last executing test programs: 5.965384955s ago: executing program 4 (id=7720): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000540)={&(0x7f0000000040)=0x8001, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000500)}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000600)={&(0x7f0000000580)='\x00', &(0x7f00000005c0)='#@-+],/-\x00', 0x2}) sendfile(r0, r0, 0x0, 0x9) ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000640), 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000780)={r1, &(0x7f0000000680)='\x00', 0x12c43, &(0x7f00000006c0)={@align=0xfffffffffffffffe, {0x4, 0x1c4a, 0xc}}, 0x7fffffff, &(0x7f0000000700), &(0x7f0000000740)=0x8}) connect$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x1000, @none, 0x400, 0x1}, 0xe) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4064) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000a00)={r2, &(0x7f0000000900)='\xff\xff\xff\xff\xff\xff', 0x40000, &(0x7f0000000940)={@_ha_fsid={[0x10000, 0x4]}, {0x5, 0xb, 0x9, 0x18ce}}, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x9}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000a40)={0x0, 'wg2\x00', {}, 0x8}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x160, r5, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d2eedd6e8010008fae81642e6cc65ee0"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="46fc35cf8b19ac59a116a8b7d0dfb62be8c300311271af99"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4a2a451964278fe5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a471247df12445722f7daba09798ac44f99d42af3ca7cfc0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="68702cb312958d2748c2c7ad08b35151bc4e7be51c6714f3824bede1c90c5aa3"}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5765a127d340a0572e7d8be7f857f83a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5ce4dcd535d16654dbc8b1daf0f28051"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="85cb8436041a84a839a3a68d7326d63ba58ee91d3e5b3ffa59631d726553307d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d81e30279a3a5681"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e35b4a243f776c09"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7abcb0f767fc475abc71047978c860e22351393bf5b10242"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "263c2e1ca5377eb2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6770a5f6563423431fad9411fa0eb076"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f53f032d2b118bf12ea92a1c25ef6e69"}]}]}, 0x160}}, 0x4002000) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000d00)={'netpci0\x00', @broadcast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r6, 0x600, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001100)={'ip6_vti0\x00', &(0x7f0000001080)={'ip6tnl0\x00', 0x0, 0x29, 0xa0, 0x8, 0x6, 0x42, @remote, @mcast1, 0x700, 0x24773cdb781db879, 0xfffffff8}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000011c0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x13, 0x19, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x4, 0x8, 0x9, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query, @jmp={0x5, 0x1, 0x5, 0x2, 0x4, 0x1a0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f80)='syzkaller\x00', 0x55198788, 0xac, &(0x7f0000000fc0)=""/172, 0x41000, 0x9, '\x00', r7, @fallback=0x17, r2, 0x8, &(0x7f0000001140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x0, 0x8, 0x4, 0x7}, 0x10, r8, r4, 0x1, &(0x7f0000001200)=[r2, r4, r2, r4, r2], &(0x7f0000001240)=[{0x2, 0x2, 0x9, 0xa}], 0x10, 0x8}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000001700)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f00000013c0)={0x2ec, r9, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x797}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74982d60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed04}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x519}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000005}, 0xc808) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000001a80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001780)={0x29c, r5, 0x20, 0x70bd29, 0xfffffff8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x24a, 0x2a, [@preq={0x82, 0x88, {{0x1, 