last executing test programs: 15.950519151s ago: executing program 2 (id=3159): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) 5.601054306s ago: executing program 4 (id=3242): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000090108000000000000000000000001080005400000001c0900010073797a31000000000c000480080001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x2a, 0x1ff, 0xff, 0x10020, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x4}, 0x50) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000280)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0xff, 0x3, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x40064) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_delrule={0x1c, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0xff, 0x3, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x40064) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) write$ppp(r0, &(0x7f00000001c0)="5af974", 0x3) tee(r0, r5, 0x8, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xa8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_notify_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 5.124920357s ago: executing program 4 (id=3248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f0000000280)) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xfc29}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0x9, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r6], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000002060104000000000000000000000000050001000700000010000308686173683a69702c706f72742c6970002d685ed403880ffbd30f009feaf27157fa5cec0cf6b9579ee5886fa6e5a6f89566c1b106bb80e2aba946caccaa0045d60df6d1df876ed5f137cae8af25f14d5bff0faf81"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.825990628s ago: executing program 4 (id=3252): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, @can={0x1d, r3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @l2tp={0x2, 0x0, @remote, 0x1}, 0x9, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000080)='ip6erspan0\x00', 0x200, 0x5, 0x7}) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @null, @rose, @null, @netrom, @null, @rose, @null]}, &(0x7f00000001c0)=0x48, 0x80800) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80800) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) close(r4) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r7 = getuid() ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000300)={0x3, @default, r7}) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000000340)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000380)={0x7, 0x100000001, 0x1, 0x0, 0x0, [{{r4}, 0x2}]}) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f00000003c0)=r1) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000400)={0x2, 0x1, 0x8}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000540)={r8, &(0x7f0000000440)='.\x00', 0x0, &(0x7f0000000480)={@_ha_fsid={[0x4, 0xdd]}, {0x2, 0x6, 0x5, 0x1ff}}, 0xfffffffc, &(0x7f00000004c0), &(0x7f0000000500)=0x9}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r9, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8040400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c080}, 0x810) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x13}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040800}, 0x24000040) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r14, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004011) socketpair(0x1f, 0xa, 0x3, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r15, 0x84, 0xa, &(0x7f0000000b80)={0xbf, 0x8, 0x1, 0x7f, 0x1d, 0x0, 0x6, 0xc29}, 0x20) 4.379655539s ago: executing program 4 (id=3253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000005c000000060a010200000000000000000100effe08000b4000000000340004803000018008000100636d70002400028010000380090001002a8e27e2fa000000080002400000000008000140000000040900010073797a3000000000140000001100010000000000000000000700000a"], 0xd0}}, 0x0) 4.139806812s ago: executing program 4 (id=3254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0xdc, 0x10001, 0x0, 0x280, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0xb}, 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_ext={0x1c, 0x19, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd92}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4006, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001380)={0x3, 0xa, 0x633d, 0x3}, 0x10, 0x2161b, 0xffffffffffffffff, 0x3, &(0x7f00000013c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r4, 0x1, 0xffffffffffffffff], &(0x7f0000001740)=[{0x3, 0x4, 0x9, 0x5}, {0x4, 0x2, 0x9, 0x5}, {0x5, 0x1, 0x10, 0xf}], 0x10, 0x4}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000001500)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@', @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7, @loopback}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0xd, @multicast1}, @in6={0xa, 0x4e23, 0x3ff, @private1, 0x26871c0c}, @in6={0xa, 0x4e20, 0x81, @mcast2, 0xace}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x3}, @in={0x2, 0x4e20, @multicast1}], 0xac) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x2, 0x38}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000005c000000060a010200000000000000000100effe08000b4000000000340004803000018008000100636d70002400028010000380090001002a8e27e2fa000000080002400000000008000140000000040900010073797a3000000000140000001100010000000000000000000700000a"], 0xd0}}, 0x0) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000059cd0000000000000f00000000020000", @ANYRES32=r10, @ANYBLOB='\a\x00'/20, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="0200001d010000000400000000000000000000000010000000000000"], 0x50) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r9, @ANYRES32=r9, @ANYBLOB="101000000000000008000d0005000000e4031680a40001"], 0x40c}}, 0x1) 3.736559011s ago: executing program 4 (id=3259): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40100000000000071128d0000000000bc201000f10000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x400}, 0x10}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0010}, 0x4000010) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r5, 0x0, 0x9, 0x0, 0xb, 0x51, @private2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x78c1, 0x8, 0xfffffff8, 0xd}}) 3.523374747s ago: executing program 2 (id=3162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.248092341s ago: executing program 1 (id=3264): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000040)=""/59, 0x200000, 0x800, 0x7, 0x2}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601020000000000000000070000020500050007000000220004000000000005000100070000000c000300686173683a6970000900020073797a3000000000"], 0x44}}, 0x8000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020f00000f00000000000000fedbdf250800120000000000000000000000000006000000000000000000ebffffffffffffff0000000000000000000000000000fe80000000000000000000000000000005001700000000000a00000000000057809ffcf7000000000100"/120], 0x78}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=@dellinkprop={0x3c, 0x6d, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x44200, 0x8080}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}, @IFLA_IFALIASn={0x4}, @IFLA_EVENT={0x8, 0x2c, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0xc080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0x8e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3f4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r6, @ANYRESOCT=r5], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.144060027s ago: executing program 2 (id=3267): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b0", 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f00000002c0)=0x7, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0xfffffc9f}, {&(0x7f0000000100)="4d013950ca087773e912352b562922e17fcfb0567e3e312a8918bbbcfd68c8cb1ec5867fe6565234"}, {&(0x7f00000001c0)="ae4fcad61cf1f1342d820bfd66d1829af2ae37e58082d75b0002c02ac6d19a65eb80a4faedfdab812a5b9237db3fed6f32d98f530c9b8f7c339cd0baa58a0ceb017af6d1a84eda2c925fc97a34e43099e30996506d22be48a34bf0ca2fb6f5d611b9836a31e52b4d19fa9113f1a82888dd1cccdb5c44d94b86e2cdc2a7dc1e2de21e86d97e8bb254dbf7678b32178e7e86b509824f7fee1fefd0ac69ef4b4e87b3ae6cd38e212149af2247d6b701b27afbb3ac40a73692cdfeb6b406ee5567ab36770fe096cc6a39b890f0df262fb676d86cb7"}], 0x1) 1.652229934s ago: executing program 0 (id=3272): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0xef, 0x8006, 0x5, 0x6}}], 0x20, 0x4855}, 0x24000052) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000200)="537abaf90c2527db7af2f6820f6e65123092c102d000fcefd8d7e5d5c462ee409e2e6a1cf7bdc4faced32cc84113103302fc3bbd44b07c5abc74af37e4b8136e96d1bb43b988e5a4431714f9f3a954cc882fd41ada70a89bf462979952bf2767976426be748a6a3fbb115e495700800e395b45becac127aa7dd5a98ee1c7fc9d02da5e2abf70fcefacc148072d0ccf50f3d84ec5b641b7ceca5e17ae8e9315cf00a3de241442f499354bbd6d289f1cf37e876a653765d22275346a056682ec7b4d4adc99bd7b177e8f6f17d0e5ee1ccdc52e69345ff25f73ac6bdcf3908b3bcae041b5c579512a9f72", &(0x7f0000000100)=""/13, 0x2}, 0x20) 1.540194074s ago: executing program 2 (id=3273): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @remote, @private=0x10000}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000f80000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x64}, {@in6=@private2, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x3, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x59}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}]}, 0x184}}, 0x800) 1.539715583s ago: executing program 1 (id=3274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000100000008000200", @ANYRES32=0x0, @ANYBLOB="3748d5ee759b5ed836581d84158012543732f23a14a2b1d9202f675ba778177261b9c2194bf7ca6e62d76b126f6b5bccc4b6c32a5aeda1c73dde6de708f1f6d877ebdfc217ab5e7f3889b07bc965deac63eac0f7fdca7872ed68fbb4627ea97d961464f0d82d6d3232de97c43b04b0cb7a1b107de075ad5b79d4"], 0x44}}, 0x40) 1.539214552s ago: executing program 3 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8783, 0x7d}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r3 = socket(0x1d, 0x2, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x0, 0xc7a, {{0x6, 0x4, 0x1, 0x19, 0x18, 0x63, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4, 0xbc, 0x3, 0xc}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x606, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000010080003"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYRESOCT=r5, @ANYRES32=r2, @ANYRESOCT=r3], 0x34}}, 0x20040080) epoll_create(0x8) 1.472756318s ago: executing program 0 (id=3276): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0xef, 0x7, 0x3, 0x0, 0x3983]}, &(0x7f0000000340)=0x54) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000002c0)={'filter\x00', 0x0, [0xef, 0x7, 0x3, 0x0, 0x3983]}, &(0x7f0000000340)=0x54) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) recvfrom$netrom(r1, &(0x7f0000000040)=""/126, 0x7e, 0x40000020, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10001, @local, 0x10001, 0x4}, 0x20) 1.369061011s ago: executing program 0 (id=3277): unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000046001400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) getsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 1.264327267s ago: executing program 3 (id=3278): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0xe, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000000000000000002850000005500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x18, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES16], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.264052278s ago: executing program 1 (id=3279): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fcffffff0000ef000000000084000000000000009500ffffffff0000d99a4da5a0a228d66c885a5a2ea5a36dd39ffa13bb294e5e9ab7af016c5bff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.184573256s ago: executing program 2 (id=3280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x280400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'ip6erspan0\x00', @remote}) socket$netlink(0x10, 0x3, 0xb) (async) r1 = socket$netlink(0x10, 0x3, 0xb) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d0}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000580)={{r0, &(0x7f0000000100)='$-.)%$V@\x00', 0x408000, &(0x7f0000000140)={@align=0x7ff, {0x2, 0x6, 0x0, 0x6}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffff}, 0x4, &(0x7f0000000500)=[{0x3, 0x71cb, &(0x7f0000000200)='/\x00', &(0x7f0000000280)="9529567276f1ab809f34902e7188eaea765cadb2897c155311d4908d114b9c3228524aef89b67e427e218ced425b", 0x2e, 0x8}, {0x1, 0xd, &(0x7f00000002c0)='-*-\x00', &(0x7f0000000300)="118a0e2b8d0ce5beda82ee44bbd7cfc372da0827ae56b115fb813a7af403e5b2dca7ddf00d7e0a87c48edb7bbd93aa51297c20943b263e82fa25", 0x3a, 0x8}, {0x1, 0x3, &(0x7f0000000340)='/dev/net/tun\x00', &(0x7f0000000380)="2c22822ed1b63d001934a2253447c04edde8454e163f0cae5750d694d2d9b850616c6d09b7c95e61970d4ac3e64316bab3262be37ed5e773a41454a18c77967b4c69cf58580c590487b793bbd70547dcff0930cdbd32f854e67aa80e300029e4349132b4039914196fd0ccbfe77ddd44ccea3882ef344d2c51c7e2bfec88a8380e15e3e242493c4258c11f8716595bdbf3ca81efcca0371700c4186e3fd7089d9fc7", 0xa2, 0x30}, {0x1, 0x81, &(0x7f0000000440)='{$&}-\x00', &(0x7f0000000480)="57a45913939aa47f911e369d359aecc7758b2de9ba0c56113b11427078b6a5ac6035e121bee270d2a802b89b2f3085d84df4ddaa151bbdbf2322853908e832e9dfc0ebbb13aa185f5cf9feee848244026dffd4eebf160d723bdb8d63185333270cf5", 0x62, 0x10}]}) 1.170096803s ago: executing program 1 (id=3281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000851000000400000085000000720000001800000000100000000000000000000095000000000000009500000000000000850000000a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="f12efdbae644e497a8634aa5300dd89cc80a5680e15d4962c569c3f3ced5cf643c1b7142492bc51a1e13e07ae11ea85549faf19783e33704abc6b2fb4374a29be76bb7d45339d742fa4e2abb8ff23b3df985e769e53e9a7825a38cfbf6e822", 0x5f}, {&(0x7f00000001c0)="36063c02c4af86850445ead387dd82aee4250cb0f0d82ad83c683c2f359414f9622532e0aa3c3ac8a2c1559ca1b69753318781f7443fa879ca71fce03ef530ff9c3f23bf7c42ad82f7ad8b36c6f93876ee29c5fb42ce30", 0x57}], 0x2, &(0x7f0000000280)=[@op={0x18}, @op={0x18}, @iv={0xa8, 0x117, 0x2, 0x93, "ee26efc8cddadffa0f8d1b95a50da118ab58777fffb54560724e43b324cdc4357b3425bd24489f4233751fdca977184756605d7e9b6f88f358720e14326d3f9938cc0f73d22b42c58994d1033d5bb9ec0f730fae854fb1ba72aa85852f6cb688caee2971cf11efe89c697567949a1ccb5b9b9ef700a6f54609b6e9b1818377fcc2d877703ea32808fe7f3134e3bb0f31385114"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0xf0, 0x40000}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="edd509c879bdd873fe44e436ae34d7a333b1b3bab3ed56468b3a606aeeae72253161e7d11db741a5011e66307f7a532c2ef70d5a029990d0aaf74c88edb52050b76a398b711688dd5a2634b8acc47f5594ed64f9d0632790b301fed4e201a30ed5e9921e9f62854626880b9dd90c56eca1de68a4f8bb646732a7489c5b101b4e2e5d8e4f701dc9b4607b71f289b27c8b38541f47fde41152dcf7ec299b52f1d87c9c71bf203e30a6fa2f26a9037ea8efbc2c9b1ac751bac9beeca33bb8b7a7cdb815cb18fcb60ca8e85e92255460a30c852dfd65b1680ca7fd6a6a66bdff7fd3a6319aa3ea7e16267ce9", 0xea}, {&(0x7f0000000380)="c41841e261e7fe87fa2d7deb1b28a0a6d99c9cbab965f6abe3fdd619f50a6f2f681698ddbcabd92db5d849b5486fa950cd48b81e15cf5b10fce748de0e1e986f9a75252174d58a6d0423f97954583e7279c97ee7bde94998fc1f78399035e7001359ac4bae535b365a6ebfe49628f8683249849b7fc0ecd653110cb6c0b1eeac0ddae0761219c7b2b35ce76c5868b6d914d4f9adf77a0a5b8f0f95eeb49e8ddc048ae6bf2a3ecc44a11d66f4843aee", 0xaf}, {&(0x7f0000000580)="7339c48ae541355bff7ca2f22ff7cce43078fb5ca97c00a0130bcf5dba97296e70bd960b9529556d4f6ecc8ebce7102e27cd6d5a", 0x34}, {&(0x7f00000005c0)="fabfcdb522c7a188866030cdcd3f992687e8507483b1bd1e5cfe6e15ba8efc5c8d2b58e92937847cd38b130da3ad881ccc30ba47d514b01ae84b22096b20695668830685ab933a1d9188", 0x4a}, {&(0x7f0000000700)="9375962b40de50653a05eb6b3fb8c40a1664c6e698c962861b5a4711e663c49dde88ec3657dd35648977c48e52d705cd043c189533255f5cd893d4fd46825577cd180ece6d03c8cdd72c3fd67d354e3973d92d9a9c46172aa09d1f320b415ee3367ff4585d05d289e7312d4003f0bb517da4eb5fba8c3b3c8b42fc544150f8b6b0e2cc7f778d283ce7b2b48cc9619ebd5b4969c60f017a76d5319bdaba1a0a1afb0c0147c69b176c37c7ee", 0xab}, {&(0x7f0000000840)="253b04518dbc9ff7b769eacc035e5c855bbccb4954ff5a3b3ea7ac791d14bfb54f15ca24ab7864df3d9e1e04aef7d99be0d5dacd2c02885a7e932cb62d6b8fb7af276bfe42e68a1d5e838dcc57e8", 0x4e}, {&(0x7f00000008c0)="2267d775ff51e199ab00f4dd2a16b565545dfb823e29ab49b7233a84bf11715268f4947bec638267af35df7289f3484bc325d9b669227305d50a631461490c3cfc78e73aefaf2930ce8c40aa6cdb032d2ea482f15884b572721da474f8f49205aa4a70c07578ab64af993a1345538017e8513ba2eed2b25e11fc61faac28c1da04ea7ac363994ac2233c9e9ba9a0f0a454ec0b508c630eb621a419fb392749218a94ae5a757ccfb36923e20b7b50cc33d2ccae69e8b31f04cd464c9be7c306c93096936023ab54954445ee56e91e86c428016c66bbf3df762ddce3ae914d83403556ff80aaf406d16d95eae9df", 0xed}], 0x7, &(0x7f0000000a40)=[@assoc={0x18}, @iv={0xd0, 0x117, 0x2, 0xb8, "392b55249e2826c34451c16b925457ab1a6a9efa7fb50ebb19acb2d135cc0604604c887a3e5ae482a5ee83836a8e9e2efb754196832e262be0645122a6444dab9f34b1b3fe9d01ecf84b41a5e72469481a86244b5f8353775d65cf50bdf634d5c409aad232d4caaec0a43bae3237d41bad77090fb4b0b89d1b0e1057593fdb317f0ae14cf9a8181df6713d71facb0716e889c0ef4d832e8edf41030ff689f8a79ab6109ce22bf568716cfbd9bd8f2bdb8d4de4ef786e7682"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x7fffffff}, @iv={0x20, 0x117, 0x2, 0x7, "c7ee86a8ebfe73"}], 0x150, 0x200080c1}], 0x2, 0x4000010) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d", 0x20}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000c40)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/83, 0x53}, {&(0x7f0000000e40)=""/219, 0xdb}, {&(0x7f0000000f40)=""/240, 0xf0}, {&(0x7f0000001040)=""/107, 0x6b}, {&(0x7f00000010c0)=""/78, 0x4e}], 0x6, &(0x7f00000012c0)=""/222, 0xde}, 0x6}, {{&(0x7f00000011c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001600)=[{&(0x7f00000013c0)=""/203, 0xcb}, {&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000014c0)=""/112, 0x70}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000001540)=""/157, 0x9d}], 0x5}, 0x8001}], 0x2, 0x100, &(0x7f0000001240)={0x77359400}) recvmmsg(r4, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5dac343858f10ff9}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7000001dffffffffd7819ef1aaaaaabb08004500002c00004000002f9078ac1f0001e0000001001888be00189078040000000000000086d9ffff00000000"], 0x3e) 1.120143066s ago: executing program 3 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="6d9f3c4769ab2a113e017b1a244e5535", 0x10}], 0x1}}], 0x1, 0x6008000) sendto$inet6(r1, &(0x7f0000000140)="2e4a6e7a3a68c6975ad6ed381af00d0ede8cf07d2f70b792b78e30e781", 0x1d, 0x4080000, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x20004000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004780)={&(0x7f0000004700)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) 1.053016784s ago: executing program 3 (id=3283): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x101, 