T2272] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 946.146050][ T2272] netlink: 'syz.1.7339': attribute type 4 has an invalid length. [ 946.231128][ T2276] vlan2: entered allmulticast mode [ 946.253648][ T2276] hsr0: entered allmulticast mode [ 946.265557][ T2276] hsr_slave_0: entered allmulticast mode [ 946.272648][ T2276] hsr_slave_1: entered allmulticast mode [ 946.430036][ T2287] netlink: 'syz.3.7344': attribute type 11 has an invalid length. [ 947.326880][ T2345] netlink: 'syz.4.7364': attribute type 1 has an invalid length. [ 947.338264][ T2346] __nla_validate_parse: 44 callbacks suppressed [ 947.338285][ T2346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7363'. [ 947.405325][ T2352] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.7363'. [ 947.433627][ T2352] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.7363'. [ 947.486675][ T2347] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.7363'. [ 947.538867][ T2347] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.7363'. [ 947.687048][ T2361] rB: renamed from lo [ 947.722909][ T2361] x_tables: duplicate underflow at hook 3 [ 947.840313][ T2372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7370'. [ 947.851107][ T2372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7370'. [ 947.934452][ T2376] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7372'. [ 948.132158][ T2382] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7375'. [ 948.140214][ T2383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7374'. [ 948.390432][ T2399] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 949.102431][ T2444] Cannot find set identified by id 65534 to match [ 949.158156][ T2453] netlink: 'syz.4.7390': attribute type 1 has an invalid length. [ 949.205375][ T2453] netlink: 'syz.4.7390': attribute type 2 has an invalid length. [ 949.922230][ T2488] syzkaller0: entered promiscuous mode [ 949.942368][ T2488] syzkaller0: entered allmulticast mode [ 951.751996][ T2601] syzkaller1: entered promiscuous mode [ 951.766033][ T2601] syzkaller1: entered allmulticast mode [ 952.887654][ T2662] syzkaller1: entered promiscuous mode [ 952.912633][ T2662] syzkaller1: entered allmulticast mode [ 953.213771][ T2673] IPv6: sit3: Disabled Multicast RS [ 953.258872][ T2673] sit3: entered allmulticast mode [ 953.593940][ T2696] __nla_validate_parse: 6 callbacks suppressed [ 953.593963][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7436'. [ 953.633313][ T2702] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 954.302285][ T2702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 955.126355][ T2757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7448'. [ 955.321074][ T2757] can: request_module (can-proto-0) failed. [ 955.987060][ T2789] netlink: 'syz.3.7455': attribute type 1 has an invalid length. [ 956.010683][ T2789] netlink: 16167 bytes leftover after parsing attributes in process `syz.3.7455'. [ 956.772421][ T2807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7461'. [ 956.781886][ T2807] netem: invalid attributes len -5 [ 956.787057][ T2807] netem: change failed [ 956.792721][ T2807] netlink: 'syz.1.7461': attribute type 30 has an invalid length. [ 957.811362][ T2749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 957.821267][ T2766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7450'. [ 957.984819][ T2817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7463'. [ 958.079299][ T2820] IPVS: dh: FWM 3 0x00000003 - no destination available [ 958.248026][ T2830] netlink: 'syz.3.7468': attribute type 1 has an invalid length. [ 958.275614][ T2830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7468'. [ 958.305596][ T2843] syzkaller0: entered promiscuous mode [ 958.336673][ T2843] syzkaller0: entered allmulticast mode [ 958.608775][ T2860] veth1_macvtap: entered allmulticast mode [ 958.683374][ T2865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7474'. [ 958.945450][ T2873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7475'. [ 959.106710][ T2890] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7475'. [ 959.329495][ T2872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7475'. [ 959.356264][ T2903] netlink: 'syz.4.7478': attribute type 58 has an invalid length. [ 959.387708][ T2903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7478'. [ 959.825464][ T2923] Cannot find add_set index 1 as target [ 959.853992][ T2920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7484'. [ 960.314955][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7491'. [ 960.514971][ T2952] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 960.727536][ T2976] netlink: 'syz.3.7499': attribute type 1 has an invalid length. [ 960.936644][ T2984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7500'. [ 960.968110][ T2991] netlink: 'syz.2.7504': attribute type 11 has an invalid length. [ 961.004806][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'. [ 961.043802][ T2991] netlink: 'syz.2.7504': attribute type 11 has an invalid length. [ 961.088517][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'. [ 961.474117][ T3029] netlink: 'syz.4.7514': attribute type 1 has an invalid length. [ 961.525158][ T3029] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 961.658482][ T3029] veth7: entered promiscuous mode [ 961.740983][ T3033] netlink: 'syz.4.7514': attribute type 23 has an invalid length. [ 962.147104][ T3055] netlink: 'syz.3.7523': attribute type 4 has an invalid length. [ 962.243794][ T3059] xt_hashlimit: size too large, truncated to 1048576 [ 962.417670][ T3052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.443726][ T3052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.478167][ T3070] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check. [ 962.898576][ T3077] tipc: Started in network mode [ 962.931002][ T3077] tipc: Node identity 5618bbd7e10d, cluster identity 4711 [ 962.956007][ T3077] tipc: Enabled bearer , priority 0 [ 963.064173][ T3088] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 963.150748][ T3084] syzkaller0: entered promiscuous mode [ 963.156756][ T3084] syzkaller0: entered allmulticast mode [ 963.164326][ T3084] tipc: Resetting bearer [ 963.194376][ T3093] bond0: ARP target 8.4.0.0 is already present [ 963.206874][ T3093] bond0: option arp_ip_target: invalid value (1032) [ 963.224664][ T3075] tipc: Resetting bearer [ 968.562350][ T3075] tipc: Disabling bearer [ 968.596634][ T3104] gtp0: entered promiscuous mode [ 968.603174][ T3104] gtp0: entered allmulticast mode [ 968.761410][T24367] tipc: Node number set to 3071654871 [ 968.928451][ T3140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.206677][ T3152] __nla_validate_parse: 5 callbacks suppressed [ 969.206698][ T3152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7548'. [ 969.337937][ T3163] ipvlan2: entered allmulticast mode [ 969.357193][ T3163] batadv_slave_1: entered allmulticast mode [ 969.465605][ T3168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7551'. [ 969.480531][ T3168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7551'. [ 969.700288][ T3179] netlink: 532 bytes leftover after parsing attributes in process `syz.0.7555'. [ 969.854418][ T3188] netlink: 'syz.2.7558': attribute type 3 has an invalid length. [ 970.162653][ T3205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7562'. [ 970.183145][ T3204] netlink: 'syz.0.7563': attribute type 1 has an invalid length. [ 970.195170][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7561'. [ 970.222261][ T3204] netlink: 'syz.0.7563': attribute type 14 has an invalid length. [ 970.252366][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 970.314840][ T3204] netlink: 'syz.0.7563': attribute type 14 has an invalid length. [ 970.336488][ T3204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 970.392252][ T3223] netlink: 'syz.4.7566': attribute type 6 has an invalid length. [ 970.520723][ T3228] syzkaller0: entered promiscuous mode [ 970.538141][ T3228] syzkaller0: entered allmulticast mode [ 971.068839][ T3255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7576'. [ 971.594366][ T3288] nbd: must specify an index to disconnect [ 971.636793][ T3277] netlink: 'syz.1.7582': attribute type 1 has an invalid length. [ 971.647406][ T3267] syzkaller0: entered promiscuous mode [ 971.654353][ T3267] syzkaller0: entered allmulticast mode [ 971.665980][ T3290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7585'. [ 971.870232][ T3295] netlink: 'syz.0.7586': attribute type 21 has an invalid length. [ 972.342960][ T3318] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 972.385222][T24365] IPVS: starting estimator thread 0... [ 972.479239][ T3330] IPVS: using max 24 ests per chain, 57600 per kthread [ 972.736985][ T3338] xt_hashlimit: size too large, truncated to 1048576 [ 972.826963][ T3350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.022422][ T3350] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 973.122794][ T3350] team1: entered promiscuous mode [ 973.139660][ T3350] team1: entered allmulticast mode [ 973.150978][ T3360] bond0: entered promiscuous mode [ 973.181691][ T3360] bond_slave_1: entered promiscuous mode [ 973.198424][ T3360] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 974.246726][ T3409] __nla_validate_parse: 83 callbacks suppressed [ 974.246750][ T3409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7622'. [ 974.345587][ T3409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7622'. [ 974.633074][ T3438] IPVS: dh: FWM 3 0x00000003 - no destination available [ 974.728050][T30876] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.740102][T30876] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.751771][ T3443] tunl0: entered promiscuous mode [ 974.784650][ T3443] netlink: 'syz.0.7633': attribute type 3 has an invalid length. [ 974.810065][ T3443] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7633'. [ 974.821878][T30876] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.839444][T30876] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.546440][ T3477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7644'. [ 975.625633][ T3477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7644'. [ 975.792289][ T2619] nci: nci_ntf_packet: unknown ntf opcode 0x3c [ 975.866050][ T3466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7639'. [ 975.890419][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 270 seconds [ 975.902526][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 270 seconds [ 975.914088][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 270 seconds [ 975.925662][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 270 seconds [ 975.960605][ T3466] xt_hashlimit: overflow, try lower: 3/0 [ 976.023759][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7645'. [ 976.263465][ T3500] syzkaller0: entered promiscuous mode [ 976.273061][ T3500] syzkaller0: entered allmulticast mode [ 976.374391][ T3478] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.738442][ T3500] netlink: 'syz.2.7650': attribute type 75 has an invalid length. [ 977.016056][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7656'. [ 977.030878][ T3525] syzkaller0: entered promiscuous mode [ 977.031765][T24367] IPVS: starting estimator thread 0... [ 977.051286][ T3525] syzkaller0: entered allmulticast mode [ 977.169654][ T3534] IPVS: using max 26 ests per chain, 62400 per kthread [ 977.236932][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7658'. [ 977.259706][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7658'. [ 977.443846][ T3549] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.473217][ T3549] IPv6: Can't replace route, no match found [ 978.085112][ T3575] xt_hashlimit: size too large, truncated to 1048576 [ 978.528831][ T3602] lo speed is unknown, defaulting to 1000 [ 978.543052][ T3600] netlink: 'syz.0.7675': attribute type 1 has an invalid length. [ 981.026298][ T3577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.827168][ T3607] __nla_validate_parse: 8 callbacks suppressed [ 1000.827194][ T3607] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.7678'. [ 1000.845230][ T3607] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1000.976262][ T3616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7680'. [ 1001.001520][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7677'. [ 1001.026457][ T3616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7680'. [ 1001.040839][ T3616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7680'. [ 1001.058885][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7677'. [ 1001.316581][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7683'. [ 1001.394920][ T29] audit: type=1107 audit(1779822819.480:20): pid=3630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1001.395233][ T3635] tun0: tun_chr_ioctl cmd 1074025675 [ 1001.457329][ T3635] tun0: persist disabled [ 1001.486337][ T3632] tun0: tun_chr_ioctl cmd 1074025675 [ 1001.500967][ T3632] tun0: persist disabled [ 1001.518634][ T3644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1001.564592][ T3647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7687'. [ 1001.715360][ T3652] netlink: 'syz.4.7690': attribute type 1 has an invalid length. [ 1001.736626][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7690'. [ 1002.094736][ T3674] sctp: [Deprecated]: syz.2.7696 (pid 3674) Use of int in max_burst socket option. [ 1002.094736][ T3674] Use struct sctp_assoc_value instead [ 1002.107210][ T3676] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1002.332793][ T3680] xt_hashlimit: size too large, truncated to 1048576 [ 1002.822766][ T3702] syzkaller0: entered promiscuous mode [ 1002.845001][ T3702] syzkaller0: entered allmulticast mode [ 1002.891972][ T3702] TC_ACT_REPEAT abuse ? [ 1002.911995][ T3702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7705'. [ 1002.917412][ T3708] gtp0: entered allmulticast mode [ 1002.959949][ T3708] team0: Device gtp0 is of different type [ 1003.090369][ T3717] netlink: 'syz.3.7709': attribute type 58 has an invalid length. [ 1003.659541][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.668371][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.675341][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.682138][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.689063][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.695948][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.702857][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.709747][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.716537][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.723382][ T3745] tc action pedit offset must be on 32 bit boundaries [ 1003.730367][ T3745] 0: reclassify loop, rule prio 0, protocol 800 [ 1004.224675][ T3760] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1004.262036][ T3762] IPv6: NLM_F_CREATE should be specified when creating new route [ 1004.300952][ T3760] IPv6: NLM_F_CREATE should be specified when creating new route [ 1004.510632][ T3766] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1005.346795][ T3788] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1005.437990][ T3788] bond7 (unregistering): Released all slaves [ 1005.594919][ T3805] netlink: 'syz.3.7731': attribute type 1 has an invalid length. [ 1005.889302][ T7576] IPVS: starting estimator thread 0... [ 1005.973681][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 300 seconds [ 1005.987954][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 300 seconds [ 1006.004466][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 300 seconds [ 1006.011946][ T3819] IPVS: using max 26 ests per chain, 62400 per kthread [ 1006.017124][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 300 seconds [ 1006.023510][ T3820] __nla_validate_parse: 3 callbacks suppressed [ 1006.023526][ T3820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1006.097480][ T3826] netem: change failed [ 1006.104949][ T3824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7738'. [ 1006.226572][ T3831] netlink: 'syz.3.7739': attribute type 10 has an invalid length. [ 1006.374273][ T3831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.407223][ T3831] team0: Port device netdevsim1 added [ 1006.485303][ T3841] netlink: 408 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1006.488709][ T3842] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7741'. [ 1006.653060][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7744'. [ 1006.800393][ T2619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.838021][ T3854] netlink: 'syz.3.7747': attribute type 1 has an invalid length. [ 1006.838235][T15382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.857594][ T2619] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1006.926261][ T3860] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1006.948621][ T3854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1006.986338][ T3861] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1007.045932][ T3854] bond2: (slave ip6gretap1): making interface the new active one [ 1007.057495][ T3854] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1007.229908][T15382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1007.529817][T15382] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1007.559864][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7752'. [ 1008.380112][ T3909] syzkaller0: entered promiscuous mode [ 1008.401319][ T3909] syzkaller0: entered allmulticast mode [ 1008.402110][ T3914] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7767'. [ 1008.672234][ T3921] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1008.774762][ T3918] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 1009.065595][ T3937] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 1009.090988][ T3937] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 1009.108789][ T3937] tipc: Resetting bearer [ 1009.670877][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7779'. [ 1009.694929][ T3961] netlink: 'syz.2.7780': attribute type 1 has an invalid length. [ 1010.015098][ T3977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7786'. [ 1010.037146][ T3977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7786'. [ 1010.316186][ T3996] netlink: 