last executing test programs: 4.303353687s ago: executing program 2 (id=3268): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) r1 = socket$kcm(0x10, 0x1, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a800200000000000000601006034002200600053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) 4.298403127s ago: executing program 2 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$qrtr(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/29, 0x1d}, {&(0x7f00000008c0)=""/150, 0x96}], 0x2}, 0x38, 0x2100) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500e10b0000000000119078000000000000000000144e2100089078"], 0x0) 3.7852912s ago: executing program 0 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x78d181, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x5, [@union={0xb, 0x2, 0x0, 0x5, 0x1, 0x1ff, [{0x9, 0x2, 0x1}, {0x7, 0x0, 0xfd}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x1}}, @datasec={0x5, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x4749, 0xfbd}, {0x3, 0xdd, 0xc0000}, {0x3, 0x1, 0x1000}, {0x4, 0x1, 0xfffffff8}], "0e77"}, @datasec={0x8, 0x3, 0x0, 0xf, 0x1, [{0x3, 0xffffff02, 0x80000000}, {0x2, 0x2, 0x1597}, {0x4, 0x2, 0xffffffff}], "97"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}]}, {0x0, [0x30, 0x0, 0x30]}}, &(0x7f0000000280)=""/27, 0xd9, 0x1b, 0x0, 0xe4, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', r5, 0x2f, 0x3, 0x9, 0x6, 0x14, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0xff, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x11, r4, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xcf}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3.391151386s ago: executing program 2 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0xfd, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{0x0, 0x20}], 0x1}, 0x20040000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5cffff001000010400000000000094b3827bb490", @ANYRESDEC=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c000280050009008f00000008000b400000ae2f0400060014000700fc0200"/68], 0x5c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0x3, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0xf, 0xc, 0x2, 0x9, 0x2, 0xf, 0x6, 0x1, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x4, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r13, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200", 0x4}], 0x1}, 0x4005) socket$nl_xfrm(0x10, 0x3, 0x6) 3.335392868s ago: executing program 4 (id=3286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000040)=@buf={0x43, &(0x7f00000000c0)="408a61d752d6a1a551516b3e43a9598919de16e236b331b456bfeeca630a4d780b20469cef474cd40359c2907d92590ddf6589e559e74b8d67e14cfdba0edfeed67ef9"}) 1.528495803s ago: executing program 0 (id=3287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940), 0x8040) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x2, 0x3, 0x7, 0xf27181a}, {0xda, 0x7f, 0x9, 0x33}, {0x9, 0xff, 0x1, 0x6}, {0x9, 0x3, 0x2, 0x4}]}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40047452, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.428551672s ago: executing program 1 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="210000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef8913c37f6c82609a2a4b30f4d2b24fb5a8a736489da1b1fb5285bca0d7c939931836f0c88f6cdc788e825a5a7ad8294db550b1bba0b482d9336206f6791790ec2d7a5175b126f825494a8e17f3cae608f6121c810ab58d7842d075bd0d7094101c8aa2d64c86d49d67ec91c27972a188ddbe34b2b0a58cc13c11e70a60c2e703b4b3969578cf270bd462846b0000b9c0e26d88a5"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x201, 0x70bd28, 0x25dfdbfe, {0x2, 0x8, 0x43}}, 0x18}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x9, 0x0, &(0x7f0000000280)) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9ab1, 0x3}, &(0x7f0000000080)=0x1, 0x0, 0x4, 0xd75, 0x0, 0x8, 0x37, 0x3}}], 0x58}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) 1.402472423s ago: executing program 3 (id=3289): socket$inet(0x2, 0x4000000000000001, 0x100) r0 = socket$key(0xf, 0x3, 0x2) close(r0) 1.319489467s ago: executing program 1 (id=3290): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xff], [], 'pimreg0\x00', 'geneve1\x00', {}, {}, 0x0, 0x4, 0x0, 0x55}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x18, "d05511d4053fa80d56e441286224250ca2535f0c8aa13a6276593694a239"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast2, @in, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x2c044010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfdffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.318224496s ago: executing program 3 (id=3291): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, 0x0}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'team0\x00', @ifru_names='rose0\x00'}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000020200000008001e00010000007b0f0d1c7a52be"], 0x24}}, 0x0) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0) 1.236705611s ago: executing program 2 (id=3292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x801, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) (async) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32=r4]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r7, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xe000000, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffb, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x9, 0x205, 0x1, 0x7}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x6, 0x9, 0xd, 0x3, 0x1, {0x10000000, 0x26, 0x2, 0x8, 0xfffffffe, 0x757f}}}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x94}}, 0x8000) sendto$packet(r10, &(0x7f0000000440)="bad330752181510000316f3a277f953286ddd1dc9119f98ce83de525e4a40e81692d09dc", 0x5ea, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.232946025s ago: executing program 4 (id=3293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000046f5ffffffffffff0000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000fffffffc3c0000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x3b}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, @in=@loopback, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xd1}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x81}) 1.20749247s ago: executing program 0 (id=3294): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r8, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000240)) unshare(0x22020600) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd8, 0x1f8, 0xd8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xff0000ff], 'pim6reg1\x00', 'netpci0\x00', {}, {}, 0x5e, 0x2, 0x4, 0xe762cda7cca00397}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0x1, 0x3}, {0x1, 0x3}, 0x9, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff], 'pimreg1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x4, 0x2, 0x52}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, 'netpci0\x00', {0x89ca}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x48, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@private0}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) listen(r10, 0xfffffffd) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x10, 0x6, 0x0, 0x3, 0xff, 0x8, 0x800}, ["", "", "", ""]}, 0x1c}}, 0x0) 1.056457198s ago: executing program 1 (id=3295): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0xdd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800) 1.055177509s ago: executing program 4 (id=3296): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 1.048704034s ago: executing program 2 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0xb, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072615467650000002c0002800c0004800500010084000000080001400002000008000240000000000c0003800500ffff420000000900010073797a30000000000900020073797a32"], 0x94}}, 0x4000801) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x48000) 943.478893ms ago: executing program 2 (id=3298): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r1, 0x0) listen(r1, 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) (async) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r7 = socket(0x10, 0x3, 0xffc00000) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) 893.084926ms ago: executing program 1 (id=3299): r0 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@ax25={{0x3, @netrom}, [@netrom, @rose, @bcast, @null, @null, @bcast, @netrom]}, &(0x7f00000006c0)=0x80, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000700)=@generic={0x2, 0xffffffff7fffffff, 0xffffffffffffffff}) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan1\x00', 0x0}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r2, 0x1, 0x7, 0x2, 0x5, {{0x1a, 0x4, 0x2, 0x2a, 0x68, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x1c, 0x99, 0x1, 0xd, [{@private=0xa010102, 0x9}, {@local, 0x6}, {@multicast1}]}, @end, @end, @timestamp={0x44, 0x2c, 0xef, 0x0, 0x7, [0x7, 0xfffffff8, 0x1, 0x7ff, 0x5, 0x1, 0x8, 0x8, 0x2, 0x8941]}, @ssrr={0x89, 0x7, 0xbe, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xf8, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000280), 0x4) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000c40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x8, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, {[@routing={0x87, 0x0, 0x0, 0x5}]}}}}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r13, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r13, &(0x7f0000000000)="a6a7", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) r14 = socket(0x40000000015, 0x5, 0x0) getsockopt(r14, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) (async) recvfrom$netrom(r1, &(0x7f0000000540)=""/128, 0x80, 0x2, &(0x7f00000005c0)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 890.104232ms ago: executing program 4 (id=3300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4854}, 0x40000) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000380)) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000003c0)={0x2c, 0x1f, '\x00', [@generic={0x4b, 0xe8, "b7e4ce7961786eb5748694eaa5a7d7c9c2f952da60bdcf5c6237e2ce226da258f10ba1ef038c5a6d62950f793f83cf6024f112e277b829bb2e3b164f44ff430385a53df9a45f6e2db4443c293201e3252e029028e0601fe2377d73cd7fc469234564f0620cd9bec7f0bba6d512734bbd40fa99882d010bf3ab333bd95625f22cd1f5956c6764c1a74031b9e0547612b1ea4a5f2129c647334d80214c33f143e3d81e21575fbc06421e022abea2cf595ab77781ac879975bed83765bca811d18ff7823bb534c27e3fe4a2c197548537af243648e9d40e086212fccc77e2e73bb8ae2fb62b6553a050"}, @hao={0xc9, 0x10, @mcast1}, @pad1]}, 0x108) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000500)={0x7ff, 0xff, 0xf36, 0x80000000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000680)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) recvfrom$rose(0xffffffffffffffff, &(0x7f00000007c0)=""/3, 0x3, 0x142, &(0x7f0000000800)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa0, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x800) r10 = socket$inet(0x2, 0x6, 0x5) sendmsg$inet(r10, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a40)="8d161925e4ce68a24c9a6a777d6b466d19d9320cc021e18089edcdb89dcfe3a9cad557c5cf895337121b6ce0c45f73a3b706cde89df96a52cfd8e92757bfa68e40061129f2fa45c6f69a3ad4c783b34ed963c40b9ff5367f0f91d79575a5332abc23880c57489d5e", 0x68}, {&(0x7f0000000ac0)="ecc9e72520ed835e4a44572d8fcf1a3dd2e2354a7531e75568626b1ab89a7d07ea36bb5d5a83504420cc1df5394e18055b953e237b612bd4f097a310949759ecfa798d0e70a6cda2d97f440b9aa8e3f35b6f03c05ca78ac827f2795a27b7e6e7610082ee5e55b8c430614f5cfc8ad247", 0x70}, {&(0x7f0000000b40)="65db90c531d10dc147444420f0d3dcf3b85adc9b182c342120733423f70adb4464d66dfb5827ac8eaea293a10772a3cbf7fe7e25360976ad7574a608b8e4b47f88", 0x41}, {&(0x7f0000000bc0)="f508e849732b6e4dc18f7e4da62fc92b768d480df0f785ca7c547e967e13957a3ba0065c4282b5b9d6766e85366d6365a7dc0cef0ae68b0ea97866f061634ee440bfbe1deffb6c6810c441a1fb3c02bc89ee1a2a6a56be3724086fb0f957db62d59a739c8c7e4bf4670acd3e3a772f34e723dc34cd488b0a83e45c53dbe1ca19de886b00ce65e7", 0x87}], 0x4, &(0x7f0000000cc0)=[@ip_tos_int={{0x14}}], 0x18}, 0x1) getsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000dc0)={{0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x1, 0x5, 0x7, 0xb, 0x1, 0x8, 0x1, 0x2, 0xffffffff, 0x0, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000e80)={r11, 0x8}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r12, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0xa0, r13, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x93}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9728}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x202}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x4, 0x2, 0x6]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x8, 0x10000, 0xc1, 0x9, 0x6, 0x5, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2de}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0000}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x840) sendmsg$NL80211_CMD_STOP_NAN(r12, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x20, r13, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x2040) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) 871.682542ms ago: executing program 0 (id=3301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) (async) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x50, @empty, 0x5}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) 861.961006ms ago: executing program 3 (id=3302): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8007, 0x8000, 0x40, 0x80b, {{0xe, 0x4, 0x1, 0x2e, 0x38, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @broadcast, {[@noop, @lsrr={0x83, 0x13, 0xa3, [@remote, @loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0x4f, [@empty, @broadcast, @rand_addr=0x64010100]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7fff}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7fff}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r4, 0x38}, &(0x7f00000002c0)=0x8) r5 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@remote, @default, @rose, @rose, @netrom, @default, @default, @default]}, &(0x7f0000000380)=0x48, 0x800) accept$ax25(r5, &(0x7f00000003c0)={{0x3, @rose}, [@null, @rose, @rose, @rose, @netrom, @null, @bcast, @rose]}, &(0x7f0000000440)=0x48) (async) accept$ax25(r5, &(0x7f00000003c0)={{0x3, @rose}, [@null, @rose, @rose, @rose, @netrom, @null, @bcast, @rose]}, &(0x7f0000000440)=0x48) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x100}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x840) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20042055}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r11, &(0x7f0000000a00)={0x2c, 0x6, r2, 0x34}, 0x10) (async) bind$xdp(r11, &(0x7f0000000a00)={0x2c, 0x6, r2, 0x34}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r2, 0x2f, 0x7, 0x6, 0x8e4, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x20, 0x7800, 0x5, 0x100}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r2, 0x2f, 0x7, 0x6, 0x8e4, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x20, 0x7800, 0x5, 0x100}}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0xd6e, '\x00', r2, 0xffffffffffffffff, 0x14, 0x5, 0x7}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000dc0)={{r0, &(0x7f0000000c00)='syztnl0\x00', 0x0, &(0x7f0000000c40)={@align=0x280000000, {0xffc0, 0x3, 0x81, 0x7fffffffffffffff}}, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0)}, {[0x8001, 0xae, 0x7ff, 0x8]}, 0xfffffffa, 0x8b, &(0x7f0000000d00)=""/139}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000dc0)={{r0, &(0x7f0000000c00)='syztnl0\x00', 0x0, &(0x7f0000000c40)={@align=0x280000000, {0xffc0, 0x3, 0x81, 0x7fffffffffffffff}}, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0)}, {[0x8001, 0xae, 0x7ff, 0x8]}, 0xfffffffa, 0x8b, &(0x7f0000000d00)=""/139}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=0xffffffffffffffff, 0x4) (async) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0x0, r11}, 0x18) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0x0, r11}, 0x18) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x3, 0x2d, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x7, 0xda, &(0x7f0000001000)=""/218, 0x40f00, 0x25, '\x00', r2, @sched_cls=0x36, r15, 0x8, &(0x7f0000001140)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x8, 0xd1f, 0x8001}, 0x10, 0xffffffffffffffff, r12, 0x5, &(0x7f0000001680)=[r16, 0x1, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x0, 0x3, 0x10, 0x8}, {0x0, 0x3, 0x4, 0x7}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x1, 0xb, 0xc}, {0xd3ee, 0x1, 0x10, 0x1}], 0x10, 0xfffffffe}, 0x94) 692.752266ms ago: executing program 0 (id=3303): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x44085) 621.574951ms ago: executing program 0 (id=3304): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000380)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90030239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30401a8ffb21aef4a95a155fab79defbab0056b0f63331a66b3457c", 