0x2}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000440)="4463b2e104303cb6749c768180dbf7d5ccb3f123537e2eef22954eea9907150299aa679108f8af11f506e743252aeea7a0838acec9811716639d07ac14e6e41e62917feff8e364753eb6d17082cb3054079c776147c9581cc5d614b6f2e3c05a478135b6789d8507f04183ccf02424b1e6f645e72d735db6509e67eff6ba3a019374cdd2f434f127f7349f070c8325642409aa7bbaa7ce8a76080656b3bb278818074857b4c25601ce8a43b4b0010ed5d4540e6294e27aea2da35177d60cef4adea36ee9225896a5e89e6afdff0fdb2c56cb8450ca622701db42374e04d40c7268c6a04ec4030a6e59a435a8adab9b25552a6669aee0533238a8883e0a37aeefd57f65a22dd2648d232e5e93b57e6bf2d5d6f82f565eefe30962409f38c32b7a7e43fc97306d0e44964a5172551b620f3335a6db92c204abcedec94dd8858488b2b958667365a703c3731a91e5079add4c138c4a1fa440d79f0427eabba4463d20a9737768089e373e3c37bda40ec32c32870932e7ef8f1407b3958af4dc33aaf7ffef4a8b3b88e6e7d3704db3d10aa508f7c61334bcd3b592161d04da84d652cc5d7de5d3815e14f0295be4e39fe5c29595478208b56893f0c7c73b732df00db05e0d26839fcd3401661f36ab9ac18c23c9a7e81ecaad85a7e6e598f0525d4f4d21759bc83b77913d25ab315f61d40b1bc738864f6a0a170435c2f7890f814828b8ba1ffe4ca6ead7af93235728b4178469d19330df715ae5ec61617146e3520150e930d760933208847132ce742b868157a51dba9e3c984b307fcab362fca6f449ffbcc3c7dc7dd5494bb733d02b33a2c986544986c022aadd3a0b607839de40fff5907b5b5bb5731685a8c6b37913f112cdc7f597f8c1cd8c26d1c5b9115dd79919122b9601851aeff7bbb5e383d32d82cdb8cba251eb84ef80853397f06c3788e7bef79831116c6387a0d00ad9ddef44bec5af2b9d23ea04df4dc8a3fa2c44ca4bc0208ebd58d57493b76098ded604f5463a9ae1551ed3695616f1e59c5501f19b9b1c0ff2a4b947eef21c15b68158f89c304297c6ee99437b5eed86eaec12631fec48a56cd9a247e972f898e4559c361b4f017937d38d28276930467393baf353f3ebc68559f850e960704c733a1e86a1b492fe616f7540d37606dbe7944c22a66921c50c963d81d82d764e8852d15bb2ad9d16f915255d8856eee1bf01b3086bb327ad14e3510970ef8acc6b0fb4392e4cef6a3f6517b4b5be6cf12df856eda9fd3404db8e0c1eff7bec28c844927d74abd43042d064e43ccf40396c368c86e9411e73a5155f9e80668ccd753d80c3d30663376fd016944d42441647f98763bc27cd4d63db6022c2845b8bd02cb34dfd33b0b0a2c40c6aff88939342d6d6f43fd17522c83df244b609e8fc8ba54dc705cf57f0c484bbd64bc876f36883ded6dd70b1a1acb717f4285efed24980815ae627a2b1385ca069835da0e9a694b4aa5d9eeecfae393aad5fd204f2d3975c62dc71be984c2c40dde8d9b2cd9bc15b942169f009909f95207233d8dbe6025c85a8f5d42bdc11cbff78623cf796b00b8b7ab1fa4301d0c4b881df7ea3f9446b849b9c939808facfb26ae2366d1f6d5f9e6906ad839c47e989e784339778af4ffb0a639c719d27bf8be9b2dee9cebd8d923a3873b1ad1819af9b6f9f6c6d0eff12db32c8de9550f299aae0dec6abb63c76544e61bfede3e79c3c13f5bd29390b542ab2bec60f316786f3883e6ce8a7c5cc5f29c9b235bcb30326b46b17667059a3ac0a73c70e4c2c72c9eaa1d869c22d3586fc68890231e842761cd24fd157c79d9b8c9c4ec596bbf742f002f8ff8d4bcd1a06b55f090dd03421e3f57fc0aa8afae4f88044ee81a291c451b7a048d488f8fdf980b03d05742ed005ee684ff4b9f8c46401b7f82ae2117f5fb9c2c7f9667b72f19a40057e58b57271fb214d33e627db7c2b31178ff9ec22b126f236b337be77866218f2004ab912db2fa9a73df30053fc050ff21287bdffee601a2cc4d1f5652c28a908daa998b95f00663c9f184040d74f6cc6d276a1068a515f6d20166bc502e0dcc2e65a638935ac4ad560ef6bc243b8a12404989c5aa90522b68026b5525fb69a551b4f6602e0b007b17b253a7834590b8299a1efd266eed84df3f642e4cb7d19dc6debacd855b71716e985003bea34d85a18c53585bb321a4958bb83c569daff2925b97e7c9d7cd224b3db4800cbb657241578cfbcb5763856969ec9cc5a1a4881e0c6599aac4d4345969b8dc855e94534f8dcc0f646f857ec2eca97687505ad6e0f1f0a707d31024249544ca214a2d39da6e8db12125aa1b601dd44c6ca4bd96b523c58be26a4f98993151330361fae4533de3392c5a9cb6b03d1156a430695ae8832f9f0d7c9471c884a79ea3a5804bad3da21faf6569716482b92f13a1b503c8b8bf781852d4aa3d8a5b107599be9d69298c445bfa2cbb735ff597170c654e80e8d7f208e417dd1057c3018eed054c214a73918e1c97fc43e0d5f72ebe606239b493d5f71d25be64d06d275acaa136acf07968cb71c63cd5260da4e9da921bc41b402497a795c5355ace535832fe93090acac07ba0a647ae9803b72ca7dec14d7199e8428cddda8af394bd440222994ad528f443c85b60573cb228a30dfeb761c3b53dcc995c9afb3cc652404c3ca442a0761fa727531908d176e535874abe16dda0abe08911a4b40fcc23c460e395b0de301aa76c7eccd118b130cb0e65cb4b961ae38812ef8bf24fb95796cfbfebf9099b159a99a91408303bc6a847b5d8312884c92f617a3cafd6f070e1d6c32df3577ada8a77764feda971c376a718ee9214bab9f75694a09ab365255767fb96770cb8d6e80a86d42a3fae15d4197d82e6bac60981947061fdc7e4d37c157acd9993d4fc7b1d13f7cfcb9ccd556896cfac43291cb3902f1c4bdbd231d063ece2554dd0fab4f9d2fdc7a0afe44ec1e840580f7af8cb8c1bbdf9f24f86fcbd6ff85b6c7eb0572001bd09ff11e16525aff967f592be5fb549ba08b74060cbe0839043c52c00f0ee4df216a3791ceff04edf0fda883fe764599e46bd6183a0aaf98c1593d97bf3540e8b1ea0ac91d578e8f1a21677eadf7b90d82699f5469f6f61b55917958f530d81a278abc630b7f19690dde9b092e8bacdddb94d0a6d10c5718036ced9b5fed97cea5a84135d15af6d7851c8e36d44ca000f814eec7535719b6c1c854de714940d54edac0a0965c0c2d41996abc6437c8c5f68c1ce51cb54651ac088da756eeb15e4f4a6f7088521294386491bed4f5fc741821adc025703f60ff938978506e05ba26c3172f93e45b27ddb3d4fe9deccc6f3458ab23ed1540e099acb91090563785f9edfe96e455d1fa9bcef3265dd7cee668d77266cbc165c4ce9e16e6e2015f21ed0065c2a4b6e0c47ab83f9c3b886b3834ce4f6c15fee8347e9caab03e08dbbf8364a748e2b7f6c46fdbf8c1c08c12e997eb35df093f80233d6cb1acba32aebf804d8b2a8448e26d3790e555228bfa87cef3efe068cf4a5e931540967ba3bc3d6bf20323fe45b83886de76aca4f008e30ea26b7e7cdf9452e5681e39ad9b396e128327fb7839b3ce6f23778c609f4200fa49703a0c915accbddb4ac365ffc80848f94987699712c96335551f9d6e927c5bbe517e8df585f2cab0123a664b59fa4faf3ee52b96ff29814a3f28eebab80e655c166ca6129dc298a940427f455a0e122f3a086484ee6f4c450c522ad75d5662783b36583c02ab94d81ebad82e174ae321a347bc552e5f89012fe120e4f324dfab2382c9e384061958c8eaebd8b747b23ecd94593383edb5754b3668ffc4bb5ea75c1714b8b77c7a37c6fd33c0a7e38989094c31633f17a2979896a70fcd4e4af45498e98d82e6aa8a51f464076a1bf20584bedf6cbc3a5b3c983e0dc13da0a9410a3e2daede7a92c37535e1e4d9b9cd196b89d50a6fae734de6cb3066a9bbd8b2d891f16f540960e87c6cbd39ba698ab6ad7bba26fa68ab59e4784f12dca49d18a01a93c1af163651d0b40d343d38259df422d884cd0a0f59e6e687074c510e3d77913c444dc1f1d529b0722e8f06e926fdacc9b33fdf5c0365a57a470a509b2f1456bdaad59a78d9ed6340db35aca1d1e8c3886bd13b0f2597f2b0d4a3306c90e2c9b7fbb52df31279804f269f19e7f6dbb767250a62b9ee5765d7b847eca05d61baaa99141c996f85db8da085bda95d3e416de6b2534b6d5d24d501a710bbfbefd50d96280db5b97e7a970730bb4fb0b7f94ec952fc9fe9278c7dcf409eea427299bcc8a13ad705ecd647e880c004508aedf524724e558a8535c2f4ce70a403f875c9552dac1b24f9a1fdde26290964dc5ddad4dc8c9a463e9ff8b7c1885c7996154a04848d7debef601c0b4f4796a13c9e604cfa35f4acfd74a515174bda901b71026dd6b2732d929382c0755fd53639f0caf013bce469618950b42e89505a610a3e237ffdbaa6c7cba54350534ae4b67eeed07438cfcdf98ad2d357916bf34f76b90e5d9beb225ffd3e0acef2e0aa760e60b7243678323b683b08350476fe6381c904e8a30bfa31d6ab32c75a1bda66c63f98096062a6c1afb3eaf7e736e493977d6f91462b69283653ec4c8b325f42ac2a3bf6b10ee59a9e5f8b2b1067733381dcd3cf6c5467d412643516f2dcb8d6cbcd3fb657b0223c55d60ba4df6861679ea5ada0ec851c87b8f66ad858f9ae4f29d8086cd043b3bba1b0cb2d711e5efcc5ea5cba8617eb3ba2a662d3b38de1387681073fe0ca162afc2159abf889a1df6a4c3ec68cf96ae1df597ecee565461af07b711b4a0059f8c3fa2b7c4d11aec82b5f1ff973a561d61ec30a1db940fdd51b30398c2b569f1f16dd81e7ee6ceaff493f9ee7aa8aa08106bf0f0b7c2e601628fa86196cf5d208e7048b5bdd30573cb253ad78160ca1e2ad96cb0f1e2b73aa2c3408e444a670a0ab1eb682638930312471143381394f0a028be99798b91ea81c024eaaa06cc35cd90af61cb81b1528faa8e069eac38865eac5fea41306422a9aa6e735895aabcdaccbac22b7503e738165e25c50c635fecaf65bc94d3ca7a3d4845800eb5ae3415cba9e7a9353e9835dc001162289c22e53a9e1877c21d5574a8f3d58596f3e78b871e600bdf5ff7bf43e234116e6b6ed72e5a21ab049148fd58ebe8c1c177ea0a4d328ee73e85dbbe346a91e376ff9fbf6a1215585b2ee0ba2ff3bab93b9e400ced584937a32d7132020b5c7091745ff3c212dc97e8fa888609639d3dc578715261bd75be50d4ad11895d1398c9988658ba77aea3114694707a2666a5d806e2b3361c5555f788c7ee950b4069feb6d3c45ee6e09cd473fae1ff4e64d024f33dadcd6e27a028c0995612a5fea96c3ccc19ae3d8e9fd63922388b1cd17e11cfef0a1f2fa031b1169c4f39f8f8a41848c8278de92073d91b705b2196e42bef688e5b1b5ed43ff32d03e2044159f2c54831994490729adf29696ae99b7b2240824608eded4f1eeef5556331e5eaaadc14451dded88d9dd76ccca4934f57af138230cc37d89818212b0b234832eab12399f37970eab80e821388794ebb37a62ea2a9babc2cf9273e3aeb4f6febac2c27ff486a730a837205b6b4d95275f95912041422196cd2652206e13d59e5dc6cd4638666fa5eabcc02b273b4d8ab11b39e6924b60b723c8fbdfdc95a7269cda10bf568dee3d7f7e955d4ea8ae22dcdf5d3e0b8419c7d55c76b74789eebddc91d7a3d03999ece15fa963a2", 0x1000}, {&(0x7f0000000080)="44ccdf68cbb3c6253fb619549f4476362ae42383feac876c01192f8fbc96f8fc84d331b12437a02e61f5906ec3db76c74cf07c0d018b719b4d86fc1edaec406feeb60befb05c238b66bf45c21b913e8e02a176ad6d0e268d83e7f83119effd1b54e805598ef01c8910402a1ce94d302b9045412737ed021f47d7be29b585378d831a06f57afcf235883fd4d2a595489501d60324197d448c494bb4483bf9433357133201f7adf88d31662c20d75f8cb869757b480db327c3b07d7066af44a1942b79dd4be7dc3a97945da51ee70a82f6a9e88b33e189ed810ca97ae9eb7e94e3d23093f4bf256272", 0xe8}, {&(0x7f0000000240)="6c706fc863e9e6f6a23e47a5479054ec1e40a71f2891b8e85fb8f7557147c76df434bac76121d16668ce575b400f70ca839ca6e7dca1886491af310e4dc16092bc0da5e6ad0323bf9fed6a260f382e3dd01de2d05d144f3fafe8de6154154f1205b43c17a0598579d8b14b3ffc746323d7e5a3420ca5e3bd759e0e0020909ef961f50d8f8ca6956c91dc07ceaf914ed1e1219c679e6d4f3bc90de8a3ef6246098e68d6c94d2cb06e890e0f45f95e36316a", 0xb1}, {&(0x7f0000000180)="ff4726de2885a75c187e383b099f6e17a2de04d57652d49b81670edcf9eb209481325bae9e54d131b04532902019", 0x2e}, {&(0x7f0000000300)="3f3eb27c827eebe6187d7fdda67bf635710cd3b5ce8d4bbc13808d289de17d4ea595af887b66550baaf1551cb9059728f87b0638e460dd726ee3745b3215467cee5eff21c6289d3f2e08f3942f8245787d5ab7f8b32f0e7f090b50a71844cd83b6b147bb1e9e6f8dcb56bee164bbc8c38d6062ca230731fc6caee585590ba0aceeecf210e982ca43b3bfb3b43744245b6d39ed458b77717eb38eb8c21c5cda6df0c967bc21257b023ac02db5f8ee091360d74791c97d362fa521bc94bc9863b38fea5d3d557e83f0765e65e47aa945b8", 0xd0}, {&(0x7f0000001440)="1fe5329aacb9a4f84dfba7e330a1bed44c36ab34df00766955f89c8a6b8ae35e64666f5eabc1912bc6461b4b25c67382e58c57f07888035c45a551714bea45332d7875b37325ed4f2572ee10f80c7430ec33121a9508c8c9c822e115d462d896a73574f48772d7112c7c46be009d74c314ec0c248df0de4a239fd3a972f6ccaae6fe00bf319dd327da9fb179ee61098d9982a0b01b2883f53b25ad279fb34aa6", 0xa0}], 0x6, &(0x7f0000001580)=[{0x98, 0x0, 0xffff, "03a112c94fc25058cd252d78333264d74bab083ef3120a20b3e86ffea6462dd3a1bc9de6b780ef7d11556903397bf5545a16ee2f733c63cc7c3a5bde9c0c361f7735fcef8c6f5de3f2d9778cf57803ce9a451bb6d299408864192191499f3d7e10516a252f0f10dc7bdef13eb388145f33725b37ccc57dfad85f6288293000f7743a6b34"}, {0x50, 0x112, 0xaeb, "90cd2f4753be9191c41c6e9e9efb59cf423cbe6e12aa5757b87aa1ee581fea9cb6948f2b98cd43d168373983f3d9374ee87cd1f55b964fd0fc4d11c8f0"}, {0x98, 0x3a, 0x3, "ff640767a4e9b1a9482d64e9e6d8ae1db0ce5695e7eafb34be5b26cd5dc49bb5ac931da3fbcd3563d3216d368dbb31dc9a7c34e755182db0bce701ef3cbea6c4b3ff3a74f5219063f811d3a57e211bfdb5e36ab57724a0e5cc54ebac65c18c40252a993787f02c3c1079b45ebd3e9321ade1f623a1296c99ea9b3c2eebf81d4268"}, {0x58, 0x125, 0x3, "edb7d82bc39cc8dba4e29ec89f973acbaca4517b1c5598d6390686abafd04d6c9b890847893db7a164c412b52830e5c66149a4d13f920e5120bdb123760c6d6127a2d69c79b5"}, {0x1010, 0xff, 0xa, "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"}], 0x11e8}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 948.624191ms ago: executing program 3 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000240)="28f4732dc5", &(0x7f0000000180)=""/93}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d000000000001000000000000000541"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280080040"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000240)="28f4732dc5", &(0x7f0000000180)=""/93}, 0x20) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d000000000001000000000000000541"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280080040"], 0x3c}}, 0x0) (async) 635.961501ms ago: executing program 2 (id=3285): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000002e2d090027bd700000000000040000000800180005ac0fe003001e1460b16528220865b934517cfa2524c4ab", @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRES8=r3, @ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="232c28bd7000fedbdf25010000000000000007410000004c001800651feab274680000000000008000000000000000000000000000000000000000000000000000000000000000a8000000ded9ff000000000000000000000000000000b3fc50b089b432b906764b67b71dea2d00f306db24225a247ab3b74f501aca1e9a8c0da3b75979032d7da6675fea3ee614d535a8e85c9f614b8d9d8d4dab3f781ff160fef4da7527fc2076a5749185f4a7d61111d2aae903d8c5609ef36038fc93223ea4622eafd53d0d"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4048020) r7 = accept4$unix(r3, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r8, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0xffe0}], 0x1}}], 0x1, 0x200400c0) sendto$packet(r5, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000020850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 391.785744ms ago: executing program 3 (id=3286): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000280)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x7a, 0x7, 0x1, 0x0, 0xfd, 0x20, 0x28, [0x0, 0x0, 0x0, 0xa, 0x5, 0x4, 0x0, 0x2]}}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r2 = socket(0x1, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0xf8, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xf4}, @NL80211_ATTR_IE={0x3b, 0x2a, [@mic={0x8c, 0x18, {0xa7, "c1eaac06c098", @long="4fab8ddb4ae399a112087615bfb5d8a6"}}, @erp={0x2a, 0x1}, @mic={0x8c, 0x18, {0xfbc, "e002ea1dea7b", @long="7d4ed32643f21c622e9f522043a438e1"}}]}, @NL80211_ATTR_IE={0x7e, 0x2a, [@tim={0x5, 0x72, {0x10, 0x19, 0xb3, "1da3a0b7f9ed13c3ddb7f4f279602670a6dbc05b8dacbd6a3f667eac636c8bdf9a2ce4b5a1ee3bf3bbd1c820e692538e839d4f9273ac50a11175dafb1b7ccab24b4c60db94a612cac28a26fec3fed67ab86c579bed0aaba0ab8d025f6a79335afb0b4698a3a7a101817d878eae51cc"}}, @perr={0x84, 0x2, {0x7}}, @supported_rates]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}]}, 0xf8}, 0x1, 0x0, 0x0, 0x884}, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfd50}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @broadcast}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x48, r6, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c845}, 0x4840) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf258700000066002a007e150e00fb0802110000010900000006000000000004003c04010107087107ffffff00020728bd06ffffffffffff7516000001000200f513797cf2e73cb9c92b0ee307adeae9760603401c000900bd0608021100000171070101ffff0006010301090000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2d, 'net_prio'}]}, 0xa) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) 249.499931ms ago: executing program 1 (id=3287): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x9) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x640008d0}, 0x44042) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 147.848388ms ago: executing program 0 (id=3288): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x40008, 0x800008}, 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000000000010000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000069108800000000000400000000000000950000000000dfff16568a37965f47176be671b4a7bc9986cabd255d4054d8be96c6917c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 108.462404ms ago: executing program 0 (id=3289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x40054}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x100000001) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000080)) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) 86.897327ms ago: executing program 1 (id=3290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'veth1_to_bond\x00', 0x24}) r4 = socket(0x5, 0x1, 0x200) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x20004040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007b100800000000007b0af8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="18", 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000f9ffffffffffffaaaaaaaaaa3f08e344000020165840000600000000000000010100000000a001880be50b90780109000026fc4a65de58575bad9d5bfcfe56cd863c9703ca13a35685a687901333e36b4167ecf7fbd32ada5e"], 0x32) 0s ago: executing program 0 (id=3291): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920723f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1}, 0x44) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): sing active interface [ 597.803085][T12671] dummy0 (unregistering): left promiscuous mode [ 597.820031][T12688] tipc: Started in network mode [ 597.825561][T12688] tipc: Node identity 080211, cluster identity 4711 [ 597.849762][T12688] tipc: Enabled bearer , priority 0 [ 598.272753][T12705] syzkaller0: entered promiscuous mode [ 598.290684][T12705] syzkaller0: entered allmulticast mode [ 598.687477][T12734] __nla_validate_parse: 36 callbacks suppressed [ 598.687496][T12734] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1745'. [ 599.987554][ T24] tipc: Node number set to 134353152 [ 600.281803][T12752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1748'. [ 600.319288][T12759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1753'. [ 600.514972][T12771] netlink: 522 bytes leftover after parsing attributes in process `syz.1.1757'. [ 600.620852][T12776] tipc: Enabled bearer , priority 0 [ 600.634547][T12776] syzkaller0: entered promiscuous mode [ 600.644543][T12779] netlink: 'syz.0.1759': attribute type 5 has an invalid length. [ 600.652963][T12776] syzkaller0: entered allmulticast mode [ 600.665646][T12780] netlink: 'syz.1.1758': attribute type 11 has an invalid length. [ 600.758111][T12768] tipc: Resetting bearer [ 600.837744][T12768] tipc: Disabling bearer [ 600.863277][T12782] pimreg: tun_chr_ioctl cmd 2147767520 [ 600.929528][T12752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 600.946181][T12752] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 601.002203][T12752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 601.008159][T12752] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 601.023714][T12752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.032733][T12793] netlink: 'syz.4.1763': attribute type 5 has an invalid length. [ 601.041688][T12752] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 601.156867][T12752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 601.179387][T12752] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 601.247490][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1767'. [ 601.583025][T12825] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 601.632015][T12825] netlink: 'syz.0.1770': attribute type 39 has an invalid length. [ 601.698103][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1771'. [ 601.757997][T12839] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 601.770489][T12839] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 601.890294][T12841] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.954932][T12845] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 601.993674][T12841] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.048953][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 602.085309][T12853] veth0: entered promiscuous mode [ 602.090774][T12853] veth0: entered allmulticast mode [ 602.103725][T12841] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.270292][T12841] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.354415][T12879] xt_NFQUEUE: number of total queues is 0 [ 602.399192][T12881] syz.3.1783: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 602.439440][T12881] CPU: 1 UID: 0 PID: 12881 Comm: syz.3.1783 Not tainted syzkaller #0 PREEMPT(full) [ 602.439469][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 602.439490][T12881] Call Trace: [ 602.439498][T12881] [ 602.439507][T12881] dump_stack_lvl+0xe8/0x150 [ 602.439540][T12881] warn_alloc+0x249/0x340 [ 602.439565][T12881] ? stack_trace_save+0xa9/0x100 [ 602.439588][T12881] ? __pfx_warn_alloc+0x10/0x10 [ 602.439616][T12881] ? kasan_save_track+0x4f/0x80 [ 602.439635][T12881] ? kasan_save_track+0x3e/0x80 [ 602.439655][T12881] ? __kasan_kmalloc+0x93/0xb0 [ 602.439676][T12881] ? __kmalloc_cache_noprof+0x31c/0x660 [ 602.439696][T12881] ? xskq_create+0x56/0x170 [ 602.439834][T12881] ? xsk_setsockopt+0x54c/0x990 [ 602.439858][T12881] ? do_sock_setsockopt+0x17c/0x1b0 [ 602.439947][T12881] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 602.439976][T12881] ? do_syscall_64+0x14d/0xf80 [ 602.440031][T12881] __vmalloc_node_range_noprof+0x132/0x1730 [ 602.440085][T12881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 602.440111][T12881] ? __kasan_kmalloc+0x93/0xb0 [ 602.440148][T12881] vmalloc_user_noprof+0xad/0xe0 [ 602.440169][T12881] ? xskq_create+0xbf/0x170 [ 602.440196][T12881] xskq_create+0xbf/0x170 [ 602.440226][T12881] xsk_init_queue+0x8a/0xe0 [ 602.440256][T12881] xsk_setsockopt+0x54c/0x990 [ 602.440285][T12881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 602.440310][T12881] ? __pfx_aa_sk_perm+0x10/0x10 [ 602.440381][T12881] ? aa_sock_opt_perm+0xff/0x1a0 [ 602.440435][T12881] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 602.440456][T12881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 602.440483][T12881] do_sock_setsockopt+0x17c/0x1b0 [ 602.440519][T12881] __x64_sys_setsockopt+0x13d/0x1b0 [ 602.440553][T12881] do_syscall_64+0x14d/0xf80 [ 602.440570][T12881] ? trace_irq_disable+0x3b/0x150 [ 602.440596][T12881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.440615][T12881] ? clear_bhb_loop+0x40/0x90 [ 602.440638][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.440663][T12881] RIP: 0033:0x7f7d6999c799 [ 602.440683][T12881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.440699][T12881] RSP: 002b:00007f7d6a7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 602.440720][T12881] RAX: ffffffffffffffda RBX: 00007f7d69c15fa0 RCX: 00007f7d6999c799 [ 602.440736][T12881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 602.440748][T12881] RBP: 00007f7d69a32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 602.440762][T12881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.440775][T12881] R13: 