'syz.0.7790': attribute type 1 has an invalid length. [ 1010.400159][ T4004] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1010.502667][ T3996] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1010.551323][ T4003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1010.655777][ T4006] bond7: (slave bridge4): making interface the new active one [ 1010.675491][ T4006] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1010.689135][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.288252][ T4030] __nla_validate_parse: 2 callbacks suppressed [ 1011.288275][ T4030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1011.298525][T29289] udevd[29289]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1011.385286][ T4030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1011.491817][ T4046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1011.501871][ T4046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7804'. [ 1011.743994][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1011.886343][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7807'. [ 1012.144639][ T4082] xt_hashlimit: size too large, truncated to 1048576 [ 1012.437474][ T4098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1012.577332][ T4103] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1012.822302][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7822'. [ 1012.877411][ T4123] syzkaller1: entered allmulticast mode [ 1013.086309][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1013.273331][ T4140] bond3 (unregistering): Released all slaves [ 1013.446023][ T4142] bond3 (unregistering): Released all slaves [ 1013.672622][ T4159] syz.3.7831: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1013.709750][ T4159] CPU: 1 UID: 0 PID: 4159 Comm: syz.3.7831 Not tainted syzkaller #0 PREEMPT(full) [ 1013.709781][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1013.709795][ T4159] Call Trace: [ 1013.709803][ T4159] [ 1013.709812][ T4159] dump_stack_lvl+0xe8/0x150 [ 1013.709841][ T4159] warn_alloc+0x249/0x340 [ 1013.709872][ T4159] ? stack_trace_save+0xa9/0x100 [ 1013.709904][ T4159] ? __pfx_warn_alloc+0x10/0x10 [ 1013.709938][ T4159] ? kasan_save_track+0x4f/0x80 [ 1013.709961][ T4159] ? kasan_save_track+0x3e/0x80 [ 1013.709982][ T4159] ? __kasan_kmalloc+0x93/0xb0 [ 1013.710005][ T4159] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1013.710032][ T4159] ? xskq_create+0x56/0x170 [ 1013.710056][ T4159] ? xsk_setsockopt+0x54c/0x990 [ 1013.710077][ T4159] ? do_sock_setsockopt+0x17c/0x1b0 [ 1013.710102][ T4159] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1013.710126][ T4159] ? do_syscall_64+0x15f/0xf80 [ 1013.710146][ T4159] __vmalloc_node_range_noprof+0x132/0x1750 [ 1013.710218][ T4159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1013.710254][ T4159] ? __kasan_kmalloc+0x93/0xb0 [ 1013.710286][ T4159] vmalloc_user_noprof+0xad/0xe0 [ 1013.710312][ T4159] ? xskq_create+0xbf/0x170 [ 1013.710338][ T4159] xskq_create+0xbf/0x170 [ 1013.710367][ T4159] xsk_init_queue+0x8a/0xe0 [ 1013.710394][ T4159] xsk_setsockopt+0x54c/0x990 [ 1013.710421][ T4159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1013.710451][ T4159] ? __pfx_aa_sk_perm+0x10/0x10 [ 1013.710482][ T4159] ? aa_sock_opt_perm+0xff/0x1a0 [ 1013.710513][ T4159] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1013.710540][ T4159] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1013.710566][ T4159] do_sock_setsockopt+0x17c/0x1b0 [ 1013.710600][ T4159] __x64_sys_setsockopt+0x13d/0x1b0 [ 1013.710631][ T4159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.710654][ T4159] do_syscall_64+0x15f/0xf80 [ 1013.710672][ T4159] ? trace_irq_disable+0x3b/0x140 [ 1013.710700][ T4159] ? clear_bhb_loop+0x40/0x90 [ 1013.710724][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.710744][ T4159] RIP: 0033:0x7fd16739ce59 [ 1013.710767][ T4159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.710785][ T4159] RSP: 002b:00007fd168270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1013.710808][ T4159] RAX: ffffffffffffffda RBX: 00007fd167616180 RCX: 00007fd16739ce59 [ 1013.710825][ T4159] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1013.710839][ T4159] RBP: 00007fd167432d6f R08: 0000000000000004 R09: 0000000000000000 [ 1013.710852][ T4159] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.710866][ T4159] R13: 00007fd167616218 R14: 00007fd167616180 R15: 00007fffa04ff6e8 [ 1013.710903][ T4159] [ 1013.712502][ T4159] Mem-Info: [ 1013.996379][ T4159] active_anon:8166 inactive_anon:0 isolated_anon:0 [ 1013.996379][ T4159] active_file:3082 inactive_file:40604 isolated_file:0 [ 1013.996379][ T4159] unevictable:768 dirty:47 writeback:0 [ 1013.996379][ T4159] slab_reclaimable:12696 slab_unreclaimable:130388 [ 1013.996379][ T4159] mapped:32546 shmem:1306 pagetables:3598 [ 1013.996379][ T4159] sec_pagetables:0 bounce:0 [ 1013.996379][ T4159] kernel_misc_reclaimable:0 [ 1013.996379][ T4159] free:1265199 free_pcp:23633 free_cma:0 [ 1014.049074][ T4159] Node 0 active_anon:32664kB inactive_anon:0kB active_file:12328kB inactive_file:162220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:27872kB dirty:188kB writeback:0kB shmem:3688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16668kB pagetables:14232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1014.096714][ T4159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1014.165359][ T4159] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:16kB free_cma:0kB [ 1014.257224][ T4159] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1014.263687][ T4159] Node 0 DMA32 free:1369044kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32920kB inactive_anon:0kB active_file:12328kB inactive_file:162220kB unevictable:1536kB writepending:188kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:34596kB local_pcp:14240kB free_cma:0kB [ 1014.324166][ T4159] lowmem_reserve[]: 0 0 0 0 0 [ 1014.344815][ T4159] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1014.376680][ T4159] lowmem_reserve[]: 0 0 0 0 0 [ 1014.389633][ T4159] Node 1 Normal