0x2}, 0x50) 604.069082ms ago: executing program 3 (id=3305): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x782f, 0x1, 0xe48, 0x100, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x64, 0x0, 0x8, 0x0, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@multicast2, 0xff}]}, @ssrr={0x89, 0x17, 0xff, [@local, @rand_addr=0x64010101, @remote, @broadcast, @rand_addr=0x64010100]}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)={'syztnl1\x00', r0, 0x8000, 0x7800, 0xffffff67, 0x1, {{0x1c, 0x4, 0x2, 0x9, 0x70, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0xce, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0xe0, 0x0, 0x7, [0x6, 0xe7, 0x8, 0x1, 0x1, 0xb, 0x8, 0x2, 0x10]}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0x0, [{@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x1b, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @multicast1, @multicast2, @empty]}]}}}}}) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 304.805401ms ago: executing program 1 (id=3306): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x0, 0x2000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 304.531368ms ago: executing program 3 (id=3307): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) (async) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4004044) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000073797a320000000050000000060a0104bc17f26af58035580100004008000b400000000028000480240001800b000100657874686472000014000280080001400000000c08000640cf4bbea70900010073797a3000000017140000001100010000000000000000000700000a000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 260.690612ms ago: executing program 4 (id=3308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e20, @loopback}}) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x80}, {@in=@remote, 0x0, 0x3c}, @in=@broadcast, {0x200000, 0x0, 0xffffffffffff7fff}, {0x0, 0xf7fffffffffffffe}, {0x70a1}, 0x70bd28, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ctr-cast6-avx\x00'}}}]}, 0x138}}, 0x0) 154.871445ms ago: executing program 4 (id=3309): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0xe859, "d131e4", 0x3, 0x13}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="760a00000000000061115400000000001800000000000000000000a194ef2afd1000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 101.008993ms ago: executing program 3 (id=3310): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x1, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "1cb92a191a9ffbc1", "59e1158d190000000000000000789c00", "1600", "f34237ac7bf155f1"}, 0x28) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ff1c064e204e20590000a2bc5603ca00000f7f8907000020000500188fedc22e6ee11a", 0x38}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000040)) 0s ago: executing program 1 (id=3311): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0xfffff8ba, 0x3, 0x0, 0x2}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, @any, 0x4}, 0xa) (async) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f00000002c0)={{@align=0x6, {0x0, 0xf1, 0x2f, 0x9}}, {{[0x1, 0xc, 0x4, 0x2]}, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000180)=[{{@align=0x9, {0x6, 0xcb95, 0x9, 0x2}}, 0x5, 0x0, '!\'{^\x00'}, {{@_ha_fsid={[0x1, 0x4]}, {0xfffc, 0x0, 0xfa, 0x8}}, 0x0, 0x0, '\x00'}, {{@_ha_fsid={[0x7, 0x6]}, {0xffff, 0xfffb, 0x0, 0xfffffffffffffff9}}, 0x9, 0x0, '\x00'}, {{@_ha_fsid={[0x6, 0xae3]}, {0x3, 0x402d, 0xfffffffb, 0x8000000000000001}}, 0x2, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0x80000001]}, {0x7, 0x0, 0x41, 0xffffffffffffffa3}}, 0x6, 0x0, '\x00'}, {{@align=0x9, {0x183, 0x7, 0x5, 0x4}}, 0x0, 0x0, '$\x80@:^:#^%@\xf0*+\x00'}, {{@align=0x80000000, {0x8000, 0xce, 0x3}}, 0x2, 0x0, '\x00'}, {{@align=0x5d3ba6da, {0x6, 0x4, 0x8, 0xfffffffffffffffe}}, 0x0, 0x0, '-+{(%.$-\x00'}]}}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000400)={r0, &(0x7f0000000300)='$\x80@:^:#^%@\xf0*+\x00', 0x111a40, &(0x7f0000000340)={@_ha_fsid={[0x9, 0x6]}, {0x2, 0x7ff8, 0x1, 0x1}}, 0xd, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x80}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0xeb}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000004c0)={r3, 0x89, "7c55bfb0bd7e38ba90fb78423b9a5d50199cef4b59cda03829c087b0a3a02f1b0a6acb16b66ec82427128a9cccf6ec0e0fef89b5b867f90c326b9054e39e3815961a84c6aa437833f58bc5bd7eb016f915856fa27c8f9eadf3994eec5d8074d1f7e91ea62c80fc32224fec80b5302e3c5624a9fdb1b725975720d356cc25dba4eefb150faeb210c8e2"}, &(0x7f0000000580)=0x91) (async) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0x3, 0x2, 0x5, 0x1c8, 0x6]}, &(0x7f0000000640)=0x78) (async) r4 = accept(r0, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000700)=0x80) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000740)={0x6, 0x2, 0x8, 0x6, 0xf51}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x1405, 0x108, 0x70bd2a, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x8000080) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000008c0), &(0x7f0000000900)=0x4) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000940)={0x3ff, 0x9, 0x10, 0x5, 0x3}) getsockname$inet(r4, &(0x7f00000009c0)={0x2, 0x0, @empty}, &(0x7f0000000a00)=0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000a40)=0x100000001) (async) sendmsg$netlink(r4, &(0x7f0000001c00)={&(0x7f0000000a80)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)={0x10dc, 0x16, 0x200, 0x70bd29, 0x25dfdbfc, "", [@nested={0x10c8, 0x12, 0x0, 0x1, [@typed={0x4, 0x71}, @typed={0xb8, 0x45, 0x0, 0x0, @binary="1f2b56d18486c40f0c8eb3bf5b47b613b15ce812cba16feaa0e2e8daa788697c327181b8c98c68a752744380736ef5a01308c5f024100354b9114ee0d2554603a411b87dc2a05cfd4cc67967884427185201b82b33e3c3a20614696d32908cd1d0007421df0d670225f13dd3a793ac0c7516fe9e6eeccb1ac37d49f651b2940c81c4c5c20e40caebdae89e8e5dda8303005dcf0205a6909886df7f4eff1870fec91ffc7b8d8f6ff868d8a5248d380017ae3f1bee"}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0x8}, @generic="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"]}, @typed={0x4, 0xab}]}, 0x10dc}], 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001c80)=@generic={&(0x7f0000001c40)='./file0\x00'}, 0x18) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001cc0)={0x5, 0x1, 0x6, 0x3, 0x6}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x18, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001e00)={0x0, 'syz_tun\x00', 0x3}, 0x18) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001e40)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000001f40)=0xe8) socket$inet(0x2, 0x2, 0x6) (async) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x18, 0x3f9, 0x600, 0x70bd2d, 0x25dfdbfd, {0x1, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) connect$inet(r1, &(0x7f0000002080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r8 = openat$cgroup_ro(r1, &(0x7f00000020c0)='cgroup.freeze\x00', 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000002100)={0x13, 0x1, 0x4102d53f, 0x2, 0x7}) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000002140), 0x4) kernel console output (not intermixed with test programs): 67] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.1392'. [ 201.516305][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.724017][T10896] netlink: 'syz.3.1400': attribute type 3 has an invalid length. [ 201.741320][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'. [ 201.742007][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 201.786081][T10899] bond0: option mode: unable to set because the bond device has slaves [ 201.922628][T10910] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 202.243930][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 202.430184][T10930] vlan2: entered allmulticast mode [ 202.436869][T10930] bridge_slave_0: entered allmulticast mode [ 202.607452][T10949] netlink: 'syz.4.1413': attribute type 21 has an invalid length. [ 202.608956][T10947] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1412'. [ 202.617468][T10949] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1413'. [ 202.642400][T10947] 0: renamed from hsr_slave_1 (while UP) [ 202.669272][T10947] 0: entered allmulticast mode [ 202.688343][T10947] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 202.705275][T10949] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1413'. [ 202.822120][T10956] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 202.913976][T10960] tipc: Enabling of bearer rejected, failed to enable media [ 203.139503][T10974] netlink: 'syz.0.1420': attribute type 30 has an invalid length. [ 203.195148][T10974] bond4: option arp_missed_max: invalid value (0) [ 203.203187][T10974] bond4: option arp_missed_max: allowed values 1 - 255 [ 203.207939][T10934] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 203.302555][T10974] bond4 (unregistering): Released all slaves [ 203.490761][T10985] netlink: 'syz.4.1424': attribute type 39 has an invalid length. [ 203.641654][T11003] pim6reg1: entered promiscuous mode [ 203.658736][T11003] pim6reg1: entered allmulticast mode [ 203.734242][T11007] syzkaller0: entered promiscuous mode [ 203.745706][T11007] syzkaller0: entered allmulticast mode [ 204.049559][T11024] netlink: 'syz.4.1435': attribute type 4 has an invalid length. [ 204.247109][T11037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.254706][T11037] IPv6: NLM_F_CREATE should be set when creating new route [ 204.262511][T11037] IPv6: NLM_F_CREATE should be set when creating new route [ 204.269916][T11037] IPv6: NLM_F_CREATE should be set when creating new route [ 204.312454][T11043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.476986][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 204.541891][T11051] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 204.577286][T11049] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 204.656815][T11058] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.027640][T11085] ip6t_srh: unknown srh invflags 4000 [ 205.147581][T11076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.482858][T11110] __nla_validate_parse: 7 callbacks suppressed [ 205.482879][T11110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1457'. [ 205.593178][T11114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.595062][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 205.811442][T11124] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 205.840602][T11124] macvtap0: left allmulticast mode [ 205.992044][T11133] netlink: 'syz.2.1467': attribute type 2 has an invalid length. [ 206.020605][T11134] netlink: 'syz.2.1467': attribute type 2 has an invalid length. [ 206.034827][T11138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.049337][T11133] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1467'. [ 206.206231][T11145] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1471'. [ 206.291428][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 206.311905][T11156] x_tables: duplicate underflow at hook 2 [ 206.528472][T11172] IPv6: sit1: Disabled Multicast RS [ 206.545190][T11172] sit1: entered allmulticast mode [ 206.649671][T11176] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 206.677754][T11176] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 206.796231][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 206.802909][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 206.810048][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 207.326787][T11216] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 207.343049][T11214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 207.408950][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 207.443525][T11224] syzkaller0: entered promiscuous mode [ 207.450231][T11224] syzkaller0: entered allmulticast mode [ 207.736642][T11244] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 208.073030][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 208.341716][T11281] : renamed from bond0 [ 208.463945][T11289] !: renamed from dummy0 (while UP) [ 208.528828][T11291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.574344][T11291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.597969][T11299] nbd: must specify at least one socket [ 208.797828][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'. [ 208.808518][T11311] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1520'. [ 208.838240][T11311] gretap1: entered promiscuous mode [ 208.843778][T11311] gretap1: entered allmulticast mode [ 208.960073][T11320] "syz.2.1520" (11320) uses obsolete ecb(arc4) skcipher [ 209.236265][T11336] openvswitch: netlink: IP tunnel dst address not specified [ 209.336424][T11343] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1527'. [ 209.523256][T11353] TCP: TCP_TX_DELAY enabled [ 210.227874][T11380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.601724][T11407] __nla_validate_parse: 1 callbacks suppressed [ 210.601745][T11407] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1544'. [ 210.833729][T11416] IPVS: Unknown mcast interface: vxcan1 [ 210.860440][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1548'. [ 210.909986][T11419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'. [ 211.127834][T11434] netlink: 'syz.3.1552': attribute type 11 has an invalid length. [ 211.340082][T11434] veth1_macvtap: renamed from macvlan0 [ 211.471544][T11458] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1557'. [ 211.618369][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 211.681176][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1560'. [ 211.911015][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 212.004561][T11481] netlink: 'syz.0.1561': attribute type 30 has an invalid length. [ 212.027691][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 212.368737][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 212.389037][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 213.117471][T11537] xt_CONNSECMARK: invalid mode: 0 [ 213.617051][T11556] bond3 (unregistering): Released all slaves [ 213.846237][T11577] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 214.002380][T11584] xt_l2tp: wrong L2TP version: 0 [ 214.100351][T11588] netlink: 'syz.0.1580': attribute type 26 has an invalid length. [ 214.139535][T11588] netlink: 'syz.0.1580': attribute type 26 has an invalid length. [ 214.161540][T11591] Cannot find del_set index 4 as target [ 214.481145][T11604] veth5: entered promiscuous mode [ 214.942706][T11625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.995057][T11625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.033629][T11628] syzkaller0: entered promiscuous mode [ 215.040159][T11628] syzkaller0: entered allmulticast mode [ 216.393026][T11551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.791012][T11662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 216.841719][T11662] tipc: Started in network mode [ 216.860469][T11662] tipc: Node identity bab52721e4f9, cluster identity 4711 [ 216.897234][T11662] tipc: Enabled bearer , priority 0 [ 216.938175][T11666] syzkaller0: entered promiscuous mode [ 216.955291][T11666] syzkaller0: entered allmulticast mode [ 216.967100][T11662] __nla_validate_parse: 17 callbacks suppressed [ 216.967130][T11662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1596'. [ 217.033138][T11672] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 217.131408][T11678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1600'. [ 217.155884][T11662] tipc: Resetting bearer [ 217.185855][T11660] tipc: Resetting bearer [ 217.365194][T11660] tipc: Disabling bearer [ 217.415765][T11690] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1603'. [ 217.602631][T11703] syz.3.1606 uses old SIOCAX25GETINFO [ 217.905592][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 218.077304][T11731] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1614'. [ 218.103481][T11719] syzkaller0: entered promiscuous mode [ 218.133448][T11719] syzkaller0: entered allmulticast mode [ 218.156809][T11726] syzkaller0: entered promiscuous mode [ 218.185481][T11726] syzkaller0: entered allmulticast mode [ 218.264553][T11726] 0: reclassify loop, rule prio 0, protocol 800 [ 218.428203][T11749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1618'. [ 220.023839][T11762] sctp: [Deprecated]: syz.1.1620 (pid 11762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.023839][T11762] Use struct sctp_sack_info instead [ 220.051507][T11762] sctp: [Deprecated]: syz.1.1620 (pid 11762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.051507][T11762] Use struct sctp_sack_info instead [ 220.194857][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 220.224952][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1620'. [ 220.573671][T11764] syzkaller0: entered promiscuous mode [ 220.595838][T11764] syzkaller0: entered allmulticast mode [ 220.629207][T11787] x_tables: duplicate entry at hook 3 [ 220.670551][T11788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.980820][T11787] geneve3: entered promiscuous mode [ 221.986317][T11787] geneve3: entered allmulticast mode [ 221.993342][T11783] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1625'. [ 222.004557][T11779] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1625'. [ 222.126268][T11785] delete_channel: no stack [ 222.284142][T11815] netlink: 'syz.4.1633': attribute type 2 has an invalid length. [ 222.329420][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 222.394958][T11818] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 222.688416][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'. [ 222.737584][T11835] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.759322][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1638'. [ 222.785822][T11835] IPv6: Can't replace route, no match found [ 222.837777][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 222.887970][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 222.920073][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'. [ 222.932183][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'. [ 223.063977][T11854] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 223.066124][T11853] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1644'. [ 223.203126][T11854] bond2: entered promiscuous mode [ 223.226659][T11854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.336567][T11875] sctp: [Deprecated]: syz.3.1649 (pid 11875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.336567][T11875] Use struct sctp_sack_info instead [ 223.359588][T11854] bond2: (slave bridge4): making interface the new active one [ 223.368618][T11854] bridge4: entered promiscuous mode [ 223.368996][T11864] netlink: 'syz.4.1645': attribute type 21 has an invalid length. [ 223.376430][T11854] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 223.679887][T11887] netlink: 'syz.3.1650': attribute type 64 has an invalid length. [ 223.800375][T11891] siw: device registration error -23 [ 223.807113][T11895] netlink: 'syz.0.1654': attribute type 21 has an invalid length. [ 223.880664][T11895] netlink: 'syz.0.1654': attribute type 21 has an invalid length. [ 224.007562][T11899] netlink: 'syz.3.1657': attribute type 29 has an invalid length. [ 224.034224][T11899] netlink: 'syz.3.1657': attribute type 29 has an invalid length. [ 224.240291][T11916] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 224.256418][T11916] netlink: 'syz.4.1665': attribute type 3 has an invalid length. [ 224.273907][T11916] NCSI netlink: No device for ifindex 813332851 [ 224.488704][T11931] veth7: entered allmulticast mode [ 224.507154][T11927] wg1 speed is unknown, defaulting to 1000 [ 224.520244][T11933] syzkaller0: entered promiscuous mode [ 224.528938][T11933] syzkaller0: entered allmulticast mode [ 224.538953][T11927] C speed is unknown, defaulting to 1000 [ 225.027115][T11953] xt_hashlimit: size too large, truncated to 1048576 [ 225.211513][T11964] netlink: 'syz.3.1675': attribute type 11 has an invalid length. [ 225.447493][T11973] bridge0: port 3(gretap0) entered blocking state [ 225.454311][T11973] bridge0: port 3(gretap0) entered disabled state [ 225.481343][T11973] gretap0: entered allmulticast mode [ 225.551666][T11973] gretap0: entered promiscuous mode [ 226.747867][T12042] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.761791][T12042] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 227.000539][T12057] __nla_validate_parse: 16 callbacks suppressed [ 227.000561][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 227.117195][T12059] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 227.231806][T12073] x_tables: duplicate underflow at hook 3 [ 227.410513][T12082] validate_nla: 7 callbacks suppressed [ 227.410532][T12082] netlink: 'syz.4.1706': attribute type 3 has an invalid length. [ 227.552516][T12092] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1708'. [ 227.756830][T12103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1711'. [ 227.791542][T12103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1711'. [ 227.954724][ T10] IPVS: starting estimator thread 0... [ 227.957138][T12115] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 228.050397][T12118] IPVS: using max 24 ests per chain, 57600 per kthread [ 228.502921][T12155] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1726'. [ 228.877800][T12182] netlink: 'syz.2.1731': attribute type 1 has an invalid length. [ 228.901147][T12182] netlink: 'syz.2.1731': attribute type 3 has an invalid length. [ 228.924804][T12182] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1731'. [ 228.951297][T12182] NCSI netlink: No device for ifindex 813332851 [ 229.450019][T12195] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 229.484886][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 229.700464][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 229.776489][T12208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1738'. [ 229.908364][T12216] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 230.210962][T12232] netlink: 'syz.0.1746': attribute type 11 has an invalid length. [ 230.266844][T12240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1748'. [ 230.606713][T12248] wg1 speed is unknown, defaulting to 1000 [ 230.615298][T12248] C speed is unknown, defaulting to 1000 [ 230.652224][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.660635][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.668491][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.676513][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.684575][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.692508][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.700605][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.708390][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 230.716285][T12244] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 231.506210][T12287] syzkaller1: left promiscuous mode [ 231.532479][T12287] syzkaller1: left allmulticast mode [ 232.094606][T12310] __nla_validate_parse: 1 callbacks suppressed [ 232.094626][T12310] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1763'. [ 232.740103][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 232.768805][T12332] gretap0: left allmulticast mode [ 232.783892][T12332] bridge0: port 3(gretap0) entered disabled state [ 232.819133][T12332] bridge_slave_1: left allmulticast mode [ 232.827307][T12332] bridge_slave_1: left promiscuous mode [ 232.837066][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.891066][T12332] bridge_slave_0: left allmulticast mode [ 232.905682][T12332] bridge_slave_0: left promiscuous mode [ 232.925094][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.943164][T12341] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1770'. [ 233.518493][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.688253][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 234.026881][T12384] veth0: entered promiscuous mode [ 234.192742][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 234.222973][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1781'. [ 234.250825][T12394] netem: change failed [ 234.277682][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 234.291063][T12390] geneve2: entered promiscuous mode [ 234.307402][T12390] geneve2: entered allmulticast mode [ 234.336025][T12394] tipc: Enabling of bearer rejected, failed to enable media [ 234.724527][T12397] bridge0: port 3(gretap0) entered disabled state [ 234.754888][T12422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.429151][T12432] sctp: [Deprecated]: syz.0.1792 (pid 12432) Use of int in maxseg socket option. [ 235.429151][T12432] Use struct sctp_assoc_value instead [ 235.739328][T12397] veth0_macvtap: left allmulticast mode [ 235.893782][T12382] veth0: left promiscuous mode [ 235.959731][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.985499][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.994967][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 236.087372][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.116776][T12444] sctp: [Deprecated]: syz.4.1794 (pid 12444) Use of int in max_burst socket option deprecated. [ 236.116776][T12444] Use struct sctp_assoc_value instead [ 236.155528][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.178218][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 236.184262][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 236.220307][ T1111] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.240813][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 236.253392][ T1111] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.306723][ T1111] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 236.348291][ T1111] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.376034][ T1111] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.399728][ T1111] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 236.617984][T12472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'. [ 236.973941][T12497] netlink: 'syz.0.1807': attribute type 5 has an invalid length. [ 237.482449][T12526] __nla_validate_parse: 50 callbacks suppressed [ 237.482471][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 237.916530][T12547] netlink: 'syz.1.1820': attribute type 3 has an invalid length. [ 238.075764][T12556] net_ratelimit: 3256 callbacks suppressed [ 238.075787][T12556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.127073][T12550] bond3 (unregistering): Released all slaves [ 238.259777][T12567] netlink: 'syz.1.1824': attribute type 5 has an invalid length. [ 238.301048][T12559] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.356867][T12559] bridge0: entered allmulticast mode [ 238.643020][T12585] netlink: 'syz.1.1828': attribute type 24 has an invalid length. [ 238.927896][T12596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.978949][T12604] "syz.2.1829" (12604) uses obsolete ecb(arc4) skcipher [ 239.166998][T12611] syzkaller0: entered promiscuous mode [ 239.177836][T12611] syzkaller0: entered allmulticast mode [ 239.309422][T12618] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 239.514493][ T30] audit: type=1107 audit(1772466373.951:2): pid=12625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 239.706902][T12640] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 240.084485][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.109783][T12665] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 240.119505][T12666] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 240.178665][T12665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.199626][T12666] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 240.247379][T12677] bond5: (slave veth0_to_bond): making interface the new active one [ 240.308136][T12677] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 240.466900][T12665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.522599][T12665] bond5: (slave bond6): Enslaving as an active interface with a down link [ 240.716899][T12702] netlink: 'syz.4.1852': attribute type 13 has an invalid length. [ 240.810996][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1853'. [ 241.153898][T12723] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1856'. [ 242.645415][T12637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.085115][T12760] syzkaller1: entered promiscuous mode [ 243.096139][T12760] syzkaller1: entered allmulticast mode [ 243.241563][T12770] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1870'. [ 243.447673][T12782] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1873'. [ 243.481484][T12785] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 243.595813][T12789] netlink: 'syz.2.1877': attribute type 4 has an invalid length. [ 243.897813][T12810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.899212][T12812] xt_hashlimit: size too large, truncated to 1048576 [ 244.189452][T12826] pimreg: entered allmulticast mode [ 244.252815][T12827] netlink: 'syz.1.1884': attribute type 9 has an invalid length. [ 244.266331][T12827] netlink: 'syz.1.1884': attribute type 6 has an invalid length. [ 244.469640][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 244.515954][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 244.540849][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 244.550657][T12840] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 244.614828][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1887'. [ 244.715017][T12846] netlink: 'syz.4.1891': attribute type 21 has an invalid length. [ 244.743589][T12846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1891'. [ 244.768781][T12848] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 244.838633][T12857] netlink: 'syz.0.1892': attribute type 10 has an invalid length. [ 245.200147][T12873] bridge0: port 1(gretap0) entered blocking state [ 245.229088][T12873] bridge0: port 1(gretap0) entered disabled state [ 245.239249][T12873] gretap0: entered allmulticast mode [ 245.587607][T12895] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 246.273413][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 246.353128][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 246.398043][T12928] tipc: Enabling of bearer rejected, already enabled [ 246.410767][T12930] SET target dimension over the limit! [ 246.412850][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 246.732062][T12937] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.754912][T12937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.771904][T12944] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 246.793880][T12944] netlink: 'syz.4.1923': attribute type 2 has an invalid length. [ 246.836310][T12944] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 247.114472][T12954] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 247.530147][T12976] bond0: option mode: unable to set because the bond device has slaves [ 247.575641][T12976] openvswitch: netlink: Flow key attr not present in new flow. [ 247.901603][T13001] sch_tbf: burst 127 is lower than device wlan0 mtu (1514) ! [ 247.928931][T12999] sch_tbf: burst 127 is lower than device wlan0 mtu (1514) ! [ 247.960577][T13001] tipc: Enabled bearer , priority 0 [ 247.991679][T13003] tipc: Resetting bearer [ 248.037702][T13001] tipc: Resetting bearer [ 248.308906][T13024] __nla_validate_parse: 11 callbacks suppressed [ 248.308929][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'. [ 248.333435][T13024] tipc: Enabling of bearer rejected, already enabled [ 248.495933][T13035] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 248.568057][T13035] validate_nla: 4 callbacks suppressed [ 248.568076][T13035] netlink: 'syz.0.1952': attribute type 21 has an invalid length. [ 248.697749][T13041] wg1 speed is unknown, defaulting to 1000 [ 248.739762][T13041] C speed is unknown, defaulting to 1000 [ 248.783116][T13047] netlink: 'syz.4.1956': attribute type 21 has an invalid length. [ 248.807052][T13047] netlink: 'syz.4.1956': attribute type 1 has an invalid length. [ 248.824723][T13053] Bluetooth: MGMT ver 1.23 [ 248.947477][T13057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1959'. [ 249.078725][T13066] xt_CONNSECMARK: invalid mode: 0 [ 249.088948][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 249.239844][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 249.396133][T13082] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1966'. [ 249.443308][T13073] bond4: entered promiscuous mode [ 249.449907][T13073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.545836][T13093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 249.838313][T13110] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 249.953394][T13117] netlink: 'syz.2.1970': attribute type 26 has an invalid length. [ 250.018170][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 250.206692][T13126] C: renamed from lo [ 250.240340][T13126] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.338074][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 250.376948][T13127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 250.413051][T13138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1977'. [ 250.477044][T13132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.538070][T13132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.602157][T13132] bond0 (unregistering): Released all slaves [ 250.647264][ T12] bond5: (slave veth0_to_bond): link status definitely down, disabling slave [ 250.686902][ T12] bond5: now running without any active interface! [ 250.765950][T13159] Bluetooth: MGMT ver 1.23 [ 250.900093][T13162] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1986'. [ 251.040404][T13177] syzkaller1: entered promiscuous mode [ 251.046695][T13177] syzkaller1: entered