00007f7d69c16038 R14: 00007f7d69c15fa0 R15: 00007ffdf00da368 [ 602.440805][T12881] [ 602.494972][T12881] Mem-Info: [ 602.791352][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.799934][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.818394][T12881] active_anon:13638 inactive_anon:0 isolated_anon:0 [ 602.818394][T12881] active_file:3213 inactive_file:40105 isolated_file:0 [ 602.818394][T12881] unevictable:768 dirty:224 writeback:0 [ 602.818394][T12881] slab_reclaimable:12355 slab_unreclaimable:103388 [ 602.818394][T12881] mapped:30584 shmem:8935 pagetables:1478 [ 602.818394][T12881] sec_pagetables:0 bounce:0 [ 602.818394][T12881] kernel_misc_reclaimable:0 [ 602.818394][T12881] free:1308063 free_pcp:10566 free_cma:0 [ 602.824311][T12891] block nbd0: not configured, cannot reconfigure [ 602.931614][ T7548] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.940314][T12881] Node 0 active_anon:54140kB inactive_anon:0kB active_file:12852kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122424kB dirty:896kB writeback:0kB shmem:33656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:5764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 602.981223][T12881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 603.030863][ T7550] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.045997][T12881] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.126927][T12898] lo speed is unknown, defaulting to 1000 [ 603.153187][T12881] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 603.200343][T12881] Node 0 DMA32 free:1283532kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36140kB inactive_anon:0kB active_file:12852kB inactive_file:160228kB unevictable:1536kB writepending:896kB zspages:0kB present:3129332kB managed:2552728kB mlocked:0kB bounce:0kB free_pcp:50452kB local_pcp:29680kB free_cma:0kB [ 603.277690][T12881] lowmem_reserve[]: 0 0 0 0 0 [ 603.294238][T12881] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 603.300822][T12907] netlink: 'syz.2.1788': attribute type 29 has an invalid length. [ 603.377452][T12881] lowmem_reserve[]: 0 0 0 0 0 [ 603.382471][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 603.410132][T12907] netlink: 'syz.2.1788': attribute type 29 has an invalid length. [ 603.417984][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 603.418344][T12881] Node 1 Normal free:3937180kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7556kB local_pcp:7556kB free_cma:0kB [ 603.480732][T12911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1788'. [ 603.496380][T12881] lowmem_reserve[]: 0 0 0 0 0 [ 603.506487][T12881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 603.535581][T12881] Node 0 DMA32: 1302*4kB (UM) 2323*8kB (UM) 1182*16kB (UME) 107*32kB (UME) 255*64kB (U) 227*128kB (UM) 190*256kB (UME) 158*512kB (UM) 101*1024kB (UM) 68*2048kB (UME) 201*4096kB (UM) = 1287024kB [ 603.555833][T12881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 603.569398][T12881] Node 1 Normal: 1*4kB (E) 1*8kB (M) 5*16kB (UME) 4*32kB (ME) 3*64kB (ME) 2*128kB (ME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 959*4096kB (M) = 3937180kB [ 603.595243][T12916] syzkaller0: entered allmulticast mode [ 603.605233][T12881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.629076][T12881] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 603.630633][T12916] syzkaller0 (unregistering): left allmulticast mode [ 603.648655][T12881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.664309][T12881] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 603.685966][T12881] 44714 total pagecache pages [ 603.694168][T12881] 0 pages in swap cache [ 603.699301][T12881] Free swap = 124996kB [ 603.703512][T12881] Total swap = 124996kB [ 603.707832][T12881] 2097051 pages RAM [ 603.734109][T12881] 0 pages HighMem/MovableOnly [ 603.735175][T12899] lo speed is unknown, defaulting to 1000 [ 603.739254][T12881] 427033 pages reserved [ 603.753716][T12881] 0 pages cma reserved [ 603.797968][T12898] wg1 speed is unknown, defaulting to 1000 [ 603.896025][T12927] xt_hashlimit: invalid rate [ 604.022766][T12937] __nla_validate_parse: 2 callbacks suppressed [ 604.022784][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 604.159128][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 604.168145][T12937] netlink: 'syz.2.1796': attribute type 13 has an invalid length. [ 604.177994][T12937] netlink: 'syz.2.1796': attribute type 11 has an invalid length. [ 604.847340][T12899] wg1 speed is unknown, defaulting to 1000 [ 605.061519][T12995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.087647][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 605.153252][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 605.361552][T13014] netlink: 'syz.3.1813': attribute type 4 has an invalid length. [ 605.379861][T13007] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 605.391016][T13014] netlink: 'syz.3.1813': attribute type 4 has an invalid length. [ 605.429919][T13008] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 605.598647][T13004] lo speed is unknown, defaulting to 1000 [ 605.615334][T13027] netlink: 'syz.2.1817': attribute type 4 has an invalid length. [ 605.624092][T13027] netlink: 15506 bytes leftover after parsing attributes in process `syz.2.1817'. [ 605.722247][T13027] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 605.770836][T13027] bond8 (unregistering): Released all slaves [ 605.940427][T13031] lo speed is unknown, defaulting to 1000 [ 605.962929][T13040] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1820'. [ 606.580470][T13031] wg1 speed is unknown, defaulting to 1000 [ 606.717631][T13054] bridge4: entered promiscuous mode [ 606.732133][T13054] bridge4: entered allmulticast mode [ 606.841675][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 606.870049][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 606.896482][T13004] wg1 speed is unknown, defaulting to 1000 [ 606.959182][T13063] validate_nla: 1 callbacks suppressed [ 606.959201][T13063] netlink: 'syz.2.1827': attribute type 22 has an invalid length. [ 606.994102][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 607.702485][T13078] syzkaller0: entered promiscuous mode [ 607.708109][T13078] syzkaller0: entered allmulticast mode [ 609.577820][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 609.623449][T13097] netlink: 'syz.2.1833': attribute type 83 has an invalid length. [ 609.776413][T13109] netlink: 'syz.4.1837': attribute type 13 has an invalid length. [ 609.785481][T13109] netlink: 'syz.4.1837': attribute type 17 has an invalid length. [ 609.972135][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1840'. [ 610.745435][T13106] batman_adv: batadv0: Interface deactivated: gretap3 [ 610.865662][T13109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.875248][T13109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.892875][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1840'. [ 610.919318][T12952] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.938816][T12952] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.950317][T12952] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.959198][T12952] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.981538][T12952] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.005110][T12952] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.022919][T13137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'. [ 611.039030][T13137] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 611.047450][T12952] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.067276][T12952] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.093081][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1845'. [ 611.108712][T13116] lo speed is unknown, defaulting to 1000 [ 611.110845][T13143] x_tables: ip_tables: ah match: only valid for protocol 51 [ 611.134349][T13145] vlan2: left promiscuous mode [ 611.141213][T13145] ip6gre1: left promiscuous mode [ 611.146670][T13145] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 611.155933][T13145] erspan1: left promiscuous mode [ 611.161651][T13145] gtp0: left promiscuous mode [ 611.384765][T13150] macsec1: entered promiscuous mode [ 611.511859][T13153] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 611.524753][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 611.728209][T13116] wg1 speed is unknown, defaulting to 1000 [ 612.078766][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1855'. [ 612.300613][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 612.421676][T13198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1861'. [ 612.997371][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1871'. [ 613.694112][T13257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 613.733270][T13265] syzkaller0: entered promiscuous mode [ 613.746362][T13255] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 613.748550][T13265] syzkaller0: entered allmulticast mode [ 613.937240][T13275] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 614.012980][T13275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.106578][T13286] wg1: entered promiscuous mode [ 614.111756][T13286] wg1: entered allmulticast mode [ 614.157325][T10746] wg1 speed is unknown, defaulting to 1000 [ 614.169440][T10746] syz0: Port: 1 Link ACTIVE [ 614.174071][T10746] wg1 speed is unknown, defaulting to 1000 [ 614.450794][T13320] netlink: 'syz.2.1895': attribute type 3 has an invalid length. [ 614.653228][T13333] __nla_validate_parse: 21 callbacks suppressed [ 614.653248][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 614.729527][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 614.851684][T13353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'. [ 614.861981][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1903'. [ 614.887474][T13355] netlink: 'syz.4.1904': attribute type 13 has an invalid length. [ 614.895614][T13355] netlink: 'syz.4.1904': attribute type 17 has an invalid length. [ 614.911971][T13355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.933417][T13355] xt_hashlimit: size too large, truncated to 1048576 [ 614.956696][T13355] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 615.202460][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 615.251597][T13368] xt_time: unknown flags 0xf4 [ 615.330413][T13373] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1910'. [ 615.471101][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 615.509866][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1912'. [ 615.525438][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1913'. [ 615.564369][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 616.004078][T13413] tipc: Enabling of bearer rejected, failed to enable media [ 616.060162][T13419] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 616.485419][T13440] bond0: option miimon: invalid value (18446744073709551615) [ 616.500404][T13440] bond0: option miimon: allowed values 0 - 2147483647 [ 616.543481][T13443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.853765][T13457] sit1: entered allmulticast mode [ 616.967183][T13462] syzkaller1: entered promiscuous mode [ 616.978759][T13462] syzkaller1: entered allmulticast mode [ 617.048519][T13467] : entered promiscuous mode [ 617.169610][T13473] €Â: renamed from vlan0 [ 617.260595][T13476] tipc: Enabled bearer , priority 0 [ 617.271385][T13476] syzkaller0: entered promiscuous mode [ 617.278444][T13476] syzkaller0: entered allmulticast mode [ 617.361391][T13474] tipc: Resetting bearer [ 617.401801][T13474] tipc: Disabling bearer [ 617.760520][T13499] bridge_slave_0: left allmulticast mode [ 617.776036][T13499] bridge_slave_0: left promiscuous mode [ 617.790579][T13499] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.806269][T13499] team_slave_0: left promiscuous mode [ 617.843984][T13499] team0: Port device team_slave_0 removed [ 617.879084][T13499] team_slave_1: left promiscuous mode [ 617.901100][T13499] team0: Port device team_slave_1 removed [ 617.915053][T13499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.923966][T13499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.933531][T13499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.997559][T13507] lo speed is unknown, defaulting to 1000 [ 619.829618][ T24] lo speed is unknown, defaulting to 1000 [ 619.835381][ T24] sqz0: Port: 1 Link DOWN [ 619.840263][T13507] wg1 speed is unknown, defaulting to 1000 [ 619.966299][T12952] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.009673][T12952] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.038398][ T50] lo speed is unknown, defaulting to 1000 [ 620.059207][T12952] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.067615][T12952] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.084684][T13597] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 620.223953][ T7552] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 620.253081][ T5825] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 620.261167][ T7552] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 620.292673][T13597] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 620.372599][T13617] __nla_validate_parse: 14 callbacks suppressed [ 620.372620][T13617] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1973'. [ 620.418386][ T5825] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 620.442986][T13617] caif0: entered allmulticast mode [ 620.474253][T13621] netlink: 'syz.2.1974': attribute type 3 has an invalid length. [ 620.619198][ T5825] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 621.159027][T13650] macvtap0: entered promiscuous mode [ 621.176578][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1982'. [ 621.265346][T13650] macvtap0 (unregistering): left promiscuous mode [ 621.277054][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 621.306137][T13653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1983'. [ 621.877833][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 622.092171][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 622.243015][T13693] lo speed is unknown, defaulting to 1000 [ 622.286987][T13706] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 622.586326][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 622.631739][T13720] netlink: 'syz.4.1998': attribute type 2 has an invalid length. [ 622.815848][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 622.825438][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 622.962061][T13693] wg1 speed is unknown, defaulting to 1000 [ 623.476407][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2007'. [ 623.999168][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 624.138318][T13780] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 624.156739][T13780] bond4 (unregistering): Released all slaves [ 624.236257][T13785] tipc: Enabled bearer , priority 0 [ 624.362092][T13783] tipc: Disabling bearer [ 624.693451][T13824] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 625.109016][T13824] bond0: entered promiscuous mode [ 625.815565][T13848] __nla_validate_parse: 3 callbacks suppressed [ 625.815584][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 625.957175][T13848] tipc: Invalid UDP bearer configuration [ 625.957223][T13848] tipc: Enabling of bearer rejected, failed to enable media [ 626.001316][T13860] netlink: 'syz.2.2028': attribute type 1 has an invalid length. [ 626.072679][T13860] 8021q: adding VLAN 0 to HW filter on device bond8 [ 626.144250][T13860] bond8: (slave veth13): Enslaving as an active interface with a down link [ 626.174270][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 626.190744][T13874] bond8: (slave dummy0): making interface the new active one [ 626.201125][T13874] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 626.232803][T13860] macsec2: entered promiscuous mode [ 626.240571][T13860] bridge0: entered promiscuous mode [ 626.301488][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 626.346020][T13889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2033'. [ 626.513107][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2034'. [ 627.246691][T13898] tipc: Enabling of bearer rejected, already enabled [ 627.277823][T13914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2040'. [ 627.287324][T13914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2040'. [ 627.303009][T13914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2040'. [ 627.500480][T13915] "syz.1.2041" (13915) uses obsolete ecb(arc4) skcipher [ 627.568784][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 627.719491][ T29] audit: type=1804 audit(1772943491.680:2): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2042" name="/newroot/428/cgroup.controllers" dev="tmpfs" ino=2204 res=1 errno=0 [ 627.806104][ T29] audit: type=1800 audit(1772943491.720:3): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2042" name="cgroup.controllers" dev="tmpfs" ino=2204 res=0 errno=0 [ 627.861958][ T29] audit: type=1800 audit(1772943491.720:4): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2042" name="cgroup.controllers" dev="tmpfs" ino=2204 res=0 errno=0 [ 627.980451][T13945] x_tables: duplicate underflow at hook 1 [ 628.029047][T13950] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2050'. [ 628.079383][T13950] openvswitch: netlink: Flow key attr not present in new flow. [ 628.097908][T13954] openvswitch: netlink: Flow key attr not present in new flow. [ 628.162692][T13961] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 628.247392][T13966] unsupported nla_type 142 [ 628.297193][T13973] netlink: 'syz.2.2056': attribute type 2 has an invalid length. [ 628.323551][T13973] !©9: entered promiscuous mode [ 628.330318][T13972] netlink: 'syz.2.2056': attribute type 2 has an invalid length. [ 628.338245][T13972] !