free:3680644kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60016kB local_pcp:29760kB free_cma:0kB [ 1014.424240][ T4159] lowmem_reserve[]: 0 0 0 0 0 [ 1014.430030][ T4159] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11240kB [ 1014.467575][ T4159] Node 0 DMA32: 13239*4kB (UM) 9198*8kB (UM) 5305*16kB (UME) 448*32kB (UME) 566*64kB (UME) 1153*128kB (UME) 960*256kB (UME) 563*512kB (UE) 303*1024kB (UME) 56*2048kB (UM) 0*4096kB = 1368540kB [ 1014.496242][ T4159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1014.512086][ T4159] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 16*16kB (UM) 5*32kB (UM) 9*64kB (UM) 7*128kB (UM) 8*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 5*2048kB (U) 892*4096kB (UM) = 3680696kB [ 1014.531693][ T4159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.543085][ T4159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1014.558794][ T4159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.596558][ T4159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1014.631863][ T4159] 46813 total pagecache pages [ 1014.636643][ T4159] 0 pages in swap cache [ 1014.643998][ T4159] Free swap = 124996kB [ 1014.648239][ T4159] Total swap = 124996kB [ 1014.653553][ T4159] 2097051 pages RAM [ 1014.657544][ T4159] 0 pages HighMem/MovableOnly [ 1014.664264][ T4159] 427133 pages reserved [ 1014.668602][ T4159] 0 pages cma reserved [ 1018.774639][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.466364][ T4180] __nla_validate_parse: 7 callbacks suppressed [ 1019.466395][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1019.485127][ T4182] netlink: 'syz.3.7837': attribute type 1 has an invalid length. [ 1019.541345][ T4181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1019.566390][ T4191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1019.616326][ T4182] bond4: entered promiscuous mode [ 1019.622928][ T4182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.705674][ T4192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1019.713692][ T4192] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1019.724601][ T4192] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1019.742406][ T4192] bond4: (slave ip6gre1): making interface the new active one [ 1019.750558][ T4192] ip6gre1: entered promiscuous mode [ 1019.758658][ T4192] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1019.954722][ T4203] x_tables: duplicate underflow at hook 1 [ 1020.154178][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1020.166802][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1020.202185][ T4217] netlink: 'syz.4.7847': attribute type 8 has an invalid length. [ 1020.237354][ T4225] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1020.263853][ T4225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7849'. [ 1020.608074][ T4254] openvswitch: netlink: Multiple metadata blocks provided [ 1020.748292][ T4258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7858'. [ 1020.794392][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1020.843040][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7860'. [ 1021.051595][ T4276] netlink: 'syz.0.7865': attribute type 83 has an invalid length. [ 1021.183187][ T4282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7867'. [ 1021.233191][ T4282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.266719][ T4282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.292805][ T4282] bond0 (unregistering): Released all slaves [ 1021.428703][ T4292] netlink: 'syz.0.7871': attribute type 29 has an invalid length. [ 1021.478366][ T4292] netlink: 'syz.0.7871': attribute type 29 has an invalid length. [ 1021.921183][ T4308] : renamed from vxcan1 [ 1022.823634][ T4364] sctp: [Deprecated]: syz.4.7890 (pid 4364) Use of int in maxseg socket option. [ 1022.823634][ T4364] Use struct sctp_assoc_value instead [ 1023.153220][ T4368] macvtap2: entered promiscuous mode [ 1023.179344][ T4368] team0: entered promiscuous mode [ 1023.231665][ T4368] team_slave_0: entered promiscuous mode [ 1023.277414][ T4368] team_slave_1: entered promiscuous mode [ 1023.290396][ T4368] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1023.326791][ T4368] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1023.336240][ T4368] team0: Device macvtap2 is already an upper device of the team interface [ 1023.385091][ T4368] team0: left promiscuous mode [ 1023.392715][ T4368] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1023.401374][ T4368] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1023.440306][ T4398] openvswitch: netlink: Flow actions attr not present in new flow. [ 1023.451931][ T7570] team_slave_0: left promiscuous mode [ 1023.457460][ T7570] team_slave_1: left promiscuous mode [ 1023.463521][ T7570] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 1023.475502][ T4374] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1023.596895][ T4384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.725169][ T4404] netlink: 'syz.0.7900': attribute type 2 has an invalid length. [ 1023.908450][ T4407] syzkaller1: entered promiscuous mode [ 1023.920996][ T4407] syzkaller1: entered allmulticast mode [ 1024.565967][ T4446] 8021q: VLANs not supported on lo [ 1024.733579][ T4451] ip6gre2: entered allmulticast mode [ 1024.805043][ T4457] __nla_validate_parse: 10 callbacks suppressed [ 1024.805096][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7915'. [ 1024.984050][ T4457] bond6 (unregistering): Released all slaves [ 1025.207826][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7920'. [ 1025.313064][ T4472] syzkaller1: entered promiscuous mode [ 1025.318811][ T4472] syzkaller1: entered allmulticast mode [ 1025.852259][ T4508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1025.887745][ T4496] syzkaller0: entered promiscuous mode [ 1025.910475][ T4496] syzkaller0: entered allmulticast mode [ 1031.440410][ T4551] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1031.584789][ T4557] bridge0: port 3(ipvlan3) entered blocking state [ 1031.605019][ T4557] bridge0: port 3(ipvlan3) entered disabled state [ 1031.618126][ T4560] netlink: 