0x0, 0x1}, 0xff, 0xa, 0x800, @device_a, 0xe52, @void, 0x8, 0x3, 0xa, [{{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x292a}, {{0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x40000000}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x5d5a}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x80000000}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x8}}, @random_vendor={0xdd, 0xa3, "6bdd965adc383c4ea1ff33d26e4dc2cb45d6d0568a44ee8908b947623fe9bbb8395834d9d6b935ff3555ddb965b13db4514d8723938fb85089e589c5d3b6cc5bc7054830bb7b5b3adbb15bb62abd92d1851b7a44de0711ad88a04a7663b2bc7dbbae3a43efb0c7ffdc3325cc76aa2778801ce8576fba4c4469dc22e91b2b53991b02d56df67b2e34376761341721132b85e6de6b319b8f61ab2b74b41887cb374194ed"}, @channel_switch={0x25, 0x3, {0x1, 0xb4, 0x7}}, @measure_req={0x26, 0x3, {0xa1, 0xc5}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0xfa, {0x7, 0x7, "c602ddf52656d909aa3c5832c8e74d6e", "d39fde7186ec8f65ea7f92291672b0235e4abeea30b547af91590b5e70d704b6", "cbedf15bd38a138cc4eca0c8f90f443a793109242520f7c9f61c6215acb31e19", [{0x1, 0x12, "674c231e8c43986e35bddf586fb60038c28d"}, {0x1, 0x1e, "6f1e5fd83fd263c5aa213d4c3a3c7004cb4ce5d0dc5ea894348f6fa71ab4"}, {0x3, 0x18, "25da9e8b3d65812ba796a11cf4983477e80072d4fb6034cc"}, {0x2, 0x26, "4958b2bbcc5f0dfe7efb23ed279c6d6f09c6e05405c7a5a36dd93efc91c9460740867eeee41a"}, {0x3, 0x18, "d29132d96a395e7bc89c474b8f2806e43b00482549fa6b83"}, {0x4, 0x7, "5aceacc8acdcb8"}, {0x4, 0xd, "d5127a9a42a31f857bf6a8be22"}]}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@challenge={0x10, 0x1, 0x5}, @mic={0x8c, 0x10, {0x602, "9fb56e9a5eae", @short="24f115da9b3e6269"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x29c}}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001ac0)=0x9, 0x4) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000001b00)={0x1}) bind$bt_l2cap(r4, &(0x7f0000001b40)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1}, 0xe) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x198, r11, 0x407, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 5.699643101s ago: executing program 0 (id=7723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) r3 = socket$kcm(0x10, 0x40000000d, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r5, r4, 0x0, 0xbdc4) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="25b49508932a256f7d7e0d7cf8666527dfa37083ddd70fe944a55538eedf671b3a665884", @ANYRES64=r1], 0xfe33) (async) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="25b49508932a256f7d7e0d7cf8666527dfa37083ddd70fe944a55538eedf671b3a665884", @ANYRES64=r1], 0xfe33) readv(r3, &(0x7f0000000580)=[{&(0x7f0000001b80)=""/4092, 0xffc}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) 5.698651743s ago: executing program 4 (id=7724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8b000000000000001c00128009000100626f6e64000000000c00028008000a00fdffffff7e6f0e0e003993b52223e3ffe34dd8045694ef0178f6721ab10255c35246630532a6d061228ea2c05f475f03a32220156dbde30e9f46f6ac5ae17d19c2e571c9c4d8fe80872975785a8d479aa6c1afc363d721d6e287f9570372e49edcd019840e6258120719ab91f11da8c9b46508e58ff3a9942693fee2a3fb086225e92a9ecb05623f3c7a61701bf8c6e9eafb11048b8a5453630c4b9d3b8a0ea1766772cefdb2e129a4bf"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000100)=0x2, 0x4) 5.475673474s ago: executing program 0 (id=7727): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xcb5) accept4$unix(r0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) listen(r0, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xcb5) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) 5.429360039s ago: executing program 0 (id=7728): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x8, @private0, 0x4005}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x8000}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r9, &(0x7f0000002a80)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbf198a084ce1c86dd62e6839300442f"], 0x7e) 5.186267238s ago: executing program 4 (id=7731): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="74ac7b350a7d81bf957f9f2ff51e0000000000000000", 0x16}, {&(0x7f0000000300)='w', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)='+', 0x1}, {&(0x7f0000000140)="88", 