©9: left promiscuous mode [ 628.539368][T13985] netlink: 'syz.0.2061': attribute type 83 has an invalid length. [ 628.961200][T14011] syzkaller0: entered promiscuous mode [ 628.982355][T14011] syzkaller0: entered allmulticast mode [ 629.294698][T14030] netlink: 'syz.0.2076': attribute type 11 has an invalid length. [ 629.319743][T14030] netlink: 'syz.0.2076': attribute type 4 has an invalid length. [ 629.353059][T14030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.382942][T14033] batadv_slave_0: entered promiscuous mode [ 629.421739][T14033] batadv_slave_0: left promiscuous mode [ 629.438629][T14035] xt_bpf: check failed: parse error [ 629.700787][T14044] : entered promiscuous mode [ 630.435319][T14082] sctp: [Deprecated]: syz.3.2089 (pid 14082) Use of int in maxseg socket option. [ 630.435319][T14082] Use struct sctp_assoc_value instead [ 631.359135][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 632.543542][T14037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.694567][T14087] netlink: 'syz.0.2090': attribute type 21 has an invalid length. [ 632.709066][T14087] __nla_validate_parse: 5 callbacks suppressed [ 632.709083][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2090'. [ 632.758138][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2090'. [ 632.783466][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 632.910716][T14105] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2091'. [ 632.940722][T14102] netlink: 'syz.0.2096': attribute type 4 has an invalid length. [ 632.958763][T14105] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2091'. [ 633.077354][T14115] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2098'. [ 633.086365][T14102] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 633.096783][T14109] lo speed is unknown, defaulting to 1000 [ 633.511617][T14111] lo speed is unknown, defaulting to 1000 [ 633.518969][T14109] wg1 speed is unknown, defaulting to 1000 [ 633.686838][T14140] syzkaller1: entered promiscuous mode [ 633.692571][T14140] syzkaller1: entered allmulticast mode [ 634.008076][T14111] wg1 speed is unknown, defaulting to 1000 [ 634.833802][T14181] m1Ie5èÿá: entered promiscuous mode [ 635.076739][T14198] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 635.100263][T14198] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2120'. [ 635.109426][T14198] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2120'. [ 635.139834][T14198] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2120'. [ 635.270603][T14190] lo speed is unknown, defaulting to 1000 [ 635.733130][T14190] wg1 speed is unknown, defaulting to 1000 [ 635.792737][T14240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2132'. [ 636.515552][T14273] vlan0: entered promiscuous mode [ 636.520792][T14273] bridge0: entered promiscuous mode [ 636.639946][T14277] tipc: Enabled bearer , priority 0 [ 636.660005][T14277] syzkaller0: entered promiscuous mode [ 636.665508][T14277] syzkaller0: entered allmulticast mode [ 636.688529][T14279] openvswitch: netlink: Flow key attr not present in new flow. [ 636.897863][T14276] tipc: Resetting bearer [ 636.975707][T14276] tipc: Disabling bearer [ 637.115185][T14292] lo speed is unknown, defaulting to 1000 [ 637.252263][T14304] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 637.287163][T14307] netlink: 'syz.0.2148': attribute type 11 has an invalid length. [ 637.322870][T14307] netlink: 'syz.0.2148': attribute type 23 has an invalid length. [ 637.606064][T14327] Unsupported ieee802154 address type: 0 [ 637.693574][T14292] wg1 speed is unknown, defaulting to 1000 [ 638.082919][T14358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.142022][T14351] bond4: option downdelay: invalid value (18446744073709551615) [ 638.158296][T14351] bond4: option downdelay: allowed values 0 - 2147483647 [ 638.199557][T14351] bond4 (unregistering): Released all slaves [ 638.345892][T14370] __nla_validate_parse: 11 callbacks suppressed [ 638.345915][T14370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'. [ 638.427205][T14374] IPVS: set_ctl: invalid protocol: 43 172.20.20.2:20002 [ 638.473305][T14370] netlink: 'syz.0.2167': attribute type 7 has an invalid length. [ 638.497225][T14370] netlink: 'syz.0.2167': attribute type 8 has an invalid length. [ 638.521875][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 638.565746][T14385] tc_dump_action: action bad kind [ 638.786973][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 638.798243][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 638.876180][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'. [ 639.820045][T14449] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 639.953257][T14449] bond0: entered promiscuous mode [ 639.958824][T14449] bond0: entered allmulticast mode [ 639.965114][T14449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.035529][T14460] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 640.063615][T14460] bond7: entered promiscuous mode [ 640.068953][T14460] bond7: entered allmulticast mode [ 640.074563][T14460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 640.094293][T14460] macvlan5: entered promiscuous mode [ 640.099696][T14460] macvlan5: entered allmulticast mode [ 640.107183][T14460] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 640.229657][T14470] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 640.242936][T14470] veth0_vlan: left promiscuous mode [ 640.250114][T14470] veth0_vlan: entered promiscuous mode [ 640.271211][T14470] team0: Device veth0_vlan failed to register rx_handler [ 640.488682][T14491] lo speed is unknown, defaulting to 1000 [ 640.524740][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 640.710349][T14499] tap0: tun_chr_ioctl cmd 2147767521 [ 640.875509][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 640.898600][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 640.955722][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.978298][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.005236][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.024069][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.208332][T14516] IPVS: Error connecting to the multicast addr [ 641.274505][T14512] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 641.283365][T14512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2205'. [ 641.474879][T14491] wg1 speed is unknown, defaulting to 1000 [ 641.542256][T14528] syzkaller1: entered promiscuous mode [ 641.562658][T14528] syzkaller1: entered allmulticast mode [ 641.669753][T14535] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2211'. [ 641.946003][T14552] syz_tun (unregistering): left allmulticast mode [ 642.040553][T14559] netlink: 'syz.3.2219': attribute type 83 has an invalid length. [ 642.651411][T14587] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 642.715609][T14589] lo speed is unknown, defaulting to 1000 [ 643.928761][T14589] wg1 speed is unknown, defaulting to 1000 [ 643.939086][T14590] lo speed is unknown, defaulting to 1000 [ 644.196326][T14636] __nla_validate_parse: 2 callbacks suppressed [ 644.196345][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2239'. [ 644.255153][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 644.264324][T14638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 644.537744][T14612] lo speed is unknown, defaulting to 1000 [ 644.721087][T14645] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2242'. [ 644.776465][T14590] wg1 speed is unknown, defaulting to 1000 [ 645.066886][T14633] lo speed is unknown, defaulting to 1000 [ 645.209852][T14653] openvswitch: netlink: Key type 30 is not supported [ 645.411124][T14657] netlink: 'syz.2.2247': attribute type 11 has an invalid length. [ 645.439080][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 645.439762][T14612] wg1 speed is unknown, defaulting to 1000 [ 645.928069][T14673] netlink: 'syz.3.2253': attribute type 4 has an invalid length. [ 645.941495][T14673] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 645.962709][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'. [ 646.001731][T14633] wg1 speed is unknown, defaulting to 1000 [ 646.054714][T14674] bond2 (unregistering): Released all slaves [ 646.201436][T14679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 646.336131][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 646.405087][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 646.414307][T14683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2255'. [ 646.577554][T14685] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 646.814231][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 646.977596][T14688] 8021q: VLANs not supported on ip6gre0 [ 648.287863][T14729] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 648.486213][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2273'. [ 648.744226][T14759] netlink: 'syz.4.2280': attribute type 29 has an invalid length. [ 649.006365][T14767] lo speed is unknown, defaulting to 1000 [ 649.231202][T14767] wg1 speed is unknown, defaulting to 1000 [ 650.107194][T14823] IPv6: sit4: Disabled Multicast RS [ 650.166229][T14826] __nla_validate_parse: 6 callbacks suppressed [ 650.166249][T14826] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2293'. [ 650.188831][T14826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.429126][T14832] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 1, id = 0 [ 651.715182][T14865] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2303'. [ 651.758777][T14869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2305'. [ 651.780369][T14871] veth0_macvtap: Caught tx_queue_len zero misconfig [ 651.808364][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2302'. [ 651.825002][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2305'. [ 651.884091][T14882] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2305'. [ 651.984930][T14883] lo speed is unknown, defaulting to 1000 [ 652.005009][T14888] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 652.036728][T14888] erspan2: entered allmulticast mode [ 652.290920][T14883] wg1 speed is unknown, defaulting to 1000 [ 652.524434][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2310'. [ 652.763191][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 653.121571][T14952] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 653.252784][T14958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2322'. [ 653.489251][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'. [ 653.819503][T14986] bond0: option miimon: invalid value (18446744073709551615) [ 653.836687][T14986] bond0: option miimon: allowed values 0 - 2147483647 [ 653.930979][T14998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.054724][T15005] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 654.325534][T15024] tipc: Enabled bearer , priority 0 [ 654.344402][T15024] syzkaller0: entered promiscuous mode [ 654.350624][T15024] syzkaller0: entered allmulticast mode [ 654.364122][T15024] tipc: Resetting bearer [ 654.381431][T15023] tipc: Resetting bearer [ 654.401097][T15028] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 654.420677][T15028] netlink: 'syz.2.2343': attribute type 2 has an invalid length. [ 654.439161][T15023] tipc: Disabling bearer [ 654.543351][T15038] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 654.572492][T15038] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 655.029448][T15070] pim6reg: entered allmulticast mode [ 655.037340][T15070] pim6reg: left allmulticast mode [ 655.112681][T15078] batman_adv: batadv0: Adding interface: gretap1 [ 655.129263][T15078] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.197220][T15078] batman_adv: batadv0: Interface activated: gretap1 [ 655.300103][T15082] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 655.330804][T15082] netlink: 'syz.3.2358': attribute type 2 has an invalid length. [ 655.355566][T15082] netlink: 'syz.3.2358': attribute type 1 has an invalid length. [ 655.387323][T15082] netlink: 'syz.3.2358': attribute type 3 has an invalid length. [ 655.768682][T15113] lo speed is unknown, defaulting to 1000 [ 655.814087][T15114] __nla_validate_parse: 5 callbacks suppressed [ 655.814108][T15114] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2365'. [ 655.992939][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2368'. [ 656.136020][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 656.217592][T15121] netlink: 'syz.3.2368': attribute type 2 has an invalid length. [ 656.341124][T15136] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 656.406992][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 656.436694][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2371'. [ 656.532364][T15133] lo speed is unknown, defaulting to 1000 [ 656.552115][T15113] wg1 speed is unknown, defaulting to 1000 [ 657.136379][T15166] lo speed is unknown, defaulting to 1000 [ 657.154624][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 657.581041][T15183] lo speed is unknown, defaulting to 1000 [ 657.721328][T15133] wg1 speed is unknown, defaulting to 1000 [ 658.114254][T15166] wg1 speed is unknown, defaulting to 1000 [ 658.510627][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 658.559661][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 658.564672][T15183] wg1 speed is unknown, defaulting to 1000 [ 658.568604][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2388'. [ 658.584151][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 659.886180][T15229] lo speed is unknown, defaulting to 1000 [ 660.306889][T15242] xt_ecn: cannot match TCP bits for non-tcp packets [ 660.537152][T15229] wg1 speed is unknown, defaulting to 1000 [ 660.752673][T15252] lo speed is unknown, defaulting to 1000 [ 661.193848][T15252] wg1 speed is unknown, defaulting to 1000 [ 661.452336][T15275] __nla_validate_parse: 3 callbacks suppressed [ 661.452355][T15275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2409'. [ 661.624556][T15281] sit0: Caught tx_queue_len zero misconfig [ 662.354770][T15307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2418'. [ 662.748331][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 662.803127][T15335] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2425'. [ 662.869992][T15335] netlink: ct family unspecified [ 662.912953][T15333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2424'. [ 663.004315][T15337] lo speed is unknown, defaulting to 1000 [ 663.159566][T15342] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2427'. [ 663.591745][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.622593][T15347] team0: left promiscuous mode [ 663.627412][T15347] team_slave_0: left promiscuous mode [ 663.667247][T15347] team_slave_1: left promiscuous mode [ 663.682772][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.736936][T15347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 663.770754][T15337] wg1 speed is unknown, defaulting to 1000 [ 663.842645][T15353] lo speed is unknown, defaulting to 1000 [ 663.935569][T15358] team0: Device macsec1 is already an upper device of the team interface [ 664.482453][T15353] wg1 speed is unknown, defaulting to 1000 [ 664.490741][T15370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'. [ 664.500534][T15372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2437'. [ 665.849314][T15410] lo speed is unknown, defaulting to 1000 [ 666.087481][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 666.230124][T15427] netlink: 'syz.2.2450': attribute type 3 has an invalid length. [ 666.258794][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 666.693050][T15440] netlink: 'syz.2.2451': attribute type 4 has an invalid length. [ 666.754050][T15442] xt_ecn: cannot match TCP bits for non-tcp packets [ 666.855386][T15442] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.956286][T15448] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2452'. [ 666.997876][T15448] gretap2: entered promiscuous mode [ 667.014185][T15410] wg1 speed is unknown, defaulting to 1000 [ 667.071739][T15442] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.173861][T15442] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.264412][T15442] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.434386][ T7548] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.494755][T12953] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.601762][T12953] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.654153][T12953] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.895202][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 668.022989][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 668.043279][T15494] Cannot find del_set index 2 as target [ 668.145494][T15496] lo speed is unknown, defaulting to 1000 [ 668.722191][T15496] wg1 speed is unknown, defaulting to 1000 [ 669.014761][T15535] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 669.034317][T15537] netlink: 'syz.3.2478': attribute type 1 has an invalid length. [ 669.059808][T15537] netlink: 'syz.3.2478': attribute type 1 has an invalid length. [ 669.109899][T15539] x_tables: unsorted entry at hook 3 [ 669.189255][T15544] netlink: 'syz.0.2481': attribute type 10 has an invalid length. [ 669.404026][T15552] tipc: Enabling of bearer rejected, failed to enable media [ 669.567396][T15556] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 669.582828][T15558] lo speed is unknown, defaulting to 1000 [ 669.725249][T15569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.910238][T15581] netlink: 'syz.0.2490': attribute type 1 has an invalid length. [ 669.961466][T15581] bond9: entered promiscuous mode [ 669.981925][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 670.007511][T15587] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 670.037795][T15581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 670.063364][T15558] wg1 speed is unknown, defaulting to 1000 [ 670.075328][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 670.108399][T15590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'. [ 670.339013][T15581] bond9: (slave bridge7): making interface the new active one [ 670.346662][T15581] bridge7: entered promiscuous mode [ 670.354682][T15581] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 670.370849][T15590] bond6: entered allmulticast mode [ 670.585085][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 670.610812][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 671.168287][T15633] lo speed is unknown, defaulting to 1000 [ 671.204891][T15633] lo speed is unknown, defaulting to 1000 [ 671.261387][T15633] lo speed is unknown, defaulting to 1000 [ 671.356479][T15633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 671.371747][T15643] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 671.392982][T15643] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 671.419347][T15643] netlink: 'syz.0.2505': attribute type 3 has an invalid length. [ 671.443270][T15633] lo speed is unknown, defaulting to 1000 [ 671.454510][T15633] lo speed is unknown, defaulting to 1000 [ 671.481568][T15633] lo speed is unknown, defaulting to 1000 [ 671.537378][T15633] lo speed is unknown, defaulting to 1000 [ 671.551822][T15633] lo speed is unknown, defaulting to 1000 [ 671.730626][T15658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2511'. [ 671.911100][T15671] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.929765][T15672] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.936824][T15667] lo speed is unknown, defaulting to 1000 [ 671.943976][T15671] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.969733][T15673] ipt_ECN: cannot use operation on non-tcp rule [ 671.971302][T15672] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 671.987369][T15673] netlink: 'syz.1.2513': attribute type 32 has an invalid length. [ 672.014816][T15673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 672.024130][T15673] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 672.052240][ T137] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 672.084956][ T137] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 672.149518][T15678] syzkaller0: entered promiscuous mode [ 672.166042][T15678] syzkaller0: entered allmulticast mode [ 672.178980][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 672.205418][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 672.297117][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 672.320680][T15694] netlink: 'syz.0.2521': attribute type 83 has an invalid length. [ 672.384297][T15667] wg1 speed is unknown, defaulting to 1000 [ 672.384336][T15673] lo speed is unknown, defaulting to 1000 [ 672.479722][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 672.626464][T15695] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2522'. [ 672.703104][T15701] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2522'. [ 672.713093][T15693] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2522'. [ 672.768003][T15703] bond9: option arp_interval: invalid value (18446744073709551615) [ 672.796138][T15703] bond9: option arp_interval: allowed values 0 - 2147483647 [ 672.836506][T15703] bond9 (unregistering): Released all slaves [ 672.881431][T15667] lo speed is unknown, defaulting to 1000 [ 672.998209][T15710] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2526'. [ 673.282161][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2533'. [ 673.313415][T15685] lo speed is unknown, defaulting to 1000 [ 673.313429][T15673] wg1 speed is unknown, defaulting to 1000 [ 673.327890][T15734] netlink: 'syz.4.2533': attribute type 10 has an invalid length. [ 673.371850][T15734] dummy0: entered promiscuous mode [ 673.599377][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 674.021515][T15685] wg1 speed is unknown, defaulting to 1000 [ 674.257167][T15779] sit0: left allmulticast mode [ 674.368546][T15747] lo speed is unknown, defaulting to 1000 [ 674.372689][T15685] lo speed is unknown, defaulting to 1000 [ 674.390300][T15673] lo speed is unknown, defaulting to 1000 [ 674.714694][T15792] netlink: 'syz.2.2547': attribute type 21 has an invalid length. [ 674.735088][T15792] netlink: 'syz.2.2547': attribute type 4 has an invalid length. [ 674.743344][T15792] netlink: 'syz.2.2547': attribute type 5 has an invalid length. [ 674.773793][T15747] wg1 speed is unknown, defaulting to 1000 [ 675.051774][T15747] lo speed is unknown, defaulting to 1000 [ 676.064524][T15811] netlink: 'syz.4.2553': attribute type 28 has an invalid length. [ 676.080869][T15810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.091078][T15811] netlink: 'syz.4.2553': attribute type 3 has an invalid length. [ 676.111656][T15797] ipvlan0: entered promiscuous mode [ 676.159701][T15813] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 676.333500][T15813] bond13: entered promiscuous mode [ 676.338662][T15813] bond13: entered allmulticast mode [ 676.359577][T15813] 8021q: adding VLAN 0 to HW filter on device bond13 [ 676.413714][T15811] macvlan2: entered promiscuous mode [ 676.419906][T15811] macvlan2: entered allmulticast mode [ 676.678492][T15831] openvswitch: netlink: Key type 270 is out of range max 32 [ 