'syz.2.7946': attribute type 1 has an invalid length. [ 1031.619853][ T4557] ipvlan3: entered allmulticast mode [ 1031.669225][ T4557] bridge0: entered allmulticast mode [ 1031.691594][ T4557] ipvlan3: left allmulticast mode [ 1031.694952][ T4562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1031.709306][ T4557] bridge0: left allmulticast mode [ 1031.842248][ T4560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1031.925253][ T4564] bond3: (slave veth1): Enslaving as an active interface with a down link [ 1031.943908][ T4568] bond3: (slave veth0_to_bond): making interface the new active one [ 1031.954236][ T4568] veth0_to_bond: entered promiscuous mode [ 1031.961364][ T4568] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1032.246613][ T4579] syzkaller0: entered promiscuous mode [ 1032.278985][ T4579] syzkaller0: entered allmulticast mode [ 1032.322210][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7956'. [ 1032.515253][ T4607] Cannot find del_set index 0 as target [ 1032.543703][ T4607] netlink: 'syz.2.7957': attribute type 3 has an invalid length. [ 1032.738008][ T4619] netlink: 'syz.1.7963': attribute type 1 has an invalid length. [ 1032.942354][ T4626] ip6gretap1: entered promiscuous mode [ 1032.949773][ T4626] ip6gretap1: entered allmulticast mode [ 1032.965393][ T4626] bond3: (slave ip6gretap1): making interface the new active one [ 1032.980418][ T4626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1032.993164][ T4626] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1033.001910][ T4626] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1033.138836][ T4635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7965'. [ 1033.215626][ T4642] openvswitch: netlink: IP tunnel dst address not specified [ 1033.727754][ T4664] openvswitch: netlink: Missing valid actions attribute. [ 1033.741951][ T4671] bond0: Device is already in use. [ 1033.793444][ T4664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.866565][ T4673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1034.140042][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1034.278208][T15402] bridge_slave_1: left allmulticast mode [ 1034.301077][T15402] bridge_slave_1: left promiscuous mode [ 1034.310964][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.323441][ T4695] netlink: 'syz.0.7984': attribute type 1 has an invalid length. [ 1034.344302][T15402] bridge_slave_0: left allmulticast mode [ 1034.378459][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.422344][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7986'. [ 1034.463653][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7987'. [ 1034.488188][T15402] bridge_slave_1: left allmulticast mode [ 1034.498120][T15402] bridge_slave_1: left promiscuous mode [ 1034.505957][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.538430][T15402] bridge_slave_0: left allmulticast mode [ 1034.562923][T15402] bridge_slave_0: left promiscuous mode [ 1034.574604][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.596966][ T4716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7986'. [ 1034.722636][T15402] dvmrp0: left allmulticast mode [ 1034.728348][T15402] tipc: Resetting bearer [ 1035.185101][T15402] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1035.263696][T15402] tipc: Disabling bearer [ 1035.362412][T15402] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1035.403845][T15402] bond8 (unregistering): (slave geneve2): Releasing active interface [ 1035.554608][T15402] bond3 (unregistering): (slave bridge2): Releasing active interface [ 1035.585584][T15402] team0: Port device bridge3 removed [ 1035.834275][T15402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.845999][T15402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.862335][T15402] bond0 (unregistering): (slave team0): Releasing backup interface [ 1035.873019][T15402] bond0 (unregistering): Released all slaves [ 1035.885982][T15402] bond1 (unregistering): Released all slaves [ 1035.902618][T15402] bond2 (unregistering): Released all slaves [ 1035.919815][T15402] bond3 (unregistering): Released all slaves [ 1035.935217][T15402] bond4 (unregistering): Released all slaves [ 1035.960549][T15402] bond5 (unregistering): Released all slaves [ 1035.994005][T15402] bond6 (unregistering): Released all slaves [ 1036.010261][T15402] bond7 (unregistering): Released all slaves [ 1036.032348][T15402] bond8 (unregistering): Released all slaves [ 1036.047956][T15402] bond9 (unregistering): Released all slaves [ 1036.057357][ T1952] block nbd1: Possible stuck request ffff888026bc0000: control (read@0,1024B). Runtime 330 seconds [ 1036.068846][ T1952] block nbd1: Possible stuck request ffff888026bc01c0: control (read@1024,1024B). Runtime 330 seconds [ 1036.075797][T15402] bond10 (unregistering): Released all slaves [ 1036.081076][ T1952] block nbd1: Possible stuck request ffff888026bc0380: control (read@2048,1024B). Runtime 330 seconds [ 1036.098437][ T1952] block nbd1: Possible stuck request ffff888026bc0540: control (read@3072,1024B). Runtime 330 seconds [ 1036.102012][T15402] bond11 (unregistering): Released all slaves [ 1036.147037][T15402] bond12 (unregistering): Released all slaves [ 1036.213833][T15402] bond9 (unregistering): (slave ip6erspan0): Releasing active interface [ 1036.300404][T15402] bond6 (unregistering): (slave vti0): Releasing backup interface [ 1036.308663][T15402] vti0 (unregistering): left promiscuous mode [ 1036.914389][T15402] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 1036.923525][T15402] bridge10 (unregistering): left promiscuous mode [ 1037.204838][T15402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.216537][T15402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.227648][T15402] bond0 (unregistering): Released all slaves [ 1037.240090][T15402] bond1 (unregistering): Released all slaves [ 1037.267496][T15402] bond2 (unregistering): Released all slaves [ 1037.287457][T15402] bond3 (unregistering): Released all slaves [ 1037.303017][T15402] bond4 (unregistering): Released all slaves [ 1037.326482][T15402] bond5 (unregistering): Released all slaves [ 1037.362044][T15402] bond6 (unregistering): Released all slaves [ 1037.380330][T15402] bond7 (unregistering): Released all slaves [ 1037.397552][T15402] bond8 (unregistering): Released all slaves [ 1037.416214][T15402] bond9 (unregistering): Released all slaves [ 1037.444923][T15402] bond10 (unregistering): Released all slaves [ 1037.465377][T15402] bond11 (unregistering): (slave vxcan5): Releasing backup interface [ 1037.475372][T15402] bond11 (unregistering): Released all slaves [ 1037.514593][ T4700] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1037.691278][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7987'. [ 1037.753532][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7987'. [ 1037.805399][ T4725] netlink: 'syz.2.7991': attribute type 1 has an invalid length. [ 1037.868232][ T4725] netlink: 'syz.2.7991': attribute type 11 has an invalid length. [ 1037.877855][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7993'. [ 1037.889911][ T4725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7991'. [ 1037.902830][ T4730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7993'. [ 1037.955224][ T4727] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1037.988733][ T4732] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1038.110772][ T4737] tipc: Enabled bearer , priority 0 [ 1038.368892][ T4731] syzkaller0: entered promiscuous mode [ 1038.385224][ T4731] syzkaller0: entered allmulticast mode [ 1038.425597][ T4731] tipc: Resetting bearer [ 1038.468420][T15402] : left promiscuous mode [ 1038.711747][ T4729] tipc: Resetting bearer [ 1038.855356][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8000'. [ 1039.282510][ T4778] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8003'. [ 1039.348997][ T4778] netlink: 'syz.0.8003': attribute type 2 has an invalid length. [ 1039.419839][ T4778] netlink: 'syz.0.8003': attribute type 1 has an invalid length. [ 1039.622496][ T4785] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8005'. [ 1041.179527][ T30] INFO: task udevd:25389 blocked in I/O wait for more than 143 seconds. [ 1041.188064][ T30] Not tainted syzkaller #0 [ 1041.194364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1041.203594][ T30] task:udevd state:D stack:20584 pid:25389 tgid:25389 ppid:4995 task_flags:0x400140 flags:0x00080802 [ 1041.216491][ T30] Call Trace: [ 1041.220920][ T30] [ 1041.223912][ T30] __schedule+0x1821/0x5740 [ 1041.228544][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1041.234742][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1041.240521][ T30] ? __pfx___schedule+0x10/0x10 [ 1041.245464][ T30] ? schedule+0x90/0x360 [ 1041.250544][ T30] schedule+0x164/0x360 [ 1041.254744][ T30] io_schedule+0x7f/0xd0 [ 1041.259553][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1041.264902][ T30] ? filemap_get_entry+0xcd/0x3f0 [ 1041.270471][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1041.276333][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 1041.281868][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1041.287471][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1041.293352][ T30] do_read_cache_folio+0x1ad/0x590 [ 1041.298547][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1041.304920][ T30] read_part_sector+0xb6/0x2b0 [ 1041.310341][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1041.315745][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1041.323064][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1041.328650][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1041.336240][ T30] bdev_disk_changed+0x817/0x1770 [ 1041.341877][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1041.347356][ T30] blkdev_get_whole+0x380/0x510 [ 1041.352853][ T30] bdev_open+0x31e/0xd30 [ 1041.357152][ T30] blkdev_open+0x470/0x610 [ 1041.362143][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1041.367110][ T30] do_dentry_open+0x785/0x14e0 [ 1041.372554][ T30] vfs_open+0x3b/0x340 [ 1041.376632][ T30] ? path_openat+0x2df0/0x3860 [ 1041.381869][ T30] path_openat+0x2e08/0x3860 [ 1041.386481][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1041.392403][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1041.398065][ T30] ? __pfx_path_openat+0x10/0x10 [ 1041.403661][ T30] ? __x64_sys_openat+0x138/0x170 [ 1041.408703][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1041.414814][ T30] do_file_open+0x23e/0x4a0 [ 1041.419925][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1041.425036][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1041.430767][ T30] ? alloc_fd+0x64b/0x6c0 [ 1041.435174][ T30] do_sys_openat2+0x113/0x200 [ 1041.440465][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1041.445972][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.451776][ T30] ? rcu_is_watching+0x15/0xb0 [ 1041.456582][ T30] __x64_sys_openat+0x138/0x170 [ 1041.462103][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.468301][ T30] do_syscall_64+0x15f/0xf80 [ 1041.473693][ T30] ? trace_irq_disable+0x3b/0x140 [ 1041.478812][ T30] ? clear_bhb_loop+0x40/0x90 [ 1041.484103][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.491471][ T30] RIP: 0033:0x7fde550a7407 [ 1041.495916][ T30] RSP: 002b:00007fff0651ab60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1041.504842][ T30] RAX: ffffffffffffffda RBX: 00007fde55776880 RCX: 00007fde550a7407 [ 1041.513420][ T30] RDX: 00000000000a0800 RSI: 000055ef35cb1140 RDI: ffffffffffffff9c [ 1041.522226][ T30] RBP: 000055ef35c8e910 R08: 0000000000000000 R09: 0000000000000000 [ 1041.530824][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ef35ca1e20 [ 1041.538827][ T30] R13: 000055ef35c9c190 R14: 0000000000000000 R15: 000055ef35ca1e20 [ 1041.547324][ T30] [ 1041.566496][ T30] [ 1041.566496][ T30] Showing all locks held in the system: [ 1041.574453][ T30] 1 lock held by khungtaskd/30: [ 1041.579833][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1041.590478][ T30] 2 locks held by getty/5380: [ 1041.595188][ T30] #0: ffff8880362700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1041.605505][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1041.616447][ T30] 3 locks held by kworker/1:13/7576: [ 1041.622314][ T30] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1041.635489][ T30] #1: ffffc90005947c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1041.647308][ T30] #2: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 1041.664338][ T30] 3 locks held by kworker/u8:15/9248: [ 1041.670598][ T30] 3 locks held by kworker/u8:16/9249: [ 1041.676002][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1041.688493][ T30] #1: ffffc90002e6fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1041.700598][ T30] #2: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1041.710169][ T30] 4 locks held by kworker/u8:22/15402: [ 1041.715658][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1041.727213][ T30] #1: ffffc9001af1fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1041.751921][ T30] #2: ffffffff8fdc26e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1041.766017][ T30] #3: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_stop+0xb6/0x140 [ 1041.775623][ T30] 1 lock held by udevd/25389: [ 1041.781205][ T30] #0: ffff888026af4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1041.791182][ T30] 2 locks held by syz.3.7994/4729: [ 1041.796318][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1041.805793][ T30] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1041.821412][ T30] 1 lock held by syz.2.7997/4744: [ 1041.826488][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1041.835966][ T30] 1 lock held by syz.2.7997/4753: [ 1041.841453][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1041.851811][ T30] 1 lock held by syz.1.7998/4759: [ 1041.856876][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x970 [ 1041.866924][ T30] 1 lock held by syz.4.8004/4781: [ 1041.872084][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_rt_ioctl+0x114/0x1250 [ 1041.881496][ T30] 1 lock held by syz.4.8004/4782: [ 1041.886550][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_rt_ioctl+0x114/0x1250 [ 1041.897208][ T30] 1 lock held by syz.0.8005/4783: [ 1041.902903][ T30] #0: ffffffff8fdd13c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1041.931338][ T30] [ 1041.933891][ T30] ============================================= [ 1041.933891][ T30] [ 1041.944040][ T30] NMI backtrace for cpu 0 [ 1041.944073][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1041.944096][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.944107][ T30] Call Trace: [ 1041.944116][ T30] [ 1041.944125][ T30] dump_stack_lvl+0xe8/0x150 [ 1041.944153][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1041.944178][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1041.944202][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1041.944230][ T30] sys_info+0x135/0x170 [ 1041.944251][ T30] watchdog+0xfd3/0x1030 [ 1041.944288][ T30] ? watchdog+0x1c9/0x1030 [ 1041.944320][ T30] kthread+0x389/0x470 [ 1041.944343][ T30] ? __pfx_watchdog+0x10/0x10 [ 1041.944367][ T30] ? __pfx_kthread+0x10/0x10 [ 1041.944393][ T30] ret_from_fork+0x514/0xb70 [ 1041.944416][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1041.944438][ T30] ? __switch_to+0xc79/0x1410 [ 1041.944470][ T30] ? __pfx_kthread+0x10/0x10 [ 1041.944497][ T30] ret_from_fork_asm+0x1a/0x30 [ 1041.944537][ T30] [ 1041.944545][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1042.061179][ C1] NMI backtrace for cpu 1 [ 1042.061200][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1042.061219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.061230][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1042.061260][ C1] Code: 6b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 11 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1042.061274][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1042.061292][ C1] RAX: 000000000024618d RBX: ffffffff819a958a RCX: 0000000080000001 [ 1042.061304][ C1] RDX: 0000000000000001 RSI: ffffffff8dfad286 RDI: ffffffff8c28b660 [ 1042.061315][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1042.061335][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1042.061347][ C1] R13: 1ffff11003bd4000 R14: 0000000000000001 R15: 1ffff11003bd4000 [ 1042.061359][ C1] FS: 0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1042.061373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1042.061385][ C1] CR2: 000055558cc6f4e8 CR3: 0000000077a8c000 CR4: 00000000003526f0 [ 1042.061402][ C1] Call Trace: [ 1042.061410][ C1] [ 1042.061417][ C1] default_idle+0x9/0x20 [ 1042.061434][ C1] default_idle_call+0x72/0xb0 [ 1042.061454][ C1] do_idle+0x36a/0x5f0 [ 1042.061476][ C1] ? __pfx_do_idle+0x10/0x10 [ 1042.061499][ C1] cpu_startup_entry+0x43/0x60 [ 1042.061522][ C1] start_secondary+0x101/0x110 [ 1042.061539][ C1] common_startup_64+0x13e/0x147 [ 1042.061568][ C1] [ 1042.230801][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1042.237885][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1042.247033][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.257133][ T30] Call Trace: [ 1042.260427][ T30] [ 1042.263380][ T30] vpanic+0x56c/0xa60 [ 1042.267498][ T30] ? __pfx___schedule+0x10/0x10 [ 1042.272368][ T30] ? __pfx_vpanic+0x10/0x10 [ 1042.276882][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1042.283048][ T30] panic+0xc5/0xd0 [ 1042.286788][ T30] ? __pfx_panic+0x10/0x10 [ 1042.291219][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1042.296635][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1042.302887][ T30] watchdog+0x102c/0x1030 [ 1042.307327][ T30] ? watchdog+0x1c9/0x1030 [ 1042.311752][ T30] kthread+0x389/0x470 [ 1042.315830][ T30] ? __pfx_watchdog+0x10/0x10 [ 1042.320520][ T30] ? __pfx_kthread+0x10/0x10 [ 1042.325149][ T30] ret_from_fork+0x514/0xb70 [ 1042.329764][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.334872][ T30] ? __switch_to+0xc79/0x1410 [ 1042.339565][ T30] ? __pfx_kthread+0x10/0x10 [ 1042.344191][ T30] ret_from_fork_asm+0x1a/0x30 [ 1042.349034][ T30] [ 1042.352510][ T30] Kernel Offset: disabled [ 1042.356834][ T30] Rebooting in 86400 seconds..