0x1}, {&(0x7f0000000480)='v', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)="983e", 0x2}, {&(0x7f0000000780)="0e", 0x1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000900)='\v', 0x1}, {&(0x7f0000000940)=']', 0x1}, {&(0x7f0000000240)="e0", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)="aa", 0x1}, {&(0x7f0000000540)="94b0", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d40)="ec", 0x1}, {&(0x7f0000000e00)='C', 0x1}, {&(0x7f0000000580)="5f1293004b1c7ddbdfcbf7d833e4faf222059209083f0ddac9363d7b2378f208b0d9f42012073017cd184099c11055c5a67ae00db1f780d0265e3b133b068a697ffec71ca936db7d8a4ef60712b7ba5388b4828a3a3fe9b0dd7d0c5f0715b5344e355a91110427c8be12d58bcbaa9db0a4e7648f61527f7948ae0000000000", 0x7f}, {&(0x7f0000002a80)='\n', 0x1}, {&(0x7f0000000fc0)="ee00004dfaca59a0070000005f8c334db67d58cabb8808a613758d54863412c384b842619547bd5482b34e97272b53b13c06620fb120ed8854df31e5ba0a6f61e9", 0x41}, {&(0x7f00000010c0)='H', 0x1}, {&(0x7f0000001180)='\'', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001380)="b8", 0x1}, {&(0x7f0000001440)="a5", 0x1}, {&(0x7f0000000b00)="dea3c63f1782cff7f3b4b16c04cc4a803340eea0ce3821559918c9914a929a2fb1fcc977febaf5c09dc92a00b3a725adb9cd899c8ce388dc7243f1ff4e027c566f62c0e1e66b2400000000000019938f77165a65797f259f14f5200cf16ad92fc12eeca34693a66dbd48d6076627218c0b1568a8ca00aeeac925bf284bcc4949406a4f74e2560500000039bab39bb9bf4de4580e4158dee3ebb7466a8c61a45500264f069e8c9c68a46f35b8d4c9b85d8b7bcd8be2", 0xb5}, {&(0x7f0000001540)="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", 0xac1}, {&(0x7f00000004c0)="93", 0x1}], 0x5}}, {{&(0x7f0000000700)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000000680)="8ced60921f80a619c4a53c42e66d06bd21ed249abf18319763cfae3b881fb9b69fdd12cf3f56725e8db8a807bbe513384c0cbb0b611fc335e463d3aca24f7c417c3a2e028589b98a9e5bd5a9146bf95a1e92b5ce96988163e51476be31d4e3e52a26620610f1ff397f67", 0x6a}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="aebb5306e93fa5729c1842cdbceba74f403446465657bdef52437476415f693a8c31f0e9e927e55c88eb61a1986aabca964e557193e30f1d852f71242b330f678329849a78efd3725fd204530d9e3223f2a362d1c28dfe9f83ebdf4d2012773c434cbcdcdff40a7c14e44bd80a1a98ac97b581f845e535bc0ffc5297", 0x7c}, {&(0x7f0000003b40)="f41838e154299bfc45b481807fe347d78e3f242cad8f38dfeaf707d321b1ee62b9de09b896e7da71fcf1518b95948b2761fa2f7d15dd3b89ec1efd1465cf7aca06528d3977bc3b580a70c9c575927ec9d0d12e441e2f9d38c3912ba9885587cbc7f1e1d3ec4f4d80adae86d9a17275fd5cd53aad4a9db149d22d25e2dfad46f2f31f2ea51dbd41dc8969", 0x8a}], 0x4, &(0x7f0000003c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}}], 0x7, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000600), 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r7, @ANYBLOB="05002d000100000008000600", @ANYRES8=r5], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) 5.027393776s ago: executing program 1 (id=7734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0x100, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f00000000c0), &(0x7f0000000a40)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket(0x29, 0x1, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0xd}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x8c0, 0x30, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x240, 0x1, [@m_skbedit={0x4c, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x16, 0x6, "83e6be85e739f690d3debdd90ae1737562e8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x11c, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000005, 0x4, 0x80000000}, 0x4}}]}, {0xd0, 0x6, "e70ba13d9a1615152ea10afac56148110e5979373853cba81c457f6765c7b4e951d288c7b024a3eda2dd876e7b6ce688f9e2e3e8c83360631324031a3e12b3fa742ccf444509ad3ba7b9b05711f49f6ac46b2e543f7abbd1eba1d06d42b4cee6a5511e87dac6d7e57943955e44e64207bc757ae866c0301c426421b9096f12be77a8af8ebfc7806c8ed6b46027591433b3b9d6f9ca3d10f1634c8b0b406f84e9ba7ef097eb75b2838d8a8f556aebacc8c4a3f71ac4b7af487bc4ae8ca19910cc5d5bfe0f0bd11eba243e5530"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xd4, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xff}]}, {0x7e, 