allmulticast mode [ 251.304044][T13188] pim6reg: entered allmulticast mode [ 251.350016][T13190] C: Caught tx_queue_len zero misconfig [ 251.518977][T13185] pim6reg: left allmulticast mode [ 251.700769][T13188] syzkaller1: entered promiscuous mode [ 251.717143][T13188] syzkaller1: entered allmulticast mode [ 251.966717][T13207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.029506][T13207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.096800][T13207] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 252.144883][T13207] bond0 (unregistering): Released all slaves [ 252.589435][T13241] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 252.797379][T13249] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 253.304339][T13261] sit0: entered promiscuous mode [ 253.314792][T13261] netlink: 'syz.3.2009': attribute type 1 has an invalid length. [ 253.330644][T13261] __nla_validate_parse: 4 callbacks suppressed [ 253.330662][T13261] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2009'. [ 253.421205][T13265] macvtap1: entered allmulticast mode [ 253.445446][T13265] veth0_macvtap: entered allmulticast mode [ 253.641491][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2013'. [ 253.641825][T13276] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 253.739513][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'. [ 253.781859][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'. [ 253.882138][T13287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2016'. [ 254.227868][T13295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.288369][T13298] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2019'. [ 254.320010][T13298] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2019'. [ 254.350090][T13300] netlink: 'syz.4.2020': attribute type 2 has an invalid length. [ 254.626365][T13311] xt_hashlimit: size too large, truncated to 1048576 [ 254.833125][T13325] netlink: 'syz.3.2027': attribute type 2 has an invalid length. [ 254.974885][T13332] ip6gre1: entered allmulticast mode [ 255.017819][T13334] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 255.034520][T13334] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2029'. [ 255.076678][T13332] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2026'. [ 255.193432][T13339] bond0: option miimon: invalid value (18446744073709551585) [ 255.207061][T13339] bond0: option miimon: allowed values 0 - 2147483647 [ 255.258972][T13339] bond0 (unregistering): Released all slaves [ 255.316352][T13352] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2033'. [ 255.842967][T13377] 9: renamed from lo [ 255.924660][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.056579][T13386] xt_hashlimit: size too large, truncated to 1048576 [ 256.092300][T13392] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 256.654219][T13414] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 256.805104][T13427] net veth1_virt_wifi : renamed from virt_wifi0 [ 256.959514][T13433] openvswitch: netlink: IP tunnel dst address not specified [ 257.104724][T13447] netlink: set zone limit has 4 unknown bytes [ 257.113827][T13447] netlink: Conntrack attr has 4 unknown bytes [ 257.425279][T13458] lo: entered promiscuous mode [ 257.431235][T13458] tunl0: entered promiscuous mode [ 257.438146][T13458] gre0: entered promiscuous mode [ 257.457061][T13458] erspan0: entered promiscuous mode [ 257.464091][T13458] ip_vti0: entered promiscuous mode [ 257.914161][ T1111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 257.926733][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 257.943232][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 257.955178][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.799883][T13427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.810685][T13437] netlink: 'syz.3.2055': attribute type 11 has an invalid length. [ 259.951612][T13490] x_tables: duplicate underflow at hook 1 [ 260.356710][T13509] nbd4: detected capacity change from 0 to 63 [ 260.390944][T13514] block nbd4: NBD_DISCONNECT [ 260.407405][T13514] block nbd4: Disconnected due to user request. [ 260.415488][T13514] block nbd4: shutting down sockets [ 260.424789][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.435381][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 260.443596][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.453372][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 260.461786][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.472022][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 260.480669][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.491176][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 260.515773][ T5881] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.529304][ T5881] Buffer I/O error on dev nbd4, logical block 0, async page read [ 260.559910][ T5881] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.577633][ T5881] Buffer I/O error on dev nbd4, logical block 1, async page read [ 260.591631][ T5881] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.604676][ T5881] Buffer I/O error on dev nbd4, logical block 2, async page read [ 260.640922][ T5881] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.676292][ T5881] Buffer I/O error on dev nbd4, logical block 3, async page read [ 260.693138][ T5881] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.713948][ T5881] Buffer I/O error on dev nbd4, logical block 0, async page read [ 260.731199][T13493] __nla_validate_parse: 11 callbacks suppressed [ 260.731220][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2076'. [ 260.747934][ T5881] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 260.762282][T13524] netlink: 'syz.4.2083': attribute type 17 has an invalid length. [ 260.770821][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 260.780384][ T5881] Buffer I/O error on dev nbd4, logical block 1, async page read [ 260.790351][ T5881] ldm_validate_partition_table(): Disk read failed. [ 260.797366][T13526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2084'. [ 260.805546][T13524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2083'. [ 260.821475][ T5881] Dev nbd4: unable to read RDB block 0 [ 260.836386][ T5881] nbd4: unable to read partition table [ 260.843221][T13503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.862931][T13524] erspan0: entered promiscuous mode [ 260.886372][T13524] erspan0: left promiscuous mode [ 260.893903][ T5881] ldm_validate_partition_table(): Disk read failed. [ 260.953740][ T5881] Dev nbd4: unable to read RDB block 0 [ 260.982675][ T5881] nbd4: unable to read partition table [ 261.493191][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 261.580462][T13559] netlink: 'syz.2.2091': attribute type 1 has an invalid length. [ 261.607743][T13559] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2091'. [ 261.651464][T13559] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2091'. [ 261.752571][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 261.811297][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 262.383855][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 262.420283][T13602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 262.758918][T13620] ip6tnl0: Caught tx_queue_len zero misconfig [ 263.186785][T13652] siw: device registration error -23 [ 263.378375][T13665] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 263.391983][T13665] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 263.568064][T13674] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 263.593811][T13676] tipc: Resetting bearer [ 263.973617][T13691] netlink: 'syz.3.2136': attribute type 4 has an invalid length. [ 264.024836][T13695] netlink: 'syz.3.2136': attribute type 4 has an invalid length. [ 264.195811][T13702] xt_recent: Unsupported userspace flags (000000b1) [ 264.436764][T13676] tipc: Resetting bearer [ 264.463594][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.005952][T13708] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 265.038410][T13708] bond4: option packets_per_slave: allowed values 0 - 65535 [ 265.093135][T13708] bond4 (unregistering): Released all slaves [ 265.160739][ T1111] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.180885][ T1111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.191906][ T796] C speed is unknown, defaulting to 1000 [ 265.195974][ T1111] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.209301][ T796] syz0: Port: 1 Link ACTIVE [ 265.225745][ T1111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.242426][ T1111] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.251846][ T1111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.262766][ T1111] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.273789][ T1111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.464021][T13742] netlink: 'syz.4.2146': attribute type 33 has an invalid length. [ 265.723142][T13749] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 265.943279][T13779] netlink: 'syz.2.2158': attribute type 83 has an invalid length. [ 266.157034][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.359452][T13749] bond4 (unregistering): Released all slaves [ 266.619303][T13793] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 266.652080][T13792] team0: Device gtp0 is up. Set it down before adding it as a team port [ 266.675567][T13793] __nla_validate_parse: 12 callbacks suppressed [ 266.675587][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 266.712516][T13798] netlink: 'syz.1.2163': attribute type 1 has an invalid length. [ 266.808922][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.817803][T13806] delete_channel: no stack [ 266.852870][T13803] bond0: (slave batadv0): Opening slave failed [ 267.143814][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2170'. [ 267.203171][T13827] openvswitch: netlink: Flow key attr not present in new flow. [ 267.561330][T13848] vlan0: entered allmulticast mode [ 267.754624][T13860] syzkaller1: entered promiscuous mode [ 267.762684][T13860] syzkaller1: entered allmulticast mode [ 267.772835][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2183'. [ 268.112144][T13877] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 268.149287][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2188'. [ 268.223831][T13877] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2188'. [ 268.249264][T13877] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 268.663283][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 268.672847][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'. [ 268.839842][T13909] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2198'. [ 268.954120][T13915] netlink: 'syz.3.2199': attribute type 4 has an invalid length. [ 269.043669][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2199'. [ 269.292831][T13936] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2203'. [ 269.314217][T13935] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 269.406681][T13935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.589289][T13941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.610325][T13941] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 269.637287][T13941] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 269.685472][T13935] sch_fq: defrate 0 ignored. [ 269.794427][T13942] veth5: entered promiscuous mode [ 269.837248][T13942] bond7: (slave veth5): Enslaving as an active interface with a down link [ 269.899237][T13947] vlan2: entered allmulticast mode [ 269.920154][T13947] bond7: entered allmulticast mode [ 271.324751][T14042] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 272.094607][T14077] : renamed from bond0 (while UP) [ 272.453989][T14095] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 272.520673][T14099] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 272.532745][T14099] __nla_validate_parse: 4 callbacks suppressed [ 272.532766][T14099] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2247'. [ 272.628298][T14102] bond5: (slave gretap2): making interface the new active one [ 272.673319][T14102] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 272.727229][T14109] bridge6: entered promiscuous mode [ 272.739535][T14109] bridge6: entered allmulticast mode [ 272.761629][T14109] team0: Port device bridge6 added [ 272.782420][T14113] bridge0: port 1(team0) entered blocking state [ 272.800342][T14113] bridge0: port 1(team0) entered disabled state [ 272.816119][T14113] team0: entered allmulticast mode [ 272.822321][T14115] FAULT_INJECTION: forcing a failure. [ 272.822321][T14115] name failslab, interval 1, probability 0, space 0, times 1 [ 272.832192][T14113] team0: entered promiscuous mode [ 272.844788][T14115] CPU: 0 UID: 0 PID: 14115 Comm: syz.0.2252 Not tainted syzkaller #0 PREEMPT(full) [ 272.844818][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.844830][T14115] Call Trace: [ 272.844838][T14115] [ 272.844846][T14115] dump_stack_lvl+0xe8/0x150 [ 272.844882][T14115] should_fail_ex+0x412/0x560 [ 272.844912][T14115] should_failslab+0xa8/0x100 [ 272.844951][T14115] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 272.844983][T14115] ? __alloc_skb+0x186/0x7d0 [ 272.845009][T14115] ? __alloc_skb+0x1d0/0x7d0 [ 272.845031][T14115] ? __local_bh_enable_ip+0xd0/0x130 [ 272.845063][T14115] __alloc_skb+0x1d0/0x7d0 [ 272.845094][T14115] netlink_sendmsg+0x5d4/0xb40 [ 272.845131][T14115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.845160][T14115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.845185][T14115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.845209][T14115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.845233][T14115] ____sys_sendmsg+0xa68/0xad0 [ 272.845274][T14115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.845316][T14115] ? import_iovec+0x73/0xa0 [ 272.845348][T14115] ___sys_sendmsg+0x2a5/0x360 [ 272.845382][T14115] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.845448][T14115] ? __fget_files+0x2a/0x420 [ 272.845475][T14115] ? __fget_files+0x3a0/0x420 [ 272.845513][T14115] __x64_sys_sendmsg+0x1bd/0x2a0 [ 272.845544][T14115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.845582][T14115] ? __pfx_ksys_write+0x10/0x10 [ 272.845615][T14115] do_syscall_64+0x14d/0xf80 [ 272.845635][T14115] ? trace_irq_disable+0x3b/0x150 [ 272.845663][T14115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.845682][T14115] ? clear_bhb_loop+0x40/0x90 [ 272.845708][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.845729][T14115] RIP: 0033:0x7f2bbbf9c799 [ 272.845749][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.845766][T14115] RSP: 002b:00007f2bbcf25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.845789][T14115] RAX: ffffffffffffffda RBX: 00007f2bbc215fa0 RCX: 00007f2bbbf9c799 [ 272.845803][T14115] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 272.845816][T14115] RBP: 00007f2bbcf25090 R08: 0000000000000000 R09: 0000000000000000 [ 272.845828][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.845840][T14115] R13: 00007f2bbc216038 R14: 00007f2bbc215fa0 R15: 00007fffaf2f8158 [ 272.845874][T14115] [ 273.343732][T14126] IPv6: sit1: Disabled Multicast RS [ 273.350497][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'. [ 273.373891][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 273.415499][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 273.553003][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 273.584656][T14141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2257'. [ 273.872105][T14128] syzkaller1: entered promiscuous mode [ 273.879635][T14128] syzkaller1: entered allmulticast mode [ 273.958395][T14166] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2267'. [ 273.984495][T14166] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.2267'. [ 274.074568][T14175] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 274.176267][T14174] bond0: entered promiscuous mode [ 274.181448][T14174] bond0: entered allmulticast mode [ 274.192874][T14180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.207814][T14174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.219240][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'. [ 274.688480][T14210] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2281'. [ 274.940492][T14231] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 274.988983][T14228] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 275.009752][T14228] netlink: 'syz.1.2285': attribute type 2 has an invalid length. [ 275.031428][T14228] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 275.071862][T14228] netlink: 'syz.1.2285': attribute type 3 has an invalid length. [ 275.096900][T14228] netlink: 'syz.1.2285': attribute type 39 has an invalid length. [ 275.119437][T14239] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 275.386670][T14261] wireguard0: entered promiscuous mode [ 275.395850][T14261] wireguard0: entered allmulticast mode [ 275.426712][T14261] team0: Device wireguard0 is of different type [ 275.942066][T14302] xt_TCPMSS: Only works on TCP SYN packets [ 276.140604][T14308] C: renamed from 9 [ 276.320855][T14308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.554789][T14317] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 277.092573][T14353] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 277.127272][T14357] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.136365][T14353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.156784][T14355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.238902][T14362] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.806597][T14405] syzkaller0: entered promiscuous mode [ 277.822385][T14405] syzkaller0: entered allmulticast mode [ 277.858803][T14409] 0: reclassify loop, rule prio 0, protocol 800 [ 278.173634][T14417] syzkaller1: left promiscuous mode [ 278.179733][T14417] syzkaller1: left allmulticast mode [ 278.317246][T14432] netlink: 'syz.3.2334': attribute type 22 has an invalid length. [ 278.332123][T14432] __nla_validate_parse: 8 callbacks suppressed [ 278.332145][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 278.367493][ T12] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 278.380512][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.396720][T14432] netlink: 'syz.3.2334': attribute type 22 has an invalid length. [ 278.419632][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.429763][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 278.447042][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.534153][T14440] vlan0: entered promiscuous mode [ 278.586380][T14440] bridge0: entered promiscuous mode [ 278.657515][T14443] bond6: option min_links: invalid value (18446744073709551614) [ 278.665923][T14443] bond6: option min_links: allowed values 0 - 2147483647 [ 278.675146][T14443] bond6 (unregistering): Released all slaves [ 279.149192][T14464] syzkaller0: entered promiscuous mode [ 279.172116][T14464] syzkaller0: entered allmulticast mode [ 279.181432][T14477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.199611][T14458] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2344'. [ 279.235716][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 279.307874][T14482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2350'. [ 281.069858][T14508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'. [ 281.083764][T14506] x_tables: unsorted entry at hook 2 [ 281.110098][T14512] xt_CONNSECMARK: invalid mode: 0 [ 281.122493][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'. [ 281.241539][T14519] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 281.493089][T14534] veth0: entered promiscuous mode [ 281.556005][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 281.593958][T14537] openvswitch: netlink: IPv6 tunnel dst address is zero [ 281.623757][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2367'. [ 281.636953][T14533] veth0 (unregistering): left promiscuous mode [ 281.667001][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2367'. [ 281.683542][T14540] netlink: 'syz.1.2368': attribute type 3 has an invalid length. [ 281.972220][T14556] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 282.194685][T14567] netlink: 'syz.0.2375': attribute type 1 has an invalid length. [ 282.303415][T14567] bond5: entered promiscuous mode [ 282.327651][T14567] bond5: entered allmulticast mode [ 282.388779][T14567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.539387][T14586] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.645666][T14591] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 283.097508][T14610] hsr_slave_0 (unregistering): left promiscuous mode [ 283.286062][T14625] netlink: 'syz.1.2391': attribute type 21 has an invalid length. [ 283.346038][T14628] netlink: 'syz.4.2392': attribute type 11 has an invalid length. [ 283.362708][T14629] __nla_validate_parse: 6 callbacks suppressed [ 283.362728][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 283.366119][T14628] netlink: 'syz.4.2392': attribute type 11 has an invalid length. [ 283.408557][T14629] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2391'. [ 283.443617][T14628] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2392'. [ 283.508898][T14632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.615165][T14645] netlink: 'syz.4.2396': attribute type 4 has an invalid length. [ 283.754042][T14660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 283.812004][T14660] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2398'. [ 283.823007][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 283.886166][T14664] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 283.968165][T14671] wg1 speed is unknown, defaulting to 1000 [ 283.969411][T14673] syzkaller1: entered promiscuous mode [ 284.006501][T14673] syzkaller1: entered allmulticast mode [ 284.016352][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.025916][T14671] C speed is unknown, defaulting to 1000 [ 284.196728][T14686] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 284.213878][T14685] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2408'. [ 284.624453][T14701] SET target dimension over the limit! [ 284.733562][T14711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2419'. [ 284.769911][T14711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2419'. [ 284.881717][T14725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2420'. [ 284.898055][T14725] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 285.152811][T14736] macvtap2: entered promiscuous mode [ 285.173179][T14736] vlan0: entered promiscuous mode [ 285.181507][T14736] macvtap2: entered allmulticast mode [ 285.187814][T14736] vlan0: entered allmulticast mode [ 285.216904][T14736] veth0_vlan: entered allmulticast mode [ 285.250045][T14725] bridge0: entered promiscuous mode [ 285.270865][T14725] macsec1: entered promiscuous mode [ 285.287287][T14725] macsec1: entered allmulticast mode [ 285.292648][T14725] bridge0: entered allmulticast mode [ 285.330507][T14725] bridge0: port 3(macsec1) entered blocking state [ 285.348500][T14725] bridge0: port 3(macsec1) entered disabled state [ 285.370386][T14725] bridge0: left allmulticast mode [ 285.378017][T14725] bridge0: left promiscuous mode [ 285.440919][T14748] tap0: tun_chr_ioctl cmd 1074025676 [ 285.449718][T14748] tap0: owner set to 0 [ 285.522538][T14752] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.733539][T14763] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.812664][T14767] sit0: Caught tx_queue_len zero misconfig [ 285.913285][T14771] netlink: 'syz.3.2439': attribute type 14 has an invalid length. [ 285.927792][T14771] netlink: 'syz.3.2439': attribute type 14 has an invalid length. [ 286.742009][T14825] netlink: 'syz.1.2453': attribute type 21 has an invalid length. [ 286.910173][T14833] delete_channel: no stack [ 286.922669][T14831] netlink: 'syz.4.2458': attribute type 13 has an invalid length. [ 286.946381][T14833] netlink: 'syz.3.2457': attribute type 13 has an invalid length. [ 286.966084][T14835] syzkaller1: entered promiscuous mode [ 286.973192][T14835] syzkaller1: entered allmulticast mode [ 286.988208][T14833] gretap0: refused to change device tx_queue_len [ 286.995776][T14833] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.125022][T14831] syzkaller0: entered promiscuous mode [ 287.131289][T14831] syzkaller0: entered allmulticast mode [ 287.299385][T14864] netlink: 'syz.1.2467': attribute type 1 has an invalid length. [ 287.379841][T14864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.528758][T14882] PKCS7: Unknown OID: [4] (bad) [ 287.565527][T14882] PKCS7: Only support pkcs7_signedData type [ 287.784043][T14896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.133784][T14913] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 288.180223][T14913] bond8 (unregistering): Released all slaves [ 288.225102][T14926] xfrm1: entered promiscuous mode [ 288.236690][T14926] xfrm1: entered allmulticast mode [ 288.619429][ T62] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.636246][ T62] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.661776][ T62] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.667916][T14947] __nla_validate_parse: 16 callbacks suppressed [ 288.667940][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2491'. [ 288.731422][ T62] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.799406][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 289.033848][T14967] syzkaller0: entered promiscuous mode [ 289.055732][T14967] syzkaller0: entered allmulticast mode [ 289.434639][T14990] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2505'. [ 289.587847][ T5832] block nbd1: Receive control failed (result -32) [ 289.614660][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 289.646590][T15000] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2507'. [ 289.671579][T15001] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2507'. [ 290.301354][T15032] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2513'. [ 290.649468][T15049] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.662237][T15049] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.765480][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2522'. [ 290.858262][T15066] xt_hashlimit: size too large, truncated to 1048576 [ 290.905680][T15060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.290332][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2530'. [ 291.300540][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2530'. [ 292.067763][T15134] syzkaller1: left promiscuous mode [ 292.073236][T15134] syzkaller1: left allmulticast mode [ 292.140467][T15138] netlink: 'syz.3.2547': attribute type 2 has an invalid length. [ 292.267140][T15149] sctp: [Deprecated]: syz.4.2551 (pid 15149) Use of int in max_burst socket option. [ 292.267140][T15149] Use struct sctp_assoc_value instead [ 292.313121][T15149] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 292.429870][T15157] gretap0: left allmulticast mode [ 292.455497][T15157] gretap0: left promiscuous mode [ 292.461026][T15157] bridge0: port 3(gretap0) entered disabled state [ 292.542854][T15157] bridge_slave_0: left promiscuous mode [ 292.558906][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.572777][T15157] bridge_slave_1: left allmulticast mode [ 292.579264][T15157] bridge_slave_1: left promiscuous mode [ 292.587836][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.601667][T15157] team0: Port device team_slave_0 removed [ 292.612998][T15157] team0: Port device team_slave_1 removed [ 292.622326][T15157] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 292.677877][T15166] syzkaller0: entered promiscuous mode [ 292.683650][T15166] syzkaller0: entered allmulticast mode [ 293.290194][T15204] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 293.311515][T15209] xt_l2tp: v2 sid > 0xffff: 1114112 [ 293.752867][T15230] __nla_validate_parse: 4 callbacks suppressed [ 293.752892][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'. [ 293.780231][T15238] netlink: 'syz.3.2577': attribute type 10 has an invalid length. [ 293.791957][T15230] vlan0: entered allmulticast mode [ 293.798339][T15230] bridge4: entered allmulticast mode [ 293.856696][T15230] bridge4: port 1(veth1) entered blocking state [ 293.863859][T15230] bridge4: port 1(veth1) entered disabled state [ 293.873043][T15230] veth1: entered allmulticast mode [ 293.881275][T15230] veth1: entered promiscuous mode [ 294.191076][T15259] netlink: 'syz.4.2584': attribute type 10 has an invalid length. [ 294.228618][T15259] : (slave wlan1): Enslaving as an active interface with an up link [ 294.631856][T15287] xt_hashlimit: max too large, truncated to 1048576 [ 295.222031][T15329] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2602'. [ 295.335895][T15334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2604'. [ 295.478026][T15340] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2606'. [ 295.568419][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'. [ 295.597404][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'. [ 295.828468][T15352] team_slave_1: Caught tx_queue_len zero misconfig [ 296.008534][T15361] bridge6: entered promiscuous mode [ 296.014028][T15361] bridge6: entered allmulticast mode [ 296.206366][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2616'. [ 296.312189][T15370] C: Caught tx_queue_len zero misconfig [ 296.429342][T15376] bond6 (unregistering): Released all slaves [ 296.480775][T15396] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 296.489063][T15396] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 296.524653][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2622'. [ 296.673230][T15397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2622'. [ 296.782414][T15415] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2626'. [ 297.457583][T15457] tipc: MTU too low for tipc bearer [ 297.498573][T15463] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.771193][T15464] syzkaller0: entered promiscuous mode [ 297.777359][T15464] syzkaller0: entered allmulticast mode [ 297.913492][T15491] x_tables: duplicate underflow at hook 1 [ 298.289736][T15514] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.422110][T15555] bond8: option mode: invalid value (133) [ 300.433854][T15555] bond8 (unregistering): Released all slaves [ 300.606751][T15576] __nla_validate_parse: 3 callbacks suppressed [ 300.606773][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2666'. [ 300.728175][T15583] netlink: 'syz.2.2668': attribute type 5 has an invalid length. [ 300.853869][T15589] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2671'. [ 300.933859][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 301.070261][T15603] tipc: Resetting bearer [ 301.212554][ T695] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 301.235755][ T695] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 301.252898][ T695] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 301.269208][ T695] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 301.296277][T15613] sctp: [Deprecated]: syz.4.2677 (pid 15613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.296277][T15613] Use struct sctp_sack_info instead [ 301.487774][T15627] netlink: 'syz.3.2680': attribute type 32 has an invalid length. [ 301.500234][T15626] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 301.539852][T15631] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2679'. [ 301.550911][T15631] netlink: Conntrack attr has 3 unknown bytes [ 301.564474][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2679'. [ 301.587924][T15631] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2679'. [ 301.629577][T15636] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2681'. [ 301.808118][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 301.956941][T15651] xt_TCPMSS: Only works on TCP SYN packets [ 301.970691][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 302.224475][T15660] bond0: option mode: unable to set because the bond device has slaves [ 302.238508][T15662] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 302.272372][T15667] tipc: Resetting bearer [ 302.322818][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2692'. [ 302.545203][T15682] syzkaller1: entered promiscuous mode [ 302.558156][T15682] syzkaller1: entered allmulticast mode [ 303.152862][T15715] bridge_slave_0 (unregistering): left allmulticast mode [ 303.172790][T15715] bridge_slave_0 (unregistering): left promiscuous mode [ 303.191890][T15715] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.498052][T15726] openvswitch: netlink: IP tunnel dst address not specified [ 303.509518][T15733] veth0: entered promiscuous mode [ 303.560923][T15735] veth0 (unregistering): left promiscuous mode [ 303.588874][T15735] veth1 (unregistering): left allmulticast mode [ 303.597434][T15735] veth1 (unregistering): left promiscuous mode [ 303.604261][T15735] bridge4: port 1(veth1) entered disabled state [ 304.046199][T15766] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 304.216098][T15776] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 304.749968][T15810] pim6reg: entered allmulticast mode [ 304.783763][T15810] pim6reg: left allmulticast mode [ 305.044904][T15833] 0: renamed from hsr_slave_1 [ 305.083383][T15833] 0: entered allmulticast mode [ 305.101461][T15833] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 305.663728][T15868] netlink: 'syz.3.2754': attribute type 9 has an invalid length. [ 305.668077][T15866] syzkaller1: entered promiscuous mode [ 305.697663][T15866] syzkaller1: entered allmulticast mode [ 305.749060][T15870] netlink: 'syz.1.2755': attribute type 10 has an invalid length. [ 