677.152579][T15861] netlink: 'syz.2.2568': attribute type 1 has an invalid length. [ 677.170182][T15861] __nla_validate_parse: 13 callbacks suppressed [ 677.170203][T15861] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2568'. [ 677.188474][T15861] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2568'. [ 677.199693][T15861] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2568'. [ 677.768039][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 677.780072][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 677.810259][T15892] netlink: 'syz.2.2577': attribute type 7 has an invalid length. [ 677.977967][T15900] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 678.166705][T15917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.784700][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'. [ 679.086110][T15960] lo speed is unknown, defaulting to 1000 [ 679.287101][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'. [ 679.439210][T15960] wg1 speed is unknown, defaulting to 1000 [ 679.502986][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'. [ 679.576573][T15985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2605'. [ 679.688078][T15960] lo speed is unknown, defaulting to 1000 [ 679.819116][T15997] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2610'. [ 680.615099][T16040] pim6reg1: entered promiscuous mode [ 680.621042][T16040] pim6reg1: entered allmulticast mode [ 681.587108][T16123] vlan2: left promiscuous mode [ 681.593992][T16123] bridge0: port 3(vlan2) entered disabled state [ 681.621560][T16123] bridge_slave_1: left allmulticast mode [ 681.628707][T16123] bridge_slave_1: left promiscuous mode [ 681.647955][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.674959][T16123] bridge_slave_0: left promiscuous mode [ 681.682367][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.925230][T16143] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 681.956380][T16143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.525791][T16183] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 682.545807][T16183] __nla_validate_parse: 9 callbacks suppressed [ 682.545826][T16183] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2663'. [ 682.714577][T16191] vlan0: entered promiscuous mode [ 682.720206][T16191] vlan0: entered allmulticast mode [ 682.725345][T16191] geneve1: entered allmulticast mode [ 682.775956][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 682.821090][T16202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2672'. [ 682.830351][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2672'. [ 682.856754][T16203] x_tables: duplicate entry at hook 1 [ 683.263541][T16206] Cannot find del_set index 1 as target [ 683.595526][T16211] xfrm1: entered allmulticast mode [ 683.692795][T16222] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2679'. [ 683.780482][T16231] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 683.957700][T16242] IPv6: NLM_F_CREATE should be specified when creating new route [ 684.108334][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 684.299944][T16248] lo speed is unknown, defaulting to 1000 [ 684.385625][T16261] syzkaller0: entered promiscuous mode [ 684.449678][T16261] syzkaller0: entered allmulticast mode [ 684.569921][T16274] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2693'. [ 684.674946][T16259] lo speed is unknown, defaulting to 1000 [ 684.682752][T16248] wg1 speed is unknown, defaulting to 1000 [ 684.911721][T16291] macsec1: entered allmulticast mode [ 684.917314][T16291] syz_tun: entered allmulticast mode [ 685.072959][T16291] syz_tun: left allmulticast mode [ 685.261045][T16248] lo speed is unknown, defaulting to 1000 [ 685.445843][T16281] lo speed is unknown, defaulting to 1000 [ 685.460365][T16259] wg1 speed is unknown, defaulting to 1000 [ 685.789653][T16334] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2706'. [ 685.799776][T16308] lo speed is unknown, defaulting to 1000 [ 685.968707][T16341] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2708'. [ 686.049253][T16308] wg1 speed is unknown, defaulting to 1000 [ 686.276659][T16281] wg1 speed is unknown, defaulting to 1000 [ 686.277453][T16259] lo speed is unknown, defaulting to 1000 [ 686.300819][T16308] lo speed is unknown, defaulting to 1000 [ 686.395884][T16360] xt_cluster: node mask cannot exceed total number of nodes [ 686.554967][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2714'. [ 686.675862][T16365] batadv1: entered promiscuous mode [ 686.683757][T16365] batadv1: entered allmulticast mode [ 686.690648][T16365] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 686.838511][T16281] lo speed is unknown, defaulting to 1000 [ 686.957896][T16378] rdma_rxe: rxe_newlink: failed to add lo [ 687.509360][T16386] syzkaller1: entered promiscuous mode [ 687.514871][T16386] syzkaller1: entered allmulticast mode [ 687.541722][T16392] syzkaller1: entered promiscuous mode [ 687.560916][T16392] syzkaller1: entered allmulticast mode [ 687.869144][T16401] netlink: 'syz.2.2723': attribute type 2 has an invalid length. [ 687.951951][T16401] !: entered promiscuous mode [ 688.540457][T16433] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.565813][T16433] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 688.577784][T16433] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 688.594889][T16433] __nla_validate_parse: 4 callbacks suppressed [ 688.594905][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 688.631631][T16433] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.666334][T16433] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 688.705021][T16433] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 688.764981][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 688.847546][T16453] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.857807][T16453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.874752][T10746] lo speed is unknown, defaulting to 1000 [ 688.881489][T10746] sqz0: Port: 1 Link ACTIVE [ 688.894949][T16457] netlink: 'syz.4.2733': attribute type 10 has an invalid length. [ 688.905759][T16454] bond2: entered promiscuous mode [ 688.920370][T10746] lo speed is unknown, defaulting to 1000 [ 688.942843][T16457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.953893][T16457] bond0: (slave wlan1): Opening slave failed [ 689.042847][T16469] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 689.219991][T16482] vlan3: entered allmulticast mode [ 689.225156][T16482] veth0_to_bond: entered allmulticast mode [ 689.276956][T16489] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.316614][T16484] netlink: 'syz.0.2743': attribute type 9 has an invalid length. [ 689.345876][T16489] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.395901][T16489] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.415375][T16495] netlink: 'syz.4.2747': attribute type 21 has an invalid length. [ 689.415820][T16494] netlink: 'syz.0.2746': attribute type 4 has an invalid length. [ 689.465489][T16489] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.543193][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.574655][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.618683][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.752765][ T48] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.866921][T16519] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 689.973205][T16525] netlink: 'syz.3.2754': attribute type 21 has an invalid length. [ 689.997086][T16525] netlink: 'syz.3.2754': attribute type 20 has an invalid length. [ 690.156820][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2758'. [ 690.505707][T16551] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2766'. [ 690.516192][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 690.651544][T16564] netlink: 'syz.1.2768': attribute type 18 has an invalid length. [ 690.659724][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 690.707103][T16566] vlan0: entered allmulticast mode [ 690.717528][T16566] veth0_to_bond: entered allmulticast mode [ 690.746564][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2770'. [ 690.863553][T16579] netlink: 'syz.2.2773': attribute type 22 has an invalid length. [ 691.015872][T16590] bridge8: entered promiscuous mode [ 691.102050][T16598] bridge9: entered promiscuous mode [ 691.129319][T16597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2776'. [ 691.208199][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'. [ 691.315063][T16614] macsec0: entered promiscuous mode [ 691.477395][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2786'. [ 692.731643][T16707] xt_hashlimit: overflow, rate too high: 0 [ 692.859158][T16719] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 693.285621][T16746] 8021q: adding VLAN 0 to HW filter on device bond7 [ 693.324156][T16751] netlink: 'syz.2.2821': attribute type 11 has an invalid length. [ 693.334445][T16751] validate_nla: 3 callbacks suppressed [ 693.334463][T16751] netlink: 'syz.2.2821': attribute type 23 has an invalid length. [ 693.475916][T16755] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.981625][T12526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.001813][T12526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.017624][T12526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.027081][T12526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.034946][T12526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.055864][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 694.064589][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 694.072079][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 694.081123][T12526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 694.088979][T12526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 694.181380][T16788] lo speed is unknown, defaulting to 1000 [ 694.770735][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.908123][T16788] wg1 speed is unknown, defaulting to 1000 [ 695.030733][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.138056][T16824] lo: Caught tx_queue_len zero misconfig [ 695.209471][T16833] lo speed is unknown, defaulting to 1000 [ 695.234763][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.268286][T16857] netlink: 'syz.0.2843': attribute type 7 has an invalid length. [ 695.269401][T16858] netlink: 'syz.0.2843': attribute type 7 has an invalid length. [ 695.314100][T16857] netlink: 'syz.0.2843': attribute type 8 has an invalid length. [ 695.336773][T16857] netlink: 'syz.0.2843': attribute type 8 has an invalid length. [ 695.360596][T16858] netlink: 'syz.0.2843': attribute type 8 has an invalid length. [ 695.394069][T16857] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 695.412285][T16858] netlink: 'syz.0.2843': attribute type 8 has an invalid length. [ 695.439107][T16857] netlink: 'syz.0.2843': attribute type 7 has an invalid length. [ 695.450340][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.479214][T16858] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 695.492298][T16857] __nla_validate_parse: 48 callbacks suppressed [ 695.492313][T16857] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.2843'. [ 695.529005][T16858] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.2843'. [ 695.649115][T16788] lo speed is unknown, defaulting to 1000 [ 696.188611][T12526] Bluetooth: hci5: command tx timeout [ 696.410600][ T5924] lo speed is unknown, defaulting to 1000 [ 696.416374][ T5924] syz2: Port: 1 Link DOWN [ 696.421377][T16871] lo speed is unknown, defaulting to 1000 [ 696.424050][T16833] wg1 speed is unknown, defaulting to 1000 [ 696.773457][ T48] dvmrp0: left allmulticast mode [ 698.238959][T12526] Bluetooth: hci5: command tx timeout [ 698.291082][ T48] bond1 (unregistering): (slave .`): Releasing active interface [ 698.325194][ T48] .` (unregistering): Released all slaves [ 698.338584][ T48] bond1 (unregistering): Released all slaves [ 698.356633][ T48] bond0 (unregistering): Released all slaves [ 698.374439][ T48] bond2 (unregistering): Released all slaves [ 698.489238][T16871] wg1 speed is unknown, defaulting to 1000 [ 698.503811][T16833] lo speed is unknown, defaulting to 1000 [ 698.670906][ T48] tipc: Disabling bearer [ 698.740822][ T48] tipc: Left network mode [ 698.804893][T16788] chnl_net:caif_netlink_parms(): no params data found [ 698.904570][ T48] IPVS: stopping backup sync thread 9950 ... [ 698.970269][T16939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.251719][T16841] Set syz1 is full, maxelem 65536 reached [ 699.314076][T16871] lo speed is unknown, defaulting to 1000 [ 699.371896][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.403492][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.728280][T16788] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.736535][T16788] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.747451][T16788] bridge_slave_0: entered allmulticast mode [ 699.767405][T16788] bridge_slave_0: entered promiscuous mode [ 699.837939][T16788] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.845654][T16788] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.853433][T16788] bridge_slave_1: entered allmulticast mode [ 699.887936][T16788] bridge_slave_1: entered promiscuous mode [ 700.026952][T16788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.128343][T16788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.329223][T12526] Bluetooth: hci5: command tx timeout [ 700.548401][T16788] team0: Port device team_slave_0 added [ 700.681922][T16788] team0: Port device team_slave_1 added [ 701.115941][T16788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.170650][T16788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.237726][T16788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.299834][T16788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.306810][T16788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.390087][T16788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.604969][T17023] validate_nla: 1 callbacks suppressed [ 701.604983][T17023] netlink: 'syz.2.2863': attribute type 21 has an invalid length. [ 701.629144][T17023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2863'. [ 701.675657][T17013] tipc: Enabled bearer , priority 0 [ 701.728116][T17023] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2863'. [ 701.749159][T16999] lo speed is unknown, defaulting to 1000 [ 701.756897][T17020] syzkaller0: entered promiscuous mode [ 701.763117][T17020] syzkaller0: entered allmulticast mode [ 701.786464][ T48] hsr_slave_0: left promiscuous mode [ 701.797896][ T48] hsr_slave_1: left promiscuous mode [ 701.889624][T17033] Unsupported ieee802154 address type: 0 [ 702.206212][T16995] tipc: Resetting bearer [ 702.222697][T16995] tipc: Disabling bearer [ 702.237107][T17016] lo speed is unknown, defaulting to 1000 [ 702.244639][T16999] wg1 speed is unknown, defaulting to 1000 [ 702.257988][T16788] hsr_slave_0: entered promiscuous mode [ 702.298144][T16788] hsr_slave_1: entered promiscuous mode [ 702.399528][T12526] Bluetooth: hci5: command tx timeout [ 702.511991][T17046] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 702.519558][T17046] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 702.529446][T17046] tipc: Resetting bearer [ 702.737012][T17052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2869'. [ 702.857841][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'. [ 702.951692][ T48] IPVS: stop unused estimator thread 0... [ 703.057947][T17016] wg1 speed is unknown, defaulting to 1000 [ 703.057961][T16999] lo speed is unknown, defaulting to 1000 [ 703.445300][T17074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2873'. [ 703.629655][T17016] lo speed is unknown, defaulting to 1000 [ 703.865861][T17089] lo speed is unknown, defaulting to 1000 [ 704.219467][T16788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 704.238368][T16788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 704.287301][T16788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 704.307717][T16788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 704.422473][T17089] wg1 speed is unknown, defaulting to 1000 [ 704.588253][T17124] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2880'. [ 704.784513][T17089] lo speed is unknown, defaulting to 1000 [ 705.110261][T16788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.210588][T16788] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.223978][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 705.273072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.280269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.289135][T17138] netlink: 'syz.4.2881': attribute type 30 has an invalid length. [ 705.309514][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2881'. [ 705.333882][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.341049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.390327][T17135] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 705.538740][T17138] bond14: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 705.564507][T17138] bond14 (unregistering): Released all slaves [ 706.071324][T17177] xt_hashlimit: max too large, truncated to 1048576 [ 706.125395][T16788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.250399][T16788] veth0_vlan: entered promiscuous mode [ 706.280666][T17186] netlink: 'syz.2.2889': attribute type 4 has an invalid length. [ 706.292162][T16788] veth1_vlan: entered promiscuous mode [ 706.327938][T17188] bond0: (slave syz_tun): Releasing backup interface [ 706.353596][T17187] netlink: 'syz.2.2889': attribute type 4 has an invalid length. [ 706.368794][T17188] bond0: (slave bond_slave_0): Releasing backup interface [ 706.401722][T17188] bond0: (slave bond_slave_1): Releasing backup interface [ 706.427151][T17188] team0: Port device team_slave_0 removed [ 706.445079][T17188] team0: Port device team_slave_1 removed [ 706.465927][T17188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.478744][T17188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.491429][T17188] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 706.541473][T17204] openvswitch: netlink: Actions may not be safe on all matching packets [ 706.606846][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 706.663546][T16788] veth0_macvtap: entered promiscuous mode [ 706.697883][T16788] veth1_macvtap: entered promiscuous mode [ 706.793943][T16788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.855974][T16788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.905552][ T137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.929217][ T137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.971655][ T137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.994103][T17232] netlink: 'syz.1.2895': attribute type 5 has an invalid length. [ 707.049682][ T137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.242223][ T7548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.264818][ T7548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.367402][ T7548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.407322][ T7548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.531965][T17260] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.632396][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2908'. [ 707.663229][T17262] lo speed is unknown, defaulting to 1000 [ 707.722681][T17272] bond14: entered promiscuous mode [ 707.913708][T17272] 8021q: adding VLAN 0 to HW filter on device bond14 [ 708.013343][T17268] bridge10: entered promiscuous mode [ 708.024051][T17268] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 708.047817][T17269] syzkaller1: entered promiscuous mode [ 708.054987][T17269] syzkaller1: entered allmulticast mode [ 708.080590][T17262] wg1 speed is unknown, defaulting to 1000 [ 708.089266][T17260] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.164961][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 708.183325][T17297] netlink: 'syz.4.2910': attribute type 1 has an invalid length. [ 708.198803][T17260] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.290381][T17260] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.390427][T17299] lo speed is unknown, defaulting to 1000 [ 708.436292][T17303] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2912'. [ 708.558924][ T7552] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.600842][T17262] lo speed is unknown, defaulting to 1000 [ 708.659874][ T7552] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.742234][ T7550] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.856392][ T48] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.882336][T17314] tipc: Enabling of bearer rejected, already enabled [ 709.018121][T17318] syzkaller0: entered promiscuous mode [ 709.078960][T17318] syzkaller0: entered allmulticast mode [ 709.117156][T17318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.391041][T17299] wg1 speed is unknown, defaulting to 1000 [ 709.766736][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 711.396294][T17299] lo speed is unknown, defaulting to 1000 [ 711.572475][T17375] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 711.961986][T17386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.202744][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2928'. [ 712.311196][T17403] netlink: 'syz.1.2929': attribute type 7 has an invalid length. [ 712.319612][T17403] netlink: 'syz.1.2929': attribute type 8 has an invalid length. [ 712.400976][T17406] SET target dimension over the limit! [ 712.529452][T17408] lo speed is unknown, defaulting to 1000 [ 712.605577][T17419] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2934'. [ 712.651624][T17420] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 712.901002][T17408] wg1 speed is unknown, defaulting to 1000 [ 713.070494][T17408] lo speed is unknown, defaulting to 1000 [ 713.171026][T17407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.609929][T17437] netlink: 'syz.4.2938': attribute type 4 has an invalid length. [ 713.660166][T17439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 713.858009][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 713.914472][T17452] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 713.950730][T17452] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2941'. [ 713.987577][T17452] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2941'. [ 714.007341][T17452] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 714.048566][T17452] netlink: 'syz.0.2941': attribute type 8 has an invalid length. [ 714.074208][T17461] netlink: 'syz.4.2943': attribute type 2 has an invalid length. [ 714.397712][T17484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2950'. [ 714.419027][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2950'. [ 714.722833][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'. [ 714.771765][T17496] lo speed is unknown, defaulting to 1000 [ 715.456447][T17496] wg1 speed is unknown, defaulting to 1000 [ 715.473982][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2960'. [ 715.778785][T17496] lo speed is unknown, defaulting to 1000 [ 716.533321][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2967'. [ 716.546461][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 716.569118][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 716.876877][T17557] netlink: 'syz.1.2970': attribute type 3 has an invalid length. [ 717.068414][T17533] delete_channel: no stack [ 717.405135][T17582] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 717.517470][T17586] lo speed is unknown, defaulting to 1000 [ 717.747731][T17598] pim6reg1: entered allmulticast mode [ 717.816269][T17586] wg1 speed is unknown, defaulting to 1000 [ 717.910226][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 717.922503][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 717.934052][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 717.944638][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 717.955106][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.001552][T17601] lo speed is unknown, defaulting to 1000 [ 718.498422][T17586] lo speed is unknown, defaulting to 1000 [ 718.499710][T17601] wg1 speed is unknown, defaulting to 1000 [ 719.055286][T17628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 719.168707][T17601] lo speed is unknown, defaulting to 1000 [ 719.180426][T17630] batman_adv: batadv0: Adding interface: dummy0 [ 719.200223][T17630] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.270476][T17630] batman_adv: batadv0: Interface activated: dummy0 [ 719.369503][T17630] batadv0: mtu less than device minimum [ 719.401816][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.413975][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.425643][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.437356][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.449133][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.460891][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.472533][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.484273][T17630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 719.605545][T17639] netem: change failed [ 719.937606][T17661] raw_sendmsg: syz.3.2997 forgot to set AF_INET. Fix it! [ 719.999030][ T5834] Bluetooth: hci3: command tx timeout [ 720.137764][T17668] __nla_validate_parse: 9 callbacks suppressed [ 720.137782][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 720.158986][T17675] delete_channel: no stack [ 720.175187][T17668] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3000'. [ 720.185628][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 720.196078][T17668] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3000'. [ 720.205501][T17668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'. [ 720.215721][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 720.227061][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 720.236546][T17677] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2999'. [ 720.267819][T17601] chnl_net:caif_netlink_parms(): no params data found [ 720.416417][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3004'. [ 720.488327][T17689] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3003'. [ 720.501175][T17601] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.508436][T17601] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.515805][T17601] bridge_slave_0: entered allmulticast mode [ 720.523849][T17601] bridge_slave_0: entered promiscuous mode [ 720.532639][T17601] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.540131][T17601] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.547477][T17601] bridge_slave_1: entered allmulticast mode [ 720.555424][T17601] bridge_slave_1: entered promiscuous mode [ 720.608702][T17601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.621949][T17601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.663175][T17601] team0: Port device team_slave_0 added [ 720.670130][T17691] syzkaller0: entered promiscuous mode [ 720.675771][T17691] syzkaller0: entered allmulticast mode [ 720.686859][T17601] team0: Port device team_slave_1 added [ 720.746384][T17601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.754751][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.782295][T17601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.815715][T17601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.823393][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.850038][T17601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.944067][T17601] hsr_slave_0: entered promiscuous mode [ 720.954753][T17601] hsr_slave_1: entered promiscuous mode [ 720.963060][T17601] debugfs: 'hsr0' already exists in 'hsr' [ 720.968960][T17601] Cannot create hsr debugfs directory [ 721.282427][ T24] IPVS: starting estimator thread 0... [ 721.291968][T17696] bridge_slave_1: left allmulticast mode [ 721.297640][T17696] bridge_slave_1: left promiscuous mode [ 721.307374][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.324011][T17696] bridge_slave_0: left allmulticast mode [ 721.331200][T17696] bridge_slave_0: left promiscuous mode [ 721.337119][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.379255][T17705] IPVS: using max 41 ests per chain, 98400 per kthread [ 721.486875][T17708] tun0: tun_chr_ioctl cmd 2148553947 [ 721.492656][T17708] tun0: tun_chr_ioctl cmd 1074025681 [ 721.809145][T17720] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 721.990967][T17724] sctp: [Deprecated]: syz.2.3013 (pid 17724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.990967][T17724] Use struct sctp_sack_info instead [ 722.043193][T17601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.079163][ T5834] Bluetooth: hci3: command tx timeout [ 722.089935][T17601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.125344][T17724] bridge0: entered allmulticast mode [ 722.143485][T17601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.173503][T17601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.597091][T17758] lo speed is unknown, defaulting to 1000 [ 722.597773][T17757] syzkaller0: entered promiscuous mode [ 722.610826][T17757] syzkaller0: entered allmulticast mode [ 722.671262][T17735] dvmrp0: entered allmulticast mode [ 722.721141][T17601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.790782][T17601] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.944140][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.951360][T12952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.967803][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.975050][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.987522][T17758] wg1 speed is unknown, defaulting to 1000 [ 722.996104][T17772] netlink: 'syz.0.3021': attribute type 21 has an invalid length. [ 723.012474][T17772] netlink: 'syz.0.3021': attribute type 3 has an invalid length. [ 723.316567][T17784] syz_tun: entered allmulticast mode [ 723.391419][T17601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.461040][T17758] lo speed is unknown, defaulting to 1000 [ 723.502845][T17601] veth0_vlan: entered promiscuous mode [ 723.573230][T17601] veth1_vlan: entered promiscuous mode [ 723.704772][T17601] veth0_macvtap: entered promiscuous mode [ 723.727888][T17601] veth1_macvtap: entered promiscuous mode [ 723.783228][T17601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.800412][T17601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.817522][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.841142][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.854075][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.878730][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.158950][ T5834] Bluetooth: hci3: command tx timeout [ 725.162059][T17735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.488734][T17820] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.506600][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.527308][T17828] __nla_validate_parse: 7 callbacks suppressed [ 725.527327][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 725.551632][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.586631][T17832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3031'. [ 725.595696][T17822] gretap4: entered promiscuous mode [ 725.725508][T17820] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.759055][T17817] lo speed is unknown, defaulting to 1000 [ 725.788207][T17820] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.833665][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.844128][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.920797][T17820] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.074354][T17845] atomic_op ffff888055b95198 conn xmit_atomic 0000000000000000 [ 726.156984][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.241552][ T5834] Bluetooth: hci3: command tx timeout [ 726.272543][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.345956][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.355916][T17848] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.363190][T17848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.438570][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.568921][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.601116][T17846] syzkaller1: entered promiscuous mode [ 726.606785][T17846] syzkaller1: entered allmulticast mode [ 726.702867][T12526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 726.717433][T17864] Unsupported ieee802154 address type: 0 [ 726.719421][T12526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 726.749482][T12526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 726.759816][T12526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 726.777129][T12526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 726.916872][T17825] lo speed is unknown, defaulting to 1000 [ 726.953493][T17817] wg1 speed is unknown, defaulting to 1000 [ 727.051099][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 727.246390][T17873] netlink: 'syz.2.3038': attribute type 16 has an invalid length. [ 727.256847][T17873] netlink: 'syz.2.3038': attribute type 17 has an invalid length. [ 727.323600][T10745] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 727.555585][T17862] lo speed is unknown, defaulting to 1000 [ 727.785984][T17825] wg1 speed is unknown, defaulting to 1000 [ 727.821420][T17817] lo speed is unknown, defaulting to 1000 [ 728.091400][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 728.105999][ T12] net_ratelimit: 13 callbacks suppressed [ 728.106017][ T12] batadv0: mtu less than device minimum [ 728.122698][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.134864][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.146715][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.158520][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.170302][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.182089][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.193927][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.205725][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.217563][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.268031][T10749] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 728.439875][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 728.525044][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 728.533337][ T12] bridge1 (unregistering): left promiscuous mode [ 728.542677][ T12] bridge1 (unregistering): left allmulticast mode [ 728.799246][T12526] Bluetooth: hci2: command tx timeout [ 728.853177][ T12] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 728.861400][ T12] bridge7 (unregistering): left promiscuous mode [ 728.942590][ T12] bond1 (unregistering): Released all slaves [ 728.958507][ T12] bond2 (unregistering): Released all slaves [ 728.975806][ T12] bond3 (unregistering): Released all slaves [ 728.991255][ T12] bond4 (unregistering): Released all slaves [ 729.005244][ T12] bond5 (unregistering): Released all slaves [ 729.020183][ T12] bond0 (unregistering): Released all slaves [ 729.036567][ T12] bond6 (unregistering): Released all slaves [ 729.051575][ T12] bond7 (unregistering): Released all slaves [ 729.074325][ T12] bond8 (unregistering): Released all slaves [ 729.089932][ T12] bond9 (unregistering): Released all slaves [ 729.102747][T17899] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 729.127935][T17906] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3051'. [ 729.193461][T17862] wg1 speed is unknown, defaulting to 1000 [ 729.199778][T17825] lo speed is unknown, defaulting to 1000 [ 729.315996][ T12] m1Ie5nè‹Ò: left promiscuous mode [ 729.612171][ T12] : left promiscuous mode [ 729.693895][T17938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3056'. [ 729.725448][T17943] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 729.737711][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3056'. [ 729.769496][ T12] : left promiscuous mode [ 729.851083][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'. [ 729.860611][ T12] tipc: Disabling bearer [ 729.871122][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 729.928976][ T12] tipc: Left network mode [ 729.996257][T17862] lo speed is unknown, defaulting to 1000 [ 730.032221][ T12] IPVS: stopping master sync thread 8649 ... [ 730.484570][T17973] syzkaller1: entered promiscuous mode [ 730.512505][T17973] syzkaller1: entered allmulticast mode [ 730.713658][T17985] xt_hashlimit: size too large, truncated to 1048576 [ 730.790603][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3067'. [ 730.849802][T17988] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 730.878926][T12526] Bluetooth: hci2: command tx timeout [ 730.891596][T17989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3068'. [ 730.931390][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.006730][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.017544][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.027506][T17989] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.037596][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.048093][T17989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3068'. [ 731.279983][T17999] netlink: 'syz.4.3070': attribute type 322 has an invalid length. [ 731.379605][T18003] netlink: 'syz.1.3072': attribute type 1 has an invalid length. [ 731.409802][T18003] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3072'. [ 731.617373][T18017] ip6tnl6: entered promiscuous mode [ 731.671015][T18017] ip6tnl6: entered allmulticast mode [ 731.839083][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 732.306107][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 732.958889][T12526] Bluetooth: hci2: command tx timeout [ 734.325378][T18039] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 734.346747][T18039] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 734.359044][T18039] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 734.381768][T17862] chnl_net:caif_netlink_parms(): no params data found [ 734.617186][T18054] net_ratelimit: 11 callbacks suppressed [ 734.617204][T18054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.697061][T18057] netlink: 'syz.2.3082': attribute type 15 has an invalid length. [ 734.826092][T18072] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 734.839818][T18072] netlink: 'syz.3.3080': attribute type 10 has an invalid length. [ 734.907329][T18076] netlink: 'syz.3.3080': attribute type 13 has an invalid length. [ 735.040619][T12526] Bluetooth: hci2: command tx timeout [ 735.144286][T18072] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 735.269580][T18080] Cannot find add_set index 0 as target [ 735.319128][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.342815][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.367882][T17862] bridge_slave_0: entered allmulticast mode [ 735.376935][T17862] bridge_slave_0: entered promiscuous mode [ 735.400243][ T12] hsr_slave_0: left promiscuous mode [ 735.407459][ T12] hsr_slave_1: left promiscuous mode [ 735.420387][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 735.431725][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 735.453708][ T12] macsec0: left promiscuous mode [ 735.608165][T18109] netlink: 'syz.4.3089': attribute type 61 has an invalid length. [ 735.874568][T18116] __nla_validate_parse: 4 callbacks suppressed [ 735.874588][T18116] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3090'. [ 736.082165][ T7552] smc: removing ib device sqz0 [ 736.164086][T18094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.235782][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.251250][T17862] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.286147][T17862] bridge_slave_1: entered allmulticast mode [ 736.305136][T17862] bridge_slave_1: entered promiscuous mode [ 736.323038][ T5910] lo speed is unknown, defaulting to 1000 [ 736.337335][ T5910] sqz0: Port: 1 Link DOWN [ 736.591914][T18094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.751093][T18113] wg1 speed is unknown, defaulting to 1000 [ 736.760458][T18138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3096'. [ 736.781852][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.929693][T18094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.012026][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.191122][T18094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.240737][T17862] team0: Port device team_slave_0 added [ 737.270497][T17862] team0: Port device team_slave_1 added [ 737.358090][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.372005][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.428994][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.458722][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.478931][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.562045][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.653625][T18113] lo