0x6, "f34d3985ec18696ec50a322c3bb05978fecf6f8f01124aa19b1f4d32cadb699eeef8bf9af8bf4ab646b9f7367e253a64665ec0ff66f055cd5420ec803d8fb493b91bcbae5ce8c8870f2bf5cdd1b3194e4a8bc96f0c5c0cb49e5ae34604fe2f43f2ecb8526a13b8175f2f19e6e73294e6acbfff4dd3e006bbc979"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x66c, 0x1, [@m_mpls={0xfc, 0x3, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x7, 0x2, 0x4, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x7, 0x3, 0x5, 0x3}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1ff, 0x5, 0x3, 0x67e, 0x7}, 0x3}}]}, {0x63, 0x6, "6138102dc34d8f3bf97dc85699633df2382ea6f67ad7799b2753c629ecc763a45500dc568552cbca5aa445b62c779d94e767b9fd2af2fa5b343edd1ff5059441125d8eea52574623d635b66832e2a48d2334e864d8e5fbc73592b0b95aa31f"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x74, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x888e}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x30, 0x6, "4cc271b57fe2313f40ca4fba59110b8bbb95751666a3de68ca5e3e94152d734a40e660debd07c211cea3ad4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x10c, 0x11, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '@-&!!\xf8+]\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0xa, 0x2, 0x2, 0x8000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4d28bb5a, 0x1, 0x6, 0x4, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffff001, 0x803, 0x7, 0x8, 0x2}}]}, {0x85, 0x6, "cef2cda5882364be2d1e4867cd5c2870cdb644962c9d54205a432e610ac70a31cd5e05ed873afd391a863da0a9f3154d62175b22b5943a63471cbd3f6d9ead389a081e94c572e8cf0710e92b9b20881298047520af1a66a5050b7785b594bd1990f94bed63f9639339c5f4c29937b8ed1b8d2133c6dea6917991718d3b85129523"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x104, 0x6, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff0000, 0x40000000, 0x10000000, 0x1, 0x6}, @empty, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0x10000000, 0x0, 0x3}, @broadcast, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x3586ad96, 0x7, 0x6, 0x1}, @multicast1, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffffffc, 0x7, 0x2934}, @private=0xa010101, @empty, 0xff}}]}, {0x3c, 0x6, "91659a49d7454b42d570edcf241cb4e162795f0671a18f52002d4de56165cd0793a49bae538b60153a889bfc4ca7535a5c76a667d52429af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x104, 0x6, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0xcb, 0x6, "13380e2ca8a5db062f89f642c5b5819a71153d73b2ac03460bcf699171a29ecb3bf5ad27a0a93dc4247370d94d11f7366be9be1ec5e5c304bc06006cae9a34d2201eddf3062bd03a55b20ac1450c7e3c6c5ccedbaeb97d15f9211156ec07405c54bd89d915b49d6e2bc71f69671f3ea6123d6861a21c3db17af32cf0d6686fec74ba61f2acd7d7e263a04f50431a6c7e5cd5ade6bddadbd7305d5b7dd6e685f58c06a7560adfa2ba2d29093c1b60b27a8daf423846157baffdbc88829bce07e3ca11caceb3e7c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xf4, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x216d}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xc8a, 0x6, 0x2, 0x400}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x5, 0x20000000, 0x3, 0x3}}]}, {0x87, 0x6, "23e34cbfd8f02818580cda55976a1fdf14bfb9f4fff2fdb2bd12a3e9011325f8271bf98645776c403bd56280bcad26561f625e059ea217bd9720a6e303d3f8926695d325624c1ca911d9a52cd2b4d52fb1d615c38d129b60ff69af890271bee48c7aa1e9d13871bc02d7e724fa6f3b1d32f0d5061998dd7ab663ffe1e2c1ce445c8c12"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x50, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xa0, 0x2, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x401, 0xfd, 0x9, 0xa660}, {0x2, 0x90, 0x3, 0x2}, {0xd, 0x99, 0x3, 0x493}, {0x31, 0xa6, 0x0, 0x6}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x41, 0x6, "4a4464eb810e0605e15ac099e68ffca131b22ebdfaa9bc34301ccf0c339cdfa7a076dddb0bb1b715b39a8b324e37de8aa5f4be3230d3af8e8212438afa"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 4.816020919s ago: executing program 4 (id=7736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61", 0x72}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4000000e, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000140)}}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000002c0)) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x308, 0x13, 0x10, 0x70bd26, 0x25dfdbfd, {0x9, 0x3, 0x5, 0x0, {0x4e22, 0x4e20, [0x7, 0xfd, 0xde, 0x80000001], [0x7, 0x8, 0x9, 0x1], r8, [0x81]}, 