305.972426][T15881] xt_hashlimit: size too large, truncated to 1048576 [ 306.141150][T15889] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 306.433289][T15900] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 306.437081][T15905] __nla_validate_parse: 153 callbacks suppressed [ 306.437101][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 306.442688][T15900] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 306.534024][T15907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.548641][T15911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2766'. [ 306.948379][T15938] syzkaller1: entered promiscuous mode [ 306.963076][T15938] syzkaller1: entered allmulticast mode [ 307.124156][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 307.146304][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 307.165525][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 307.423905][T15947] nbd2: detected capacity change from 0 to 127 [ 307.438587][ T5832] block nbd2: Receive control failed (result -104) [ 307.534521][T15960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.560444][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 307.570249][T15963] openvswitch: netlink: Missing key (keys=40, expected=80) [ 307.704386][T15973] x_tables: duplicate underflow at hook 1 [ 307.919741][T15984] pim6reg1: entered promiscuous mode [ 307.925115][T15984] pim6reg1: entered allmulticast mode [ 307.999046][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'. [ 308.014252][T15990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2788'. [ 308.036196][T15992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2788'. [ 308.308713][T16010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2792'. [ 308.359599][T16011] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 308.524338][T16011] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.538810][T16011] bond7: (slave bond8): making interface the new active one [ 308.547225][T16011] bond7: (slave bond8): Enslaving as an active interface with an up link [ 308.588779][T16009] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 308.953948][T16047] tipc: Enabling of bearer rejected, media not registered [ 309.089840][T16057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.099524][T16058] netlink: 'syz.2.2809': attribute type 13 has an invalid length. [ 309.123919][T16058] macvtap0: entered allmulticast mode [ 309.145096][T16058] macvtap0: refused to change device tx_queue_len [ 309.167599][T16060] tipc: Enabling of bearer rejected, already enabled [ 309.183479][T16060] mac80211_hwsim hwsim5 +: renamed from syzkaller0 (while UP) [ 309.199924][T16060] tipc: Disabling bearer [ 309.770702][T16083] netlink: 'syz.1.2816': attribute type 3 has an invalid length. [ 310.042078][T16096] netlink: 'syz.0.2823': attribute type 32 has an invalid length. [ 310.166074][T16096] bond7: Setting coupled_control to off (0) [ 310.219261][T16101] syzkaller0: entered promiscuous mode [ 310.236609][T16101] syzkaller0: entered allmulticast mode [ 311.321941][T16163] netlink: 'syz.0.2843': attribute type 11 has an invalid length. [ 311.599446][T16182] netlink: 'syz.2.2850': attribute type 11 has an invalid length. [ 311.613104][T16181] wg1 speed is unknown, defaulting to 1000 [ 311.632760][T16182] __nla_validate_parse: 16 callbacks suppressed [ 311.632784][T16182] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2850'. [ 311.649283][T16181] C speed is unknown, defaulting to 1000 [ 312.061909][T16214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 312.360463][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 312.504777][T16235] bond8: entered promiscuous mode [ 312.509204][T16248] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001 [ 312.513184][T16235] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.536098][T16249] ipt_REJECT: TCP_RESET invalid for non-tcp [ 331.567961][T16253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2866'. [ 331.593598][T16262] netlink: 'syz.2.2868': attribute type 1 has an invalid length. [ 331.607523][T16262] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2868'. [ 332.097346][T16292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'. [ 332.224646][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.244791][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.257418][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.287835][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.299046][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.352890][T16294] wg1 speed is unknown, defaulting to 1000 [ 332.372767][T16294] C speed is unknown, defaulting to 1000 [ 333.786301][T16359] vlan4: entered allmulticast mode [ 333.808169][T16359] geneve1: entered allmulticast mode [ 333.931039][T16360] vlan4: entered allmulticast mode [ 334.079409][T16294] chnl_net:caif_netlink_parms(): no params data found [ 334.395785][ T5832] Bluetooth: hci5: command tx timeout [ 334.539825][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2893'. [ 334.568393][T16406] openvswitch: netlink: Flow key attr not present in new flow. [ 334.647992][T16411] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2894'. [ 334.735182][T16294] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.742874][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.752966][T16294] bridge_slave_0: entered allmulticast mode [ 334.767747][T16294] bridge_slave_0: entered promiscuous mode [ 334.790061][T16294] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.807656][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.815047][T16294] bridge_slave_1: entered allmulticast mode [ 334.837423][T16294] bridge_slave_1: entered promiscuous mode [ 334.954395][ T182] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.063295][T16294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.248311][T16429] !: renamed from dummy0 [ 335.258789][T16445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'. [ 335.292792][T16294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.356974][ T1111] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.389154][ T1111] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.545694][ T1154] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.563162][T16294] team0: Port device team_slave_0 added [ 336.018105][ T12] bond5 (unregistering): (slave gretap2): Releasing active interface [ 336.049996][ T12] bond7 (unregistering): (slave gretap3): Releasing backup interface [ 336.350505][ T12] bond1 (unregistering): Released all slaves [ 336.365372][ T12] bond2 (unregistering): Released all slaves [ 336.379964][ T12] bond3 (unregistering): Released all slaves [ 336.399124][ T12] bond4 (unregistering): Released all slaves [ 336.414374][ T12] bond0 (unregistering): Released all slaves [ 336.429215][ T12] bond5 (unregistering): Released all slaves [ 336.444434][ T12] bond6 (unregistering): Released all slaves [ 336.472031][ T12] bond7 (unregistering): (slave bond8): Releasing backup interface [ 336.480522][ T5832] Bluetooth: hci5: command tx timeout [ 336.487220][ T12] bond7 (unregistering): Released all slaves [ 336.502458][ T12] bond8 (unregistering): Released all slaves [ 336.518585][T16294] team0: Port device team_slave_1 added [ 336.757091][ T12] tipc: Disabling bearer [ 336.791201][ T12] tipc: Left network mode [ 336.894074][T16294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.913293][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.943945][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 336.987688][T16294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.034047][T16508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.153635][T16294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.172658][T16294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.254047][T16294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.274587][T16517] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 337.367208][T16517] bond9: entered promiscuous mode [ 337.372921][T16517] 8021q: adding VLAN 0 to HW filter on device bond9 [ 337.464792][T16522] bond9: (slave bridge4): making interface the new active one [ 337.477335][T16522] bridge4: entered promiscuous mode [ 337.526965][T16522] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 337.630285][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'. [ 337.667414][T16525] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 337.728735][T16517] macvlan0: entered promiscuous mode [ 337.768132][T16517] macvlan0: entered allmulticast mode [ 337.777244][T16517] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 337.846407][ T25] block nbd2: Possible stuck request ffff8880267d0000: control (read@0,1024B). Runtime 30 seconds [ 337.865135][ T25] block nbd2: Possible stuck request ffff8880267d0200: control (read@1024,1024B). Runtime 30 seconds [ 337.877905][ T25] block nbd2: Possible stuck request ffff8880267d0400: control (read@2048,1024B). Runtime 30 seconds [ 337.891429][ T25] block nbd2: Possible stuck request ffff8880267d0600: control (read@3072,1024B). Runtime 30 seconds [ 337.915118][T16550] xt_TCPMSS: Only works on TCP SYN packets [ 338.207183][T16294] hsr_slave_0: entered promiscuous mode [ 338.214090][T16294] hsr_slave_1: entered promiscuous mode [ 338.236580][T16562] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.246697][T16294] debugfs: 'hsr0' already exists in 'hsr' [ 338.252560][T16294] Cannot create hsr debugfs directory [ 338.268565][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2919'. [ 338.413238][T16564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2919'. [ 338.431270][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2919'. [ 338.451316][T16572] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 338.559463][ T5832] Bluetooth: hci5: command tx timeout [ 338.901943][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 338.973432][T16593] netlink: 'syz.3.2925': attribute type 13 has an invalid length. [ 339.114535][T16593] macvtap0: entered allmulticast mode [ 339.136125][T16593] macvtap0: refused to change device tx_queue_len [ 339.229202][ T12] 0: left promiscuous mode [ 339.323708][T16609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.844602][T16600] syzkaller0: entered promiscuous mode [ 339.851247][T16600] syzkaller0: entered allmulticast mode [ 339.864216][T16612] tipc: Enabling not permitted [ 339.871491][T16612] tipc: Enabling of bearer rejected, failed to enable media [ 340.200453][T16294] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.363162][T16294] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.469410][T16648] syzkaller1: entered promiscuous mode [ 340.499844][T16648] syzkaller1: entered allmulticast mode [ 340.622592][T16294] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.639937][ T5832] Bluetooth: hci5: command tx timeout [ 340.781828][ T12] IPVS: stop unused estimator thread 0... [ 340.818302][T16294] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.907289][T16671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2937'. [ 341.184779][T16294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.241355][T16294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.330530][T16294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.382476][T16294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.404208][T16695] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2941'. [ 341.408906][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2943'. [ 341.847317][T16714] netlink: 'syz.0.2945': attribute type 13 has an invalid length. [ 341.852696][T16294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.076333][T16294] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.087920][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2949'. [ 342.122374][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.129673][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.253751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.261116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.319782][T16735] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 342.347673][T16736] netlink: 178776 bytes leftover after parsing attributes in process `syz.2.2953'. [ 342.539959][T16751] syzkaller1: entered promiscuous mode [ 342.555632][T16751] syzkaller1: entered allmulticast mode [ 343.057985][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2961'. [ 343.128740][T16786] syzkaller0: entered promiscuous mode [ 343.134728][T16786] syzkaller0: entered allmulticast mode [ 343.313414][T16294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.449714][T16294] veth0_vlan: entered promiscuous mode [ 343.501227][T16294] veth1_vlan: entered promiscuous mode [ 343.515110][T16803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.630565][T16294] veth0_macvtap: entered promiscuous mode [ 343.699918][T16294] veth1_macvtap: entered promiscuous mode [ 343.760201][T16294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.794250][T16294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.842580][ T1154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.864185][ T1154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.893711][ T1154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.913688][ T1154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.226475][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.275550][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.409593][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.436801][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.643278][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 344.685836][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 345.026797][T16868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2982'. [ 345.315138][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'. [ 345.343653][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.361897][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.377368][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.391837][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.401356][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.569331][T16879] wg1 speed is unknown, defaulting to 1000 [ 345.589964][T16879] C speed is unknown, defaulting to 1000 [ 346.012302][T16905] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2991'. [ 346.098211][T16911] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.2991'. [ 346.383662][T16879] chnl_net:caif_netlink_parms(): no params data found [ 346.454660][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 346.489399][T16930] openvswitch: netlink: EtherType 53b is less than min 600 [ 346.806763][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.814809][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.822773][T16879] bridge_slave_0: entered allmulticast mode [ 346.831280][T16879] bridge_slave_0: entered promiscuous mode [ 346.841446][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.848852][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.856226][T16879] bridge_slave_1: entered allmulticast mode [ 346.876723][T16879] bridge_slave_1: entered promiscuous mode [ 347.060517][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.116072][T16961] dvmrp0: left allmulticast mode [ 347.202145][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.228752][T16964] netlink: 'syz.1.3003': attribute type 2 has an invalid length. [ 347.237956][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 347.241792][T16964] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 347.435836][ T5843] Bluetooth: hci0: command tx timeout [ 347.437928][T16879] team0: Port device team_slave_0 added [ 347.494041][T16879] team0: Port device team_slave_1 added [ 347.609358][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.646271][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.721227][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.749543][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.757750][T16994] openvswitch: netlink: IP tunnel dst address not specified [ 347.789642][T16986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3009'. [ 347.799728][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.839859][T16986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3009'. [ 347.911110][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.953508][T16997] syzkaller0: entered promiscuous mode [ 347.972034][T16997] syzkaller0: entered allmulticast mode [ 348.000921][T16988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3009'. [ 348.278662][T17016] netlink: 'syz.1.3015': attribute type 3 has an invalid length. [ 348.283052][T16879] hsr_slave_0: entered promiscuous mode [ 348.317262][T16879] hsr_slave_1: entered promiscuous mode [ 348.563028][T17029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3016'. [ 348.670977][T17034] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3018'. [ 