speed is unknown, defaulting to 1000 [ 737.681497][T18149] siw: device registration error -23 [ 737.977355][T18172] netlink: 'syz.3.3103': attribute type 1 has an invalid length. [ 738.010998][T17862] hsr_slave_0: entered promiscuous mode [ 738.039454][T17862] hsr_slave_1: entered promiscuous mode [ 738.054699][T17862] debugfs: 'hsr0' already exists in 'hsr' [ 738.077941][T17862] Cannot create hsr debugfs directory [ 738.608229][ T137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.665409][T17011] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.801953][T17011] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.842133][T18202] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 738.948471][T17011] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.096491][ T12] IPVS: stop unused estimator thread 0... [ 739.392375][T18217] wg1 speed is unknown, defaulting to 1000 [ 739.714242][T18217] lo speed is unknown, defaulting to 1000 [ 739.926056][T18240] netlink: 'syz.4.3113': attribute type 13 has an invalid length. [ 739.941986][T18239] syzkaller0: entered promiscuous mode [ 739.948192][T18239] syzkaller0: entered allmulticast mode [ 739.958781][T18239] 0: reclassify loop, rule prio 0, protocol 800 [ 740.558420][T17862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 740.616644][T18264] syzkaller1: entered promiscuous mode [ 740.630999][T18264] syzkaller1: entered allmulticast mode [ 740.644537][T17862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 740.782575][T17862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 740.794959][T18291] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 740.819099][T18291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3125'. [ 740.865388][T17862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 741.257107][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 741.270865][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 741.509818][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.602336][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.638173][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.645368][T17011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.698111][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.705322][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.740396][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3131'. [ 741.755137][T18325] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3130'. [ 741.798631][T18324] nbd: must specify a size in bytes for the device [ 742.121269][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 742.485397][T18346] wg1 speed is unknown, defaulting to 1000 [ 742.494843][T18349] x_tables: duplicate underflow at hook 1 [ 742.521378][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.716656][T17862] veth0_vlan: entered promiscuous mode [ 742.761245][T17862] veth1_vlan: entered promiscuous mode [ 742.796859][T18365] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3139'. [ 742.853425][T18346] lo speed is unknown, defaulting to 1000 [ 743.001764][T17862] veth0_macvtap: entered promiscuous mode [ 743.036752][T18377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3140'. [ 743.073541][T18377] sctp: [Deprecated]: syz.2.3140 (pid 18377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 743.073541][T18377] Use struct sctp_sack_info instead [ 743.074827][T17862] veth1_macvtap: entered promiscuous mode [ 743.268358][T18392] xt_hashlimit: size too large, truncated to 1048576 [ 743.424185][T18400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.427097][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.527411][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.575456][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.605265][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.694643][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.720068][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.757859][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3150'. [ 743.929754][T18424] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3152'. [ 744.029985][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.074659][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.167533][T18430] syzkaller1: entered promiscuous mode [ 744.173206][T18430] syzkaller1: entered allmulticast mode [ 744.364036][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.373303][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.658683][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3157'. [ 744.949348][T18462] ip6erspan1: entered allmulticast mode [ 745.011048][T18469] x_tables: duplicate underflow at hook 2 [ 745.393171][T18479] netlink: 'syz.3.3163': attribute type 4 has an invalid length. [ 745.451394][T18479] x_tables: unsorted underflow at hook 4 [ 745.568613][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 745.587655][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 745.599463][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 745.619815][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 745.627424][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 745.740068][T18490] wg1 speed is unknown, defaulting to 1000 [ 746.073097][ T5818] syz_tun (unregistering): left allmulticast mode [ 746.272861][T12953] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.327077][T18519] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 746.340138][T18519] bond2 (unregistering): Released all slaves [ 746.403965][T18531] Bluetooth: MGMT ver 1.23 [ 746.453434][T12953] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.514255][T18490] lo speed is unknown, defaulting to 1000 [ 746.598029][T12953] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.763579][T12953] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.844844][T18537] wg1 speed is unknown, defaulting to 1000 [ 746.888090][ T5934] wg1 speed is unknown, defaulting to 1000 [ 746.897149][ T5934] syz0: Port: 1 Link DOWN [ 746.917173][ T5924] wg1 speed is unknown, defaulting to 1000 [ 746.942414][T18560] __nla_validate_parse: 1 callbacks suppressed [ 746.942441][T18560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'. [ 746.959392][T18560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3180'. [ 747.205807][T18566] geneve1: Caught tx_queue_len zero misconfig [ 747.679348][ T5834] Bluetooth: hci4: command tx timeout [ 747.917469][T12953] bond2 (unregistering): (slave gretap1): Releasing active interface [ 748.038761][T12953] bridge0 (unregistering): left promiscuous mode [ 748.290663][T12953] team0: Port device bond0 removed [ 748.296672][T12953] bond0 (unregistering): Released all slaves [ 748.306678][T12953] bond1 (unregistering): Released all slaves [ 748.320519][T12953] bond2 (unregistering): Released all slaves [ 748.333405][T12953] bond3 (unregistering): Released all slaves [ 748.349477][T12953] bond4 (unregistering): Released all slaves [ 748.365069][T12953] bond5 (unregistering): Released all slaves [ 748.382484][T12953] bond6 (unregistering): Released all slaves [ 748.395009][T12953] bond7 (unregistering): Released all slaves [ 748.410937][T12953] bond8 (unregistering): (slave veth13): Releasing active interface [ 748.426862][T12953] bond8 (unregistering): (slave dummy0): Releasing active interface [ 748.439278][T12953] bond8 (unregistering): Released all slaves [ 748.451962][T12953] bond9 (unregistering): Released all slaves [ 748.464170][T12953] bond10 (unregistering): Released all slaves [ 748.476651][T12953] bond11 (unregistering): Released all slaves [ 748.494840][T18490] chnl_net:caif_netlink_parms(): no params data found [ 748.524832][T18541] dvmrp0: entered allmulticast mode [ 748.546231][T18537] lo speed is unknown, defaulting to 1000 [ 748.567454][T18600] sit5: entered allmulticast mode [ 748.686504][T12953] : left promiscuous mode [ 748.781678][T12953] m1Ie5èÿá: left promiscuous mode [ 748.801021][T18613] sctp: [Deprecated]: syz.1.3188 (pid 18613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.801021][T18613] Use struct sctp_sack_info instead [ 748.913797][T12953] !: left promiscuous mode [ 748.963929][T18490] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.014182][T18490] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.031353][T18490] bridge_slave_0: entered allmulticast mode [ 749.060734][T18490] bridge_slave_0: entered promiscuous mode [ 749.149236][T12953] tipc: Disabling bearer [ 749.159866][T18490] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.167447][T12953] tipc: Left network mode [ 749.183290][T18490] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.199944][T18490] bridge_slave_1: entered allmulticast mode [ 749.219684][T18490] bridge_slave_1: entered promiscuous mode [ 749.346030][T18490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.370090][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3196'. [ 749.404546][T18490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.706084][T18490] team0: Port device team_slave_0 added [ 749.745268][T18490] team0: Port device team_slave_1 added [ 749.759494][ T5834] Bluetooth: hci4: command tx timeout [ 749.943695][T18490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.959164][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.999502][T18490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.012319][T18490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.019369][T18490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.055297][T18683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3202'. [ 750.066687][T18490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.153581][T10745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 750.179241][T18686] block nbd1: not configured, cannot reconfigure [ 750.324867][T18490] hsr_slave_0: entered promiscuous mode [ 750.347502][T18490] hsr_slave_1: entered promiscuous mode [ 750.368210][T18490] debugfs: 'hsr0' already exists in 'hsr' [ 750.637847][T18490] Cannot create hsr debugfs directory [ 750.674973][ T7550] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 750.778662][T17011] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.833129][T17011] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.864598][T17011] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.926808][T18721] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3209'. [ 750.967771][T17011] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.979924][T18724] netlink: 'syz.1.3211': attribute type 11 has an invalid length. [ 751.122554][T10745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 751.326881][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'. [ 751.457719][T18752] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3216'. [ 751.479508][T18726] macvtap0: entered promiscuous mode [ 751.513716][T18726] virtio_net virtio1 eth0: entered promiscuous mode [ 751.525652][T18726] macvtap0: entered allmulticast mode [ 751.557813][T18726] virtio_net virtio1 eth0: entered allmulticast mode [ 751.640803][T18743] netlink: 'syz.4.3215': attribute type 4 has an invalid length. [ 751.657480][T18752] .70·: renamed from hsr0 (while UP) [ 751.682360][T18752] .70·: entered allmulticast mode [ 751.713378][T18752] hsr_slave_0: entered allmulticast mode [ 751.729323][T18752] hsr_slave_1: entered allmulticast mode [ 751.735990][T18752] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 751.842777][ T5834] Bluetooth: hci4: command tx timeout [ 752.018705][T18768] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 752.147108][T18777] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3222'. [ 752.202713][T12952] smc: removing ib device syz0 [ 752.325505][ T7552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.340194][ T7552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.355484][T18780] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 752.397019][T18781] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 752.409003][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 752.425433][T18783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3223'. [ 752.677355][T18792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3225'. [ 752.733059][T18766] lo speed is unknown, defaulting to 1000 [ 752.776942][T18788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.202163][ T5924] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 753.918979][ T5834] Bluetooth: hci4: command tx timeout [ 753.923119][T10746] IPVS: starting estimator thread 0... [ 754.031186][T18838] IPVS: using max 38 ests per chain, 91200 per kthread [ 754.173252][T18490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 754.276921][T18490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 754.341673][T18490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 754.362515][T18490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 754.386977][T18851] netlink: 'syz.4.3237': attribute type 16 has an invalid length. [ 754.395719][T18851] netlink: 'syz.4.3237': attribute type 17 has an invalid length. [ 754.521625][T18851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.530584][T18851] dummy0: left promiscuous mode [ 754.540989][T18851] caif0: left allmulticast mode [ 754.549306][T18851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.573382][T10746] lo speed is unknown, defaulting to 1000 [ 754.585617][T10746] syz2: Port: 1 Link ACTIVE [ 754.590366][T18847] lo speed is unknown, defaulting to 1000 [ 754.611655][T18848] lo speed is unknown, defaulting to 1000 [ 754.822643][T18490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.848537][T18490] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.857875][T12953] IPVS: stop unused estimator thread 0... [ 754.893075][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.900292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.936132][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.943342][T17011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.113317][T18877] netlink: 'syz.1.3239': attribute type 10 has an invalid length. [ 755.165841][T18877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 755.171194][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 755.232159][T18887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3240'. [ 755.459639][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 755.501890][T18900] veth1_macvtap: left promiscuous mode [ 755.577580][T18908] tipc: Started in network mode [ 755.587914][T18913] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 755.601176][T18908] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 755.635393][T18908] tipc: Enabled bearer , priority 26 [ 755.641738][T18913] netlink: 'syz.1.3247': attribute type 2 has an invalid length. [ 755.674161][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 755.675429][T18908] xt_TCPMSS: Only works on TCP SYN packets [ 755.725903][T18490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.806025][T18919] dummy0: Caught tx_queue_len zero misconfig [ 755.918017][T18490] veth0_vlan: entered promiscuous mode [ 755.962241][T18490] veth1_vlan: entered promiscuous mode [ 756.043188][T18490] veth0_macvtap: entered promiscuous mode [ 756.080110][T18490] veth1_macvtap: entered promiscuous mode [ 756.161422][T18490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.187123][T18935] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 756.218213][T18490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.246899][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3251'. [ 756.275805][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3251'. [ 756.294362][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.307612][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.323314][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.346203][T18945] 8021q: VLANs not supported on ipvlan1 [ 756.375095][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.671327][T18956] tunl0: Caught tx_queue_len zero misconfig [ 756.714543][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.767265][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.811595][T10749] tipc: Node number set to 4269801492 [ 756.843644][T18961] netlink: 'syz.0.3255': attribute type 2 has an invalid length. [ 756.936474][T18961] ÃM¯”ÛÓó: entered promiscuous mode [ 757.054095][T12953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.070676][T12953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.159690][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 757.197641][T18978] vlan2: entered promiscuous mode [ 757.241784][T18978] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 757.561383][T19002] x_tables: duplicate underflow at hook 2 [ 757.769937][T19008] netlink: 'syz.1.3264': attribute type 4 has an invalid length. [ 757.798079][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 757.817047][T19013] netlink: 'syz.0.3266': attribute type 3 has an invalid length. [ 757.849491][T19013] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3266'. [ 758.100061][T12526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 758.111996][T12526] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 758.120532][T12526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 758.132091][T12526] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 758.142880][T12526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 758.489708][T19036] netlink: 'syz.3.3271': attribute type 10 has an invalid length. [ 758.533443][T17011] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 758.554190][T17011] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 758.563828][T17011] bridge1 (unregistering): left promiscuous mode [ 758.574005][T17011] bridge1 (unregistering): left allmulticast mode [ 758.823003][T17011] bond0 (unregistering): Released all slaves [ 758.836005][T17011] bond1 (unregistering): Released all slaves [ 758.853139][T17011] bond2 (unregistering): Released all slaves [ 758.871405][T17011] bond3 (unregistering): (slave veth7): Releasing active interface [ 758.894209][T17011] bond3 (unregistering): Released all slaves [ 758.911082][T17011] bond4 (unregistering): Released all slaves [ 758.928095][T17011] bond5 (unregistering): Released all slaves [ 758.954497][T17011] bond6 (unregistering): Released all slaves [ 758.972946][T17011] bond7 (unregistering): Released all slaves [ 758.998368][T19009] batadv0: entered promiscuous mode [ 759.010049][T19009] batadv_slave_0: entered promiscuous mode [ 759.016268][T19009] batadv_slave_0: left promiscuous mode [ 759.024324][T19009] batadv0: left promiscuous mode [ 759.077941][T19036] team0: Device veth1_macvtap failed to register rx_handler [ 759.169333][T17011] hmac(sha224: left promiscuous mode [ 759.247468][T19019] lo speed is unknown, defaulting to 1000 [ 759.342765][T19066] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3276'. [ 759.355812][T19063] bond1: entered promiscuous mode [ 759.385799][T17011] tipc: Left network mode [ 759.543677][T17011] IPVS: stopping backup sync thread 14832 ... [ 760.135415][T19019] chnl_net:caif_netlink_parms(): no params data found [ 760.241029][T12526] Bluetooth: hci0: command tx timeout [ 760.329292][T19019] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.351338][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.376591][T19019] bridge_slave_0: entered allmulticast mode [ 760.387318][T19019] bridge_slave_0: entered promiscuous mode [ 760.456383][T19019] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.464052][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.471751][T19019] bridge_slave_1: entered allmulticast mode [ 760.484377][T19019] bridge_slave_1: entered promiscuous mode [ 760.546878][T19019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.595094][T19019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.731491][T19019] team0: Port device team_slave_0 added [ 760.747781][T19019] team0: Port device team_slave_1 added [ 760.769484][T19120] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3291'. [ 760.807580][T19019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.815584][T19108] [ 760.817927][T19108] ====================================================== [ 760.824930][T19108] WARNING: possible circular locking dependency detected [ 760.831968][T19108] syzkaller #0 Not tainted [ 760.836390][T19108] ------------------------------------------------------ [ 760.843407][T19108] syz.3.3286/19108 is trying to acquire lock: [ 760.849478][T19108] ffffffff8e85f168 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 760.859055][T19108] [ 