0x7, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x64, 0x1, "739892fa3191935cc7a6d1bd1c5b1c608b651b5756b251ac4564b8f43743eb512c096fa378fa10206ac7931288ea4153f8da7c40a20c1ae93d94d67683298f26343c3f394521c86564269650595e8e8d7359196ff13ded6e86b5334a28b436b5"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "8279019497c59594b14159a184e54a17199c52e2f68d20a87bf47d39c5c82b2dedb72adfcb995335c0eff040d30958aca96be70806d5411858c4720dd1ca684c10f584f9253d2e8473a7ab7c362a241276445f6b2638bfcd7e5b58c1dca3fdfa83e189d9fccdc3d9225ca7ad5a52e97fd8cba1c35917901b8fd694fac151975bd379b902bffa88b41dd5f4ff6cfbd03dd9cee704d756cc27f2556a0291de8d6f50a0fbba9f"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "4b5105aa32f2fdf7f88f1ac69c3ae2d44a17e1118effee388ba770"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "304c7e4ba521d98ff8bc6a77dd1c9be7a54a781f36826f694b4585546c0390169599a4d5d1a72adbf88ead6dc2d3135f6bbf62f214858716801d8b847c7b1c98fdac37c584270ded8f2dbe89d02885f9d571623ff3c57feab43915e1364fa8f0e50de0fc616c"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "3ceda4e47a7dc704f0d9980f8cd0c4f21464cbb96b64bc3178d3ea7ace894d588f40ffd1b6aab6ba927dcceb88d141e2c10bb4bfb1b5412f5f7be8879a0ece4f1bd53cddb30e7aa805"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "35df53f0d78cfb2f13f77060c3ee1c2c38c22da11348e9b77a44df88e17e2e1bb36fe85862b6ccaf73128040fb6bf7634678a045840aa7d547b0321c762f1fe2b306303d20c50bd441a623171826983f4fc216c6e0c337ea6029ab5c6915084eedf8ae331431e3bcd4ce81c9d63b59bc8db4df9b2211c62b3731994efc9915eacacd4e392eb6c272b49e5aea3f0ab86177d5a8858c3b75a747e5eeeea0ff181800dcc9030239787e7d29315a56613862a4076b8ce7292b2ea962c592b586477458d6b047bd536cbab4"}]}, 0x308}, 0x1, 0x0, 0x0, 0x40}, 0x44810) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000000840)={0x0, r1, r7, 0x9, 0x5, '\x00', {0x2, 0x5, 0x1, 0x6, 0x4, 0xfffffff7, 0x1, 0x7cd, {0x100000001, 0x5}, {0x20000000000, 0x1}, {0x8, 0xffffffc6}, 0xffffffffffff0001, 0x0, 0x200, 0x101, 0x4, 0x6, 0x7, 0x9, 0x3, 0x200, '\x00', 0x7, 0x3, 0x3, 0x3ff}}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x6, 0x9d, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0xef}}]}]}, 0x34}}, 0x0) 4.815374212s ago: executing program 1 (id=7737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x48725319}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x94}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'ip6tnl0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xa}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@deltclass={0x74, 0x29, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0x6}, {0x2}, {0xffe0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x10, 0xea}}, @TCA_RATE={0x6, 0x5, {0xf, 0xc5}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}]}, 0x74}}, 0x20000000) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r13, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000f0012800b000100627269646765000e41009da008001ffa12cc3f78222d0b505f9a65bf7cb630741b55227b1331c2000000000000", @ANYRES8=r1, @ANYBLOB="7d06cb6316d9f41c4ef2d6cc2bd0612b698b974ac79f72a4ea4914b0e43319a1351c0f663205e5a0b8a8008420f18e172555b47696acab9a7a439dd6f46f6674db01ae1c7c4ad462f8818e00f6b567509032864e42963a118569f4aa8fb30f8e7160d71531e6c12b80b95564637bf9d6c603a0d9dea5c83cfcd50cb78aabdf5741305c7b86715f9c9185eb4c8eda0ae6fda1c698b06458f2a1a448512a74347716dc53c55cded073309d4d977aacd0cfaf952b791fad6037fd0ce5d5154d54ccdb145bc1aa0fd76ce83c297b58aa8d4a8028a2e99bd0a17dc65bb65c5aa3c0"], 0x3c}}, 0x0) 4.539404378s ago: executing program 4 (id=7741): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x73a, 0x1) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.155586456s ago: executing program 0 (id=7744): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7ff, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x0, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x6, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x1, 0x3, 0x2000}, {0x32e, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0xfffffffd, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0xffffffff, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x10001, 0x4000008, 