349.170956][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3023'. [ 349.199789][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.213359][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.508547][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.517857][ T5843] Bluetooth: hci0: command tx timeout [ 349.550528][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.753061][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.786411][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.033806][T16879] : (slave netdevsim0): Releasing backup interface [ 350.042230][T16879] : (slave netdevsim0): the permanent HWaddr of slave - 66:2a:6e:9f:ff:1b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 350.068862][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.080694][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.256085][T17102] syzkaller0: entered promiscuous mode [ 350.261795][T17102] syzkaller0: entered allmulticast mode [ 350.418052][T17123] xt_hashlimit: size too large, truncated to 1048576 [ 350.731632][T16879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.750231][T16879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.783611][T16879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.824363][T16879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 351.024727][T17151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3042'. [ 351.127228][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.204146][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.243105][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.250719][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.271675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.278863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.321949][T17162] netlink: 'syz.1.3045': attribute type 5 has an invalid length. [ 351.352002][T17161] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3046'. [ 351.397834][T17164] openvswitch: netlink: IP tunnel dst address not specified [ 351.473969][T17165] netlink: 'syz.0.3046': attribute type 29 has an invalid length. [ 351.485434][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 351.520615][T17169] netlink: 'syz.2.3047': attribute type 23 has an invalid length. [ 351.595550][ T5843] Bluetooth: hci0: command tx timeout [ 352.010079][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.367993][T17199] __nla_validate_parse: 3 callbacks suppressed [ 352.368014][T17199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3057'. [ 352.407365][T17199] macvlan0: entered promiscuous mode [ 352.484774][T17208] tipc: Started in network mode [ 352.490967][T17208] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 352.498823][T17208] tipc: Enabled bearer , priority 2 [ 352.596331][T17212] netlink: 'syz.2.3059': attribute type 2 has an invalid length. [ 352.781963][T16879] veth0_vlan: entered promiscuous mode [ 352.817485][T16879] veth1_vlan: entered promiscuous mode [ 352.885199][T16879] veth0_macvtap: entered promiscuous mode [ 352.898678][T16879] veth1_macvtap: entered promiscuous mode [ 352.944303][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 352.981183][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 353.006509][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.060075][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.111112][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.136746][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.185582][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.215454][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.304160][T17233] SET target dimension over the limit! [ 353.470254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.504011][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.617676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.625610][ T5889] tipc: Node number set to 10463914 [ 353.640001][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.675646][ T5843] Bluetooth: hci0: command tx timeout [ 353.869388][T17252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 354.137111][T17268] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3074'. [ 354.175693][T17268] xt_policy: neither incoming nor outgoing policy selected [ 354.379227][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.397721][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.406713][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.415570][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.434409][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.550312][T17277] wg1 speed is unknown, defaulting to 1000 [ 354.559705][T17277] C speed is unknown, defaulting to 1000 [ 354.902113][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 355.154683][T17317] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3083'. [ 355.181375][T17317] xt_l2tp: v2 tid > 0xffff: 1114244 [ 355.188607][T17314] bond0: entered allmulticast mode [ 355.194007][T17314] C: entered allmulticast mode [ 355.209408][T17319] netlink: 'syz.1.3086': attribute type 1 has an invalid length. [ 355.273933][T17277] chnl_net:caif_netlink_parms(): no params data found [ 355.383873][T17324] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 355.400097][T17325] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 355.490639][T17324] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 355.492070][T17325] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 355.506967][T17329] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 355.603541][T17332] bridge0: port 1(veth0_to_bridge) entered blocking state [ 355.631569][T17332] bridge0: port 1(veth0_to_bridge) entered disabled state [ 355.641214][T17332] veth0_to_bridge: entered allmulticast mode [ 355.650362][T17332] veth0_to_bridge: entered promiscuous mode [ 355.687989][T17277] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.696817][T17277] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.704934][T17277] bridge_slave_0: entered allmulticast mode [ 355.716863][T17277] bridge_slave_0: entered promiscuous mode [ 355.731317][T17277] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.740006][T17277] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.747916][T17277] bridge_slave_1: entered allmulticast mode [ 355.760071][T17277] bridge_slave_1: entered promiscuous mode [ 355.874000][T17277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.913915][T17277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.971268][T17349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3093'. [ 356.062116][T17277] team0: Port device team_slave_0 added [ 356.132916][T17277] team0: Port device team_slave_1 added [ 356.222428][T17365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3096'. [ 356.240553][T17277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.284489][T17277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.349853][T17277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.409791][T17277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.423773][T17277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.425058][T17380] netlink: 'syz.0.3101': attribute type 11 has an invalid length. [ 356.454639][T17277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.550586][T17376] sit0: entered promiscuous mode [ 356.556048][ T5843] Bluetooth: hci2: command tx timeout [ 356.571849][T17376] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 356.605702][T17376] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3102'. [ 356.681411][T17391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.728380][T17277] hsr_slave_0: entered promiscuous mode [ 356.749293][T17277] hsr_slave_1: entered promiscuous mode [ 356.801391][T17277] debugfs: 'hsr0' already exists in 'hsr' [ 356.820560][T17277] Cannot create hsr debugfs directory [ 356.949726][T17411] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.977341][T17411] bond1: (slave lo): Enslaving as an active interface with an up link [ 356.989377][T17411] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 357.008353][T17405] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 357.509208][T17277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.525075][T17277] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.541652][T17435] xt_l2tp: v2 sid > 0xffff: 1114112 [ 357.570760][T17437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3116'. [ 357.681288][T17277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.713484][T17277] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.978060][T17277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.003917][T17460] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 358.004067][T17277] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.179397][T17463] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.202279][T17463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.277412][T17463] tipc: Resetting bearer [ 358.299388][T17463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.324536][T17463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.336947][T17463] hsr0: Slave B (c0) is not up; please bring it up to get a fully working HSR network [ 358.350259][T17463] veth1_macvtap: left promiscuous mode [ 358.361462][T17463] veth1_macvtap: entered promiscuous mode [ 358.384356][T17463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.398871][T17463] veth0_macvtap: entered promiscuous mode [ 358.410471][T17463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.418474][T17463] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 358.459459][T17277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.470590][T17277] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.539869][ T182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.556018][ T182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.587344][ T182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.610365][ T695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.625196][ T182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.636672][ T5843] Bluetooth: hci2: command tx timeout [ 358.734747][T17492] netlink: 'syz.1.3128': attribute type 11 has an invalid length. [ 358.749877][T17492] netlink: 'syz.1.3128': attribute type 11 has an invalid length. [ 358.759901][T17492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3128'. [ 358.877158][T17496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 359.021635][T17277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 359.070049][T17277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 359.121866][T17277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 359.154262][T17277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.174339][T17513] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 359.493903][T17531] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3136'. [ 359.792262][T17277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.867126][T17277] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.911769][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.919193][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.928918][T17561] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3142'. [ 359.979001][T17561] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3142'. [ 360.009074][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.016474][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.252441][T17575] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 360.311177][T17575] vlan2: entered promiscuous mode [ 360.335546][T17575] macvlan1: entered promiscuous mode [ 360.345057][T17575] vlan2: entered allmulticast mode [ 360.351542][T17575] macvlan1: entered allmulticast mode [ 360.357485][T17575] veth1_vlan: entered allmulticast mode [ 360.716344][ T5843] Bluetooth: hci2: command tx timeout [ 360.897952][T17277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.050834][T17277] veth0_vlan: entered promiscuous mode [ 361.096388][T17277] veth1_vlan: entered promiscuous mode [ 361.234514][T17277] veth0_macvtap: entered promiscuous mode [ 361.267808][T17277] veth1_macvtap: entered promiscuous mode [ 361.333503][T17630] Bluetooth: MGMT ver 1.23 [ 361.338081][T17277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.342391][T17277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.413419][T17630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'. [ 361.439782][T17633] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3159'. [ 361.459109][ T695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.473180][ T695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.531781][ T695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.556678][ T695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.601510][T17643] tipc: Enabled bearer , priority 0 [ 361.766040][T17639] syzkaller0: entered promiscuous mode [ 361.771836][T17639] syzkaller0: entered allmulticast mode [ 361.780218][T17639] tipc: Resetting bearer [ 361.838447][ T695] tipc: Resetting bearer [ 361.898475][T17646] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 361.928481][T17649] tipc: Enabling of bearer rejected, failed to enable media [ 361.944483][T17655] bond10: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.964620][T17655] bond10: (slave C): Enslaving as an active interface with an up link [ 361.978432][T17655] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 362.001432][T17656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 362.070649][ T5928] C speed is unknown, defaulting to 1000 [ 362.101899][T17637] tipc: Resetting bearer [ 362.795515][ T5843] Bluetooth: hci2: command tx timeout [ 362.876466][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 363.887573][T17637] tipc: Disabling bearer [ 363.897228][ T29] C speed is unknown, defaulting to 1000 [ 363.915814][ T24] C speed is unknown, defaulting to 1000 [ 364.038286][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.070999][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.229869][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.254735][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.496148][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3173'. [ 364.533015][T17721] x_tables: duplicate underflow at hook 1 [ 364.549016][T17719] openvswitch: netlink: IP tunnel dst address not specified [ 364.947552][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.960949][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.974107][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.992002][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.009080][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.129878][T17742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3178'. [ 365.240460][T17732] wg1 speed is unknown, defaulting to 1000 [ 365.268740][T17732] C speed is unknown, defaulting to 1000 [ 365.730037][T17761] tipc: Enabling of bearer rejected, failed to enable media [ 365.748160][T17766] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3185'. [ 365.871607][T17766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.881864][T17768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.138003][T17732] chnl_net:caif_netlink_parms(): no params data found [ 366.211147][T17747] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3180'. [ 366.297677][T17791] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3189'. [ 366.326368][T17791] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3189'. [ 366.482054][T17800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.537798][T17800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3191'. [ 366.585742][T17732] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.593807][T17732] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.603909][T17732] bridge_slave_0: entered allmulticast mode [ 366.626845][T17732] bridge_slave_0: entered promiscuous mode [ 366.646848][T17732] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.665840][T17732] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.684429][T17732] bridge_slave_1: entered allmulticast mode [ 366.709102][T17732] bridge_slave_1: entered promiscuous mode [ 366.721546][T17812] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.767562][T17812] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.787770][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 366.797316][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3196'. [ 366.850095][T17732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.875024][T17732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.931537][T17732] team0: Port device team_slave_0 added [ 366.949331][T17732] team0: Port device team_slave_1 added [ 367.009813][T17732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.017079][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.044557][T17732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.061645][T17732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.068931][T17732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.098718][T17732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.116363][ T5843] Bluetooth: hci4: command tx timeout [ 367.135940][T17835] netlink: 'syz.4.3201': attribute type 11 has an invalid length. [ 367.214087][T17732] hsr_slave_0: entered promiscuous mode [ 367.223364][T17732] hsr_slave_1: entered promiscuous mode [ 367.231110][T17732] debugfs: 'hsr0' already exists in 'hsr' [ 367.237614][T17732] Cannot create hsr debugfs directory [ 367.332473][T17835] netlink: 'syz.4.3201': attribute type 21 has an invalid length. [ 367.345388][T17835] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3201'. [ 367.491993][T17732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.504615][T17732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.626382][T17732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.651078][T17732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.670603][T17841] xt_ecn: cannot match TCP bits for non-tcp packets [ 367.847125][T17849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.860247][T17732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.889876][T17732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.931639][ T25] block nbd2: Possible stuck request ffff8880267d0000: control (read@0,1024B). Runtime 60 seconds [ 367.943477][ T25] block nbd2: Possible stuck request ffff8880267d0200: control (read@1024,1024B). Runtime 60 seconds [ 367.955156][ T25] block nbd2: Possible stuck request ffff8880267d0400: control (read@2048,1024B). Runtime 60 seconds [ 367.968413][ T25] block nbd2: Possible stuck request ffff8880267d0600: control (read@3072,1024B). Runtime 60 seconds [ 368.067671][T17732] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.079310][T17732] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.305040][T17732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.321199][T17732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.351556][T17732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.378711][T17732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.656908][T17732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.737931][T17732] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.779629][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.787637][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.814623][T17873] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 368.854821][ T695] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.862344][ T695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.195735][ T5843] Bluetooth: hci4: command tx timeout [ 369.549453][T17732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.566169][T17909] __nla_validate_parse: 2 callbacks suppressed [ 369.566191][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 369.647393][T17912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3220'. [ 369.760488][T17732] veth0_vlan: entered promiscuous mode [ 369.770661][T17921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.793406][T17732] veth1_vlan: entered promiscuous mode [ 369.872981][T17732] veth0_macvtap: entered promiscuous mode [ 369.918315][T17732] veth1_macvtap: entered promiscuous mode [ 369.982152][T17927] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 370.017188][T17927] bond8 (unregistering): Released all slaves [ 370.458365][T17943] netlink: get zone limit has 4 unknown bytes [ 370.499119][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.537083][T17732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.569788][T17732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.606288][ T1111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.630870][T17949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.632660][ T1111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.638352][T17949] IPv6: NLM_F_CREATE should be set when creating new route [ 370.638471][T17949] IPv6: NLM_F_CREATE should be set when creating new route [ 370.638503][T17949] IPv6: NLM_F_CREATE should be set when creating new route [ 370.651018][T17949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.692102][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.706298][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.807134][T17953] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3234'. [ 370.935483][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.970813][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.067999][ T695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.093789][ T695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.098270][T17967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3236'. [ 371.130424][T17969] xt_hashlimit: size too large, truncated to 1048576 [ 371.140066][T17969] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3237'. [ 371.283273][ T5843] Bluetooth: hci4: command tx timeout [ 371.397459][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'. [ 371.461133][T17986] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3240'. [ 371.598759][T17989] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3243'. [ 371.756726][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.802737][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.822330][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.832150][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.839243][ T5840] Bluetooth: hci0: command tx timeout [ 371.847648][T17999] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 371.867977][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.877963][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.878162][T17999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 371.994309][T18006] xt_TCPMSS: Only works on TCP SYN packets [ 372.091666][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 372.210484][T17994] wg1 speed is unknown, defaulting to 1000 [ 372.211291][T18013] syzkaller0: entered promiscuous mode [ 372.243454][T18013] syzkaller0: entered allmulticast mode [ 372.256729][T17994] C speed is unknown, defaulting to 1000 [ 372.637987][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 372.711243][T17994] chnl_net:caif_netlink_parms(): no params data found [ 372.882491][T17994] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.890777][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.898229][T17994] bridge_slave_0: entered allmulticast mode [ 372.910238][T17994] bridge_slave_0: entered promiscuous mode [ 372.924663][T17994] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.938853][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.946397][T17994] bridge_slave_1: entered allmulticast mode [ 372.955179][T17994] bridge_slave_1: entered promiscuous mode [ 372.958866][T18049] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 373.007310][T17994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.023148][T17994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.149595][T17994] team0: Port device team_slave_0 added [ 373.169691][T17994] team0: Port device team_slave_1 added [ 373.253445][T17994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.260914][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.293203][T17994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.307030][T17994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.314098][T17994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.356064][ T5832] Bluetooth: hci4: command tx timeout [ 373.377572][T17994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.454958][T17994] hsr_slave_0: entered promiscuous mode [ 373.471489][T17994] hsr_slave_1: entered promiscuous mode [ 373.480822][T17994] debugfs: 'hsr0' already exists in 'hsr' [ 373.494319][T17994] Cannot create hsr debugfs directory [ 373.796855][T18076] netlink: 'syz.2.3268': attribute type 4 has an invalid length. [ 373.844618][T17994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.872610][T17994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.944902][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.981086][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.995760][ T5832] Bluetooth: hci3: command tx timeout [ 374.003824][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.053675][T17994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.066949][T17994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.083692][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.114013][T17994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.124659][T17994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.188943][T17994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.199602][T17994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.374014][T17994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.385100][T17994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.397717][T17994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.410102][T17994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.491915][T17994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.513199][T17994] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.527658][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.534964][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.553015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.560170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.738149][T17994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.784174][T17994] veth0_vlan: entered promiscuous mode [ 374.800330][T17994] veth1_vlan: entered promiscuous mode [ 374.829543][T17994] veth0_macvtap: entered promiscuous mode [ 374.839794][T17994] veth1_macvtap: entered promiscuous mode [ 374.859246][T17994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.873839][T17994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.891509][ T695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.901645][ T695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.916327][ T695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.926439][ T695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.018863][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.028417][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.062130][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.072765][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.086526][ T5832] Bluetooth: hci3: command tx timeout [ 378.051481][ T5193] udevd[5193]: worker [5881] /devices/virtual/block/nbd2 is taking a long time [ 378.156329][ T5843] Bluetooth: hci3: command tx timeout [ 380.235795][ T5843] Bluetooth: hci3: command tx timeout [ 389.038720][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.214179][T18120] syzkaller0: entered promiscuous mode [ 393.228698][T18120] syzkaller0: entered allmulticast mode [ 393.249183][T18125] pim6reg1: entered promiscuous mode [ 393.254572][T18125] pim6reg1: entered allmulticast mode [ 393.282064][T18123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.447146][T18140] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 393.458410][ T24] IPVS: starting estimator thread 0... [ 393.485139][T18138] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 393.563588][T18145] __nla_validate_parse: 1 callbacks suppressed [ 393.563609][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3277'. [ 393.566132][T18142] IPVS: using max 28 ests per chain, 67200 per kthread [ 393.579658][T18145] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 393.601968][T18145] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 393.616785][T18145] team0: Failed to send options change via netlink (err -105) [ 393.624756][T18145] team0: Port device batadv1 added [ 393.660626][T18150] tipc: Enabled bearer , priority 0 [ 393.740168][T18150] syzkaller0: entered promiscuous mode [ 393.746275][T18150] syzkaller0: entered allmulticast mode [ 393.753001][T18150] tipc: Resetting bearer [ 393.784631][T18148] tipc: Resetting bearer [ 395.866398][T18148] tipc: Disabling bearer [ 396.017545][T18190] atomic_op ffff8880570ea198 conn xmit_atomic 0000000000000000 [ 396.621553][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 396.621663][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 396.659196][T18222] xt_hashlimit: size too large, truncated to 1048576 [ 397.196405][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3307'. [ 397.418002][T18264] openvswitch: netlink: Message has 16 unknown bytes. [ 397.427183][T18225] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 397.439569][T18225] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 397.448188][T18225] CPU: 1 UID: 0 PID: 18225 Comm: syz.2.3298 Not tainted syzkaller #0 PREEMPT(full) [ 397.457847][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.468229][T18225] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 397.474425][T18225] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 29 30 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 397.494582][T18225] RSP: 0018:ffffc900032378e8 EFLAGS: 00010207 [ 397.500779][T18225] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888028963c80 [ 397.508961][T18225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033f35000 [ 397.517052][T18225] RBP: ffff888033f35000 R08: ffff888028963c80 R09: 0000000000000008 [ 397.525151][T18225] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 397.533238][T18225] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000646f3c [ 397.541240][T18225] FS: 00007f49a0ba26c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 397.550240][T18225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.556858][T18225] CR2: 00007ff3fbbe6158 CR3: 0000000078ee8000 CR4: 00000000003526f0 [ 397.564952][T18225] Call Trace: [ 397.568285][T18225] [ 397.571245][T18225] ? __alloc_skb+0x4e5/0x7d0 [ 397.576292][T18225] ? skb_put+0x11b/0x210 [ 397.580574][T18225] rose_write_internal+0x1256/0x1b60 [ 397.586057][T18225] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.591388][T18225] ? __pfx_rose_write_internal+0x10/0x10 [ 397.597055][T18225] ? timer_delete+0x245/0x340 [ 397.601854][T18225] rose_release+0x25b/0x510 [ 397.606399][T18225] sock_close+0xc3/0x240 [ 397.610687][T18225] ? __pfx_sock_close+0x10/0x10 [ 397.615755][T18225] __fput+0x44f/0xa70 [ 397.619874][T18225] task_work_run+0x1d9/0x270 [ 397.624682][T18225] ? __pfx_task_work_run+0x10/0x10 [ 397.629826][T18225] ? task_work_add+0x395/0x440 [ 397.634788][T18225] ? __pfx_task_work_add+0x10/0x10 [ 397.640098][T18225] get_signal+0x11eb/0x1330 [ 397.644637][T18225] arch_do_signal_or_restart+0xbc/0x830 [ 397.650209][T18225] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.656396][T18225] exit_to_user_mode_loop+0x86/0x480 [ 397.661709][T18225] ? rcu_is_watching+0x15/0xb0 [ 397.666506][T18225] do_syscall_64+0x32d/0xf80 [ 397.671216][T18225] ? trace_irq_disable+0x3b/0x150 [ 397.676402][T18225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.682942][T18225] ? clear_bhb_loop+0x40/0x90 [ 397.687910][T18225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.693921][T18225] RIP: 0033:0x7f499fd9c799 [ 397.698467][T18225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.718199][T18225] RSP: 002b:00007f49a0ba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 397.726745][T18225] RAX: 0000000000000000 RBX: 00007f49a0016180 RCX: 00007f499fd9c799 [ 397.734747][T18225] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 397.742847][T18225] RBP: 00007f499fe32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 397.750945][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.759039][T18225] R13: 00007f49a0016218 R14: 00007f49a0016180 R15: 00007ffdc3622ae8 [ 397.767050][T18225] [ 397.770089][T18225] Modules linked in: [ 397.775526][T18225] ---[ end trace 0000000000000000 ]--- [ 397.782722][T18225] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 397.788843][T18225] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 29 30 30 f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 397.818789][T18225] RSP: 0018:ffffc900032378e8 EFLAGS: 00010207 [ 397.831121][T18225] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888028963c80 [ 397.847998][T18225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888033f35000 [ 397.856526][T18225] RBP: ffff888033f35000 R08: ffff888028963c80 R09: 0000000000000008 [ 397.864539][T18225] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 397.873300][T18225] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000646f3c [ 397.881908][T18225] FS: 00007f49a0ba26c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 397.892382][T18225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.909727][T18225] CR2: 00007f51d0be82f8 CR3: 0000000078ee8000 CR4: 00000000003526f0 [ 397.926950][T18225] Kernel panic - not syncing: Fatal exception [ 397.933898][T18225] Kernel Offset: disabled [ 397.938236][T18225] Rebooting in 86400 seconds..