760.859055][T19108] but task is already holding lock: [ 760.866405][T19108] ffff888026c83990 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 760.876792][T19108] [ 760.876792][T19108] which lock already depends on the new lock. [ 760.876792][T19108] [ 760.887188][T19108] [ 760.887188][T19108] the existing dependency chain (in reverse order) is: [ 760.896198][T19108] [ 760.896198][T19108] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 760.904816][T19108] blk_alloc_queue+0x546/0x680 [ 760.910259][T19108] __blk_mq_alloc_disk+0x197/0x390 [ 760.916043][T19108] nbd_dev_add+0x499/0xb50 [ 760.920985][T19108] nbd_init+0x168/0x1f0 [ 760.925657][T19108] do_one_initcall+0x250/0x8d0 [ 760.930939][T19108] do_initcall_level+0x104/0x190 [ 760.936389][T19108] do_initcalls+0x59/0xa0 [ 760.941227][T19108] kernel_init_freeable+0x2a6/0x3e0 [ 760.946954][T19108] kernel_init+0x1d/0x1d0 [ 760.951868][T19108] ret_from_fork+0x51e/0xb90 [ 760.956978][T19108] ret_from_fork_asm+0x1a/0x30 [ 760.962275][T19108] [ 760.962275][T19108] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 760.969495][T19108] fs_reclaim_acquire+0x71/0x100 [ 760.974962][T19108] prepare_alloc_pages+0x152/0x650 [ 760.980601][T19108] __alloc_frozen_pages_noprof+0x12f/0x380 [ 760.986943][T19108] __alloc_pages_noprof+0xa/0x30 [ 760.992402][T19108] pcpu_populate_chunk+0x182/0xb30 [ 760.998029][T19108] pcpu_alloc_noprof+0xc6c/0x19c0 [ 761.003565][T19108] xt_percpu_counter_alloc+0x161/0x220 [ 761.009636][T19108] translate_table+0x134a/0x2110 [ 761.015169][T19108] ipt_register_table+0x11b/0x7f0 [ 761.021285][T19108] iptable_raw_table_init+0x54/0x80 [ 761.027011][T19108] xt_find_table_lock+0x30c/0x3e0 [ 761.032649][T19108] xt_request_find_table_lock+0x26/0x100 [ 761.038806][T19108] do_ipt_get_ctl+0x716/0x1240 [ 761.044093][T19108] nf_getsockopt+0x26e/0x290 [ 761.049275][T19108] ip_getsockopt+0x19e/0x230 [ 761.054429][T19108] do_sock_getsockopt+0x2d3/0x3f0 [ 761.059971][T19108] __x64_sys_getsockopt+0x1a4/0x240 [ 761.065700][T19108] do_syscall_64+0x14d/0xf80 [ 761.070801][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.077207][T19108] [ 761.077207][T19108] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 761.084935][T19108] __lock_acquire+0x15a5/0x2cf0 [ 761.090339][T19108] lock_acquire+0xf0/0x2e0 [ 761.095285][T19108] __mutex_lock+0x19f/0x1300 [ 761.100411][T19108] pcpu_alloc_noprof+0x218/0x19c0 [ 761.105953][T19108] sbitmap_init_node+0x1e1/0x640 [ 761.111523][T19108] sbitmap_queue_init_node+0x3e/0x4d0 [ 761.117441][T19108] blk_mq_init_tags+0x15c/0x2d0 [ 761.122828][T19108] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 761.128815][T19108] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 761.135143][T19108] nbd_start_device+0x17f/0xb10 [ 761.140514][T19108] nbd_genl_connect+0x165b/0x1cf0 [ 761.146062][T19108] genl_family_rcv_msg_doit+0x22a/0x330 [ 761.152190][T19108] genl_rcv_msg+0x61c/0x7a0 [ 761.157206][T19108] netlink_rcv_skb+0x232/0x4b0 [ 761.162485][T19108] genl_rcv+0x28/0x40 [ 761.166972][T19108] netlink_unicast+0x80f/0x9b0 [ 761.172254][T19108] netlink_sendmsg+0x813/0xb40 [ 761.177542][T19108] ____sys_sendmsg+0x972/0x9f0 [ 761.182830][T19108] ___sys_sendmsg+0x2a5/0x360 [ 761.188025][T19108] __x64_sys_sendmsg+0x1bd/0x2a0 [ 761.193475][T19108] do_syscall_64+0x14d/0xf80 [ 761.198577][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.204981][T19108] [ 761.204981][T19108] other info that might help us debug this: [ 761.204981][T19108] [ 761.215196][T19108] Chain exists of: [ 761.215196][T19108] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 761.215196][T19108] [ 761.228840][T19108] Possible unsafe locking scenario: [ 761.228840][T19108] [ 761.236273][T19108] CPU0 CPU1 [ 761.241624][T19108] ---- ---- [ 761.246973][T19108] lock(&q->q_usage_counter(io)#49); [ 761.252339][T19108] lock(fs_reclaim); [ 761.258829][T19108] lock(&q->q_usage_counter(io)#49); [ 761.266719][T19108] lock(pcpu_alloc_mutex); [ 761.271211][T19108] [ 761.271211][T19108] *** DEADLOCK *** [ 761.271211][T19108] [ 761.279342][T19108] 6 locks held by syz.3.3286/19108: [ 761.284605][T19108] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 761.292807][T19108] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 761.301761][T19108] #2: ffff8880267eb1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 761.313158][T19108] #3: ffff8880267eb0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 761.324116][T19108] #4: ffff888026c83990 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 761.334835][T19108] #5: ffff888026c839c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 761.345822][T19108] [ 761.345822][T19108] stack backtrace: [ 761.351704][T19108] CPU: 0 UID: 0 PID: 19108 Comm: syz.3.3286 Not tainted syzkaller #0 PREEMPT(full) [ 761.351725][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.351736][T19108] Call Trace: [ 761.351743][T19108] [ 761.351750][T19108] dump_stack_lvl+0xe8/0x150 [ 761.351774][T19108] print_circular_bug+0x2e1/0x300 [ 761.351800][T19108] check_noncircular+0x12e/0x150 [ 761.351825][T19108] __lock_acquire+0x15a5/0x2cf0 [ 761.351853][T19108] lock_acquire+0xf0/0x2e0 [ 761.351871][T19108] ? pcpu_alloc_noprof+0x218/0x19c0 [ 761.351892][T19108] __mutex_lock+0x19f/0x1300 [ 761.351907][T19108] ? pcpu_alloc_noprof+0x218/0x19c0 [ 761.351924][T19108] ? stack_depot_save_flags+0x3f3/0x810 [ 761.351947][T19108] ? kasan_save_track+0x4f/0x80 [ 761.351963][T19108] ? kasan_save_track+0x3e/0x80 [ 761.351977][T19108] ? pcpu_alloc_noprof+0x218/0x19c0 [ 761.351993][T19108] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 761.352010][T19108] ? blk_mq_init_tags+0x83/0x2d0 [ 761.352031][T19108] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 761.352047][T19108] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 761.352066][T19108] ? __pfx___mutex_lock+0x10/0x10 [ 761.352080][T19108] ? genl_rcv+0x28/0x40 [ 761.352095][T19108] ? ____sys_sendmsg+0x972/0x9f0 [ 761.352108][T19108] ? ___sys_sendmsg+0x2a5/0x360 [ 761.352127][T19108] pcpu_alloc_noprof+0x218/0x19c0 [ 761.352150][T19108] sbitmap_init_node+0x1e1/0x640 [ 761.352176][T19108] sbitmap_queue_init_node+0x3e/0x4d0 [ 761.352201][T19108] blk_mq_init_tags+0x15c/0x2d0 [ 761.352224][T19108] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 761.352247][T19108] ? kfree+0x1c1/0x630 [ 761.352259][T19108] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 761.352279][T19108] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 761.352304][T19108] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 761.352325][T19108] ? sysfs_add_file_mode_ns+0x259/0x300 [ 761.352347][T19108] nbd_start_device+0x17f/0xb10 [ 761.352373][T19108] ? device_create_file+0xf4/0x1b0 [ 761.352451][T19108] nbd_genl_connect+0x165b/0x1cf0 [ 761.352478][T19108] ? __pfx_nbd_genl_connect+0x10/0x10 [ 761.352502][T19108] ? rcu_is_watching+0x15/0xb0 [ 761.352526][T19108] ? __nla_parse+0x40/0x60 [ 761.352579][T19108] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 761.352598][T19108] genl_family_rcv_msg_doit+0x22a/0x330 [ 761.352616][T19108] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 761.352637][T19108] ? __lock_acquire+0x6b5/0x2cf0 [ 761.352658][T19108] genl_rcv_msg+0x61c/0x7a0 [ 761.352674][T19108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.352689][T19108] ? __pfx_nbd_genl_connect+0x10/0x10 [ 761.352711][T19108] ? __lock_acquire+0x6b5/0x2cf0 [ 761.352734][T19108] netlink_rcv_skb+0x232/0x4b0 [ 761.352755][T19108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 761.352770][T19108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.352795][T19108] ? down_read+0x272/0x2e0 [ 761.352810][T19108] ? genl_rcv+0xd/0x40 [ 761.352824][T19108] genl_rcv+0x28/0x40 [ 761.352837][T19108] netlink_unicast+0x80f/0x9b0 [ 761.352858][T19108] ? __pfx_netlink_unicast+0x10/0x10 [ 761.352876][T19108] ? netlink_sendmsg+0x650/0xb40 [ 761.352896][T19108] ? skb_put+0x11b/0x210 [ 761.352976][T19108] netlink_sendmsg+0x813/0xb40 [ 761.353000][T19108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.353022][T19108] ? aa_sock_msg_perm+0xf1/0x1b0 [ 761.353042][T19108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 761.353062][T19108] ____sys_sendmsg+0x972/0x9f0 [ 761.353076][T19108] ? futex_unqueue+0x211/0x240 [ 761.353095][T19108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.353113][T19108] ? import_iovec+0x73/0xa0 [ 761.353181][T19108] ___sys_sendmsg+0x2a5/0x360 [ 761.353194][T19108] ? try_to_wake_up+0x7fc/0x1390 [ 761.353211][T19108] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.353227][T19108] ? futex_wait+0x29a/0x380 [ 761.353264][T19108] ? call_rcu+0x644/0x890 [ 761.353289][T19108] __x64_sys_sendmsg+0x1bd/0x2a0 [ 761.353305][T19108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 761.353322][T19108] ? rcu_is_watching+0x15/0xb0 [ 761.353347][T19108] do_syscall_64+0x14d/0xf80 [ 761.353362][T19108] ? trace_irq_disable+0x3b/0x150 [ 761.353385][T19108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.353400][T19108] ? clear_bhb_loop+0x40/0x90 [ 761.353424][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.353440][T19108] RIP: 0033:0x7fec2f39c799 [ 761.353455][T19108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.353470][T19108] RSP: 002b:00007fec30273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.353487][T19108] RAX: ffffffffffffffda RBX: 00007fec2f615fa0 RCX: 00007fec2f39c799 [ 761.353499][T19108] RDX: 0000000000004840 RSI: 00002000000027c0 RDI: 0000000000000009 [ 761.353510][T19108] RBP: 00007fec2f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 761.353520][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.353530][T19108] R13: 00007fec2f616038 R14: 00007fec2f615fa0 R15: 00007ffdda48f3d8 [ 761.353548][T19108] [ 761.368269][T19019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.588969][T12526] block nbd0: Receive control failed (result -22) [ 761.592541][ T5834] block nbd0: Receive control failed (result -22) [ 761.688869][T19019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.933633][T19108] nbd0: detected capacity change from 0 to 32 [ 761.963020][T11993] block nbd0: Dead connection, failed to find a fallback [ 761.970155][T11993] block nbd0: shutting down sockets [ 761.975448][T11993] blk_print_req_error: 138 callbacks suppressed [ 761.975466][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.008911][T11993] buffer_io_error: 138 callbacks suppressed [ 762.008929][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.039016][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.048523][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.075808][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.113033][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.148904][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.170241][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.178467][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.208961][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.239794][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.272289][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.301062][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.327371][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.328831][ T5834] Bluetooth: hci0: command tx timeout [ 762.340802][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.351070][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.358900][T11993] ldm_validate_partition_table(): Disk read failed. [ 762.365994][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.375580][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.383472][T11993] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 762.392994][T11993] Buffer I/O error on dev nbd0, logical block 0, async page read [ 762.401090][T11993] Dev nbd0: unable to read RDB block 0 [ 762.413522][T11993] nbd0: unable to read partition table [ 762.448425][T11993] ldm_validate_partition_table(): Disk read failed. [ 762.467347][T11993] Dev nbd0: unable to read RDB block 0 [ 762.473399][T11993] nbd0: unable to read partition table [ 762.571750][T17011] hsr_slave_1: left promiscuous mode [ 763.175768][T17011] IPVS: stop unused estimator thread 0... [ 763.285296][T17011] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.295511][T17011] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.342575][T17011] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.352385][T17011] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.391129][T17011] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.400922][T17011] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.431205][T17011] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.441083][T17011] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.538870][T17011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.594720][T17011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.649893][T17011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.703757][T17011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.824291][T17011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.891710][T17011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.924672][T17011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.987493][T17011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.317987][T17011] bridge_slave_1: left allmulticast mode [ 764.323821][T17011] bridge_slave_1: left promiscuous mode [ 764.330280][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.340239][T17011] bridge_slave_0: left allmulticast mode [ 764.345930][T17011] bridge_slave_0: left promiscuous mode [ 764.353779][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.363612][T17011] bridge_slave_1: left allmulticast mode [ 764.369379][T17011] bridge_slave_1: left promiscuous mode [ 764.375147][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.384162][T17011] bridge_slave_0: left allmulticast mode [ 764.389974][T17011] bridge_slave_0: left promiscuous mode [ 764.395691][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.407404][T17011] bridge_slave_1: left allmulticast mode [ 764.413944][T17011] bridge_slave_1: left promiscuous mode [ 764.420105][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.428612][T17011] bridge_slave_0: left allmulticast mode [ 764.434621][T17011] bridge_slave_0: left promiscuous mode [ 764.441513][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.450260][T17011] dvmrp0: left allmulticast mode [ 764.455314][T17011] bridge_slave_1: left allmulticast mode [ 764.461310][T17011] bridge_slave_1: left promiscuous mode [ 764.466954][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.477221][T17011] bridge_slave_0: left allmulticast mode [ 764.483770][T17011] bridge_slave_0: left promiscuous mode [ 764.490272][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.510320][T17011] dvmrp0: left allmulticast mode [ 764.654131][T17011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.664108][T17011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.674043][T17011] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 764.682958][T17011] bond0 (unregistering): Released all slaves [ 764.691231][T17011] bond1 (unregistering): Released all slaves [ 764.755945][T17011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.765811][T17011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.775349][T17011] bond0 (unregistering): Released all slaves [ 764.862608][T17011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.872487][T17011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.883515][T17011] bond0 (unregistering): Released all slaves [ 765.001562][T17011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.011425][T17011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.021026][T17011] bond0 (unregistering): Released all slaves [ 765.052250][T17011] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 765.127541][T17011] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 765.150169][T17011] batman_adv: batadv0: Removing interface: gretap3 [ 765.173455][T17011] bond8 (unregistering): (slave geneve2): Releasing active interface [ 765.620866][T17011] bond14 (unregistering): (slave bridge10): Releasing backup interface [ 765.629596][T17011] bridge10 (unregistering): left promiscuous mode [ 765.700823][T17011] bond0 (unregistering): Released all slaves [ 765.708485][T17011] bond1 (unregistering): Released all slaves [ 765.717301][T17011] bond2 (unregistering): Released all slaves [ 765.726600][T17011] bond3 (unregistering): Released all slaves [ 765.736960][T17011] bond4 (unregistering): Released all slaves [ 765.749851][T17011] bond5 (unregistering): Released all slaves [ 765.759511][T17011] bond6 (unregistering): (slave bond7): Releasing backup interface [ 765.767681][T17011] bond7 (unregistering): left promiscuous mode [ 765.774522][T17011] bond6 (unregistering): Released all slaves [ 765.783363][T17011] bond7 (unregistering): Released all slaves [ 765.794809][T17011] bond8 (unregistering): Released all slaves [ 765.803671][T17011] bond9 (unregistering): Released all slaves [ 765.812257][T17011] bond10 (unregistering): Released all slaves [ 765.821106][T17011] bond11 (unregistering): Released all slaves [ 765.830385][T17011] bond12 (unregistering): Released all slaves [ 765.842329][T17011] bond13 (unregistering): Released all slaves [ 765.854601][T17011] bond14 (unregistering): Released all slaves [ 766.007683][T17011] ÃM¯”ÛÓó: left promiscuous mode [ 766.071809][T17011] tipc: Left network mode [ 766.094221][T17011] IPVS: stopping master sync thread 18780 ... [ 766.112885][T17011] IPVS: stopping master sync thread 12270 ... [ 766.119491][T17011] IPVS: stopping backup sync thread 12426 ... [ 767.109308][T17011] hsr_slave_0: left promiscuous mode [ 767.115302][T17011] hsr_slave_1: left promiscuous mode [ 767.121828][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.129434][T17011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.136971][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.144421][T17011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.151987][T17011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.162128][T17011] hsr_slave_0: left promiscuous mode [ 767.167748][T17011] hsr_slave_1: left promiscuous mode [ 767.173836][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.181296][T17011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.188926][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.196300][T17011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.205633][T17011] hsr_slave_0: left promiscuous mode [ 767.211335][T17011] hsr_slave_1: left promiscuous mode [ 767.216911][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.224790][T17011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.232450][T17011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.239887][T17011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.249552][T17011] hsr_slave_0: left promiscuous mode [ 767.255210][T17011] hsr_slave_1: left promiscuous mode [ 767.266354][T17011] veth1_macvtap: left promiscuous mode [ 767.271981][T17011] veth0_macvtap: left promiscuous mode [ 767.277493][T17011] veth1_vlan: left promiscuous mode [ 767.282841][T17011] veth0_vlan: left promiscuous mode [ 767.288637][T17011] veth0_macvtap: left promiscuous mode [ 767.294845][T17011] veth1_vlan: left promiscuous mode [ 767.300162][T17011] veth0_vlan: left promiscuous mode [ 767.305921][T17011] veth1_macvtap: left promiscuous mode [ 767.311430][T17011] veth0_macvtap: left promiscuous mode [ 767.316916][T17011] veth1_vlan: left promiscuous mode [ 767.323009][T17011] veth0_vlan: left promiscuous mode [ 767.473510][T17011] team0 (unregistering): Port device team_slave_1 removed [ 767.483419][T17011] team0 (unregistering): Port device team_slave_0 removed [ 767.538243][T17011] team0 (unregistering): Port device team_slave_1 removed [ 767.551156][T17011] team0 (unregistering): Port device team_slave_0 removed [ 767.638481][T17011] team0 (unregistering): Port device team_slave_1 removed [ 767.651400][T17011] team0 (unregistering): Port device team_slave_0 removed [ 767.743950][T17011] team0 (unregistering): Port device team_slave_1 removed [ 767.753891][T17011] team0 (unregistering): Port device team_slave_0 removed [ 767.925142][ T5910] lo speed is unknown, defaulting to 1000 [ 767.935114][ T5910] infiniband syz2: ib_query_port failed (-19) [ 768.930028][T17011] IPVS: stop unused estimator thread 0... [ 768.940149][T17011] IPVS: stop unused estimator thread 0...