0x25ff}, {0x5, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x2, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc4, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8e}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffbff, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x4}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf1, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x3, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x2, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0x3ffc, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x106, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x100002, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x101, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x4, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) r10 = socket$netlink(0x10, 0x3, 0xe) r11 = socket(0x2a, 0x2, 0x0) recvmsg$kcm(r11, &(0x7f0000000600)={&(0x7f0000000140)=@caif=@dbg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/177, 0xb1}], 0x4, &(0x7f0000000580)=""/116, 0x74}, 0x2) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000071101d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00c62d33f400000000000000000000000000003b7b3cdd835d90a068535212f3cf6e7630c613bff945b74cea7819e76e8b748d22eb4d03d881c1cff5efb87e1af8d5cdd3c36909e0f1cf8c415133546ec58e5a7e6a0e328d0a960b2a9db6d565cbf45bed6d52ca36f328eb9f6ce1", @ANYRES32=0x0, @ANYBLOB="0000000012620400240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32=r12, @ANYBLOB="0800040000050040"], 0x4c}}, 0x0) 3.321217181s ago: executing program 2 (id=7746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) 3.072206125s ago: executing program 2 (id=7747): syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaad9c4d139aaaaaaaa0008004a00007000000000000190786463508f8f225d62a83390780300000045c6e9cd5847696a339fe8c57558000000000000000089000004000000ac1414aa862600000000000d5e000000ff00000000000000054eb8a6000e96053d0006ff00800000007f0000017f000001e000000244040000000000"], 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000003377fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) 977.436357ms ago: executing program 3 (id=7748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1000, 0x3, 0xc, 0x8, 0x7}, 0x14) 972.349633ms ago: executing program 1 (id=7749): syz_emit_ethernet(0x66, &(0x7f0000001340)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@dstopts={0x1, 0x4, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (async) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100}}}}}}}}}, 0x4a) (async) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x10040, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) (async, rerun: 64) r7 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x28}, {r1, 0x2044}, {r2, 0x51}, {r7, 0xa014}, {r8, 0x2}], 0x5, &(0x7f0000000140)={r9, r10+10000000}, &(0x7f0000000180)={[0x4]}, 0x8) 891.634745ms ago: executing program 2 (id=7750): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4004) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}}, 0x20008001) 872.37583ms ago: executing program 4 (id=7751): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendto$l2tp6(r1, &(0x7f0000000780)="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", 0xfd, 0x1, &(0x7f0000000140)={0xa, 0x0, 0xc3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1f9, 0xffffffff}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000240)={0x0, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000400200000a6d321b549fe2cb30200000002000000080040"], 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="27eeb4164ae4a2ec97b09e970e2ba730d901c29b1e26199fc52d07f02e1336dd951222ae74280c0f7e55ce97de75228d0753ed0f2b157c57656518dc76a097c4a4b7b975584f6285"], 0x28}, 0x1, 0x6c00}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r7, &(0x7f0000002000)={&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/147, 0x93}, {&(0x7f0000001d80)=""/1, 0x1}, {&(0x7f0000001dc0)=""/123, 0x7b}, {&(0x7f0000001e40)=""/214, 0xd6}], 0x5, &(0x7f0000001fc0)=""/21, 0x15}, 0x40000060) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 744.769298ms ago: executing program 3 (id=7752): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 543.604771ms ago: executing program 3 (id=7753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'macvlan1\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sed\x00', 0x0, 0x60000000, 0x13}, {@rand_addr=0x64010102, 0x4e21, 0x2000, 0x8, 0x7, 0x3}}, 0x44) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000104010100000000000000b25600000808000540000000ec080004400000000808000440000000070600064000020000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 541.20845ms ago: executing program 2 (id=7754): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100037377b12dade7f25f1e8255d064753fae2d7cb1c31b32a7e6fd751f5a4fe303f161df33e9f78940d404370108a3db9b4f6cace85218de987e3000000d0b6", @ANYRES32=0x0, @ANYBLOB="0009000000000000240012800e00010069703665727370616e00000010000280080004000100000004001200"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_ADDRESS={0xa, 0x1, @random="7ecbdfeb1c93"}]}, 0x2c}}, 0x0) 455.380818ms ago: executing program 1 (id=7755): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6dcd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 399.378323ms ago: executing program 0 (id=7756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_getlink={0x70, 0x12, 0x324, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x24002, 0xb0}, [@IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_IFNAME={0x14, 0x3, 'wg1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'ip6erspan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x0) 307.815748ms ago: executing program 3 (id=7757): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x2404c058}, 0x41) 267.113209ms ago: executing program 2 (id=7758): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) accept4(r0, &(0x7f0000000080)=@ax25={{0x3, @default}, [@default, @default, @bcast, @default, @null, @rose]}, &(0x7f0000000100)=0x80, 0x80000) 250.531839ms ago: executing program 3 (id=7759): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x18}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0), 0x4) 144.113136ms ago: executing program 0 (id=7760): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20048018) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="20020000300001002dbd70000000000007"], 0x220}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f000000df00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002023, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1823000000000000000000000000000085000000170000009500000700000000"], &(0x7f00000005c0)='GPL\x00'}, 0x90) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 140.273998ms ago: executing program 1 (id=7761): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000001040)="c3", 0x1, 0x4881, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) 96.863747ms ago: executing program 3 (id=7762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000006f80)="4ff945e9fc8f36f84da21f2130bcf4c0", 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f00000078c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xef, 0x93, &(0x7f0000000040)="a3bde78c670d4adae029663b2ee68414512688d1411c670af399ef1436a6487532774b620bdabf025306259e28c96781ab212de1fa1cbd87e0dab0c3824e514e47d65c23bbf67305a0ea90cdea5bbc44a19093b1df489e47b942f49fcbfeb767d5497d18cb6bdda045de14bfd85592af16ecdc182aa2fb08a275baa802151d0013f399e5a1c6e5cdd170ce38851f81cfb69c55ba8a39678fa02c59d8dec63bf32d49a15030c85d5f6c1223defd39c1aa974ef1bcba12d9e4f050b1721803563ddebf103688cf4c09541b29e5218ffe8ef24defb7b9d8aff920dfd59555d68805384c488b557e31e888c54bf1fb13b3", &(0x7f0000000140)=""/147, 0x80000000, 0x0, 0x93, 0x29, &(0x7f0000000200)="321db97b23fbaf21c46619576d2ec726a10f45cee07179d0b5d5ba1739aac2a13dcdf4fb007c7ea1826b3c027376df72179733d322f44fdda3725f4f2ee4c12a829e61188bc4f5222958a820f70130ad1d322fbbe28d1e3a2d8bb72cc8c9f0fd913ca6ad99f39277db90750ab87f8088f670d879874e3994d06e0bbb303521d3377a32710b230d3a78edc469fc891ac6f56d74", &(0x7f00000002c0)="c3e22f2acadd21773cd257c6be76453d42c766786332943a905f525fe5caa43bf44d0cb4589be7cd37", 0x2, 0x0, 0x9}, 0x50) 48.979813ms ago: executing program 1 (id=7763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x12, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x26, 0x5, 0x10, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0x3445, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x377, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$kcm(r1, &(0x7f0000002d40)={&(0x7f0000000200)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="c2163cc585bcd4a5bc6e26f3deb009e47234136dbece579087c5a0815b69bdc70397b98cae5a06013b9ffd335577c9e6e11428848b82b2d99a18033c8051e40309535579e62526019133016aa77097710fc5fe18627e949ff1d5b648eae1d83d302b2f6f8d43eafbf8c27f5841c5c3e904b58165721024add6c2be42dd61af1fea980c", 0x83}], 0x1, &(0x7f0000001b80)=[{0x1010, 0x10f, 0x8, "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"}, {0x110, 0x84, 0xbab, "6bfbb79979566a543bb5ce0795715b69d2df7f067c3e2cb4cadada40288bef7467fc379dcebadead742e5701a52f5fd01f30cdfcdb2ad7cd7e626f80d74a6b086caf2ae5a970fac271b994ed86c3978f9e66bb0dbfb8e9c1b0354df4b1183d5a4f60519a87e445f7ee0f4d7e41c69ede0512feaf8cf5b93c2b2aaf58d4c8a46d3891a987f750003c29ecc9ec8bd05cabf5414f692d011d0eabff5d4ffa182a3ff5735cdd9c01a0b1df3907e170d7dda33a80242a6fc3b08b93d8be1c184031cd41472dc7d1bbbff0c2e0de5c9b3214fb8f4fdbbe66124b302a06c1118426bcb80c1259714b74488658a55af9415ef7213c6831885b67eef1cf"}, {0x90, 0x116, 0xfffffffc, "51cee5b7bb93c4bc3ba530c45800a3540e2cd3d341c2d2dd51cf8bf78ac4ae3a87444dab68b0d8f313a6192fbd1ad302dd2448e3f8d2f166f8d4fd9e56a252143bd342470400372b4972d0de6397c9464a4a9b8cb262785a6f05893c543bd19aa72184fadaa4122a7b9a28e59373a98d233f625c73ab71d88c0a"}], 0x11b0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000b80)=""/4084, 0xff4}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000000)=""/24, 0xf}, {&(0x7f00000001c0)=""/34}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_emit_ethernet(0xfcc, &(0x7f00000031c0)={@local, @link_local, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x26, 0xfba, 0x0, 0x0, 0x4, 0x88, 0x0, @remote, @remote}, "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"}}}}, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, &(0x7f00000015c0)) 0s ago: executing program 2 (id=7764): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x26020480) gettid() (async) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') unshare(0x40080) close(0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x801, 0x30bda9, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0x1, 0x1}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x2d, 0x0, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@generic={0x94, 0x11, "c03524d2f8f7f92447bff30f99289e"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x14, [@local, @multicast1, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x15}, @loopback, @loopback]}, @cipso={0x86, 0x35, 0x3, [{0x0, 0xa, "23587174d64de4d3"}, {0x6, 0x5, "9e64f6"}, {0x1, 0x6, "45d11d6a"}, {0x7, 0x11, "7f1942c4ab6f305eea18e6e9670f53"}, {0x0, 0x5, "c0f669"}, {0x2, 0x2}, {0x1, 0x2}]}]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x6, @random="46bc0021870f"}, 0x10) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000380)={r6, 0x1, 0x6, @random="46bc0021870f"}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="1e009400002019010000ad9c9f4e657a1cf9001d00000001000100000008000004009300"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf252600000008000300", @ANYRES32=r9, @ANYBLOB="1e009400002019010000ad9c9f4e657a1cf9001d00000001000100000008000004009300"], 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r10 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0x7, 0x10, 0x5, 0x3, 0xfffffffa, 0x3, 0x100, 0x7, 0x9, 0x1f, 0x1f, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4) sendto$inet6(r1, &(0x7f0000000000)="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", 0x1af, 0x404c0c1, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)="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", 0x1af, 0x404c0c1, 0x0, 0x0) close(r1) kernel console output (not intermixed with test programs): 95] tc action pedit unable to extract header offset for header type (0x5) [ 700.771206][T28595] tc action pedit unable to extract header offset for header type (0x5) [ 700.779595][T28595] tc action pedit unable to extract header offset for header type (0x5) [ 700.787992][T28595] 0: reclassify loop, rule prio 0, protocol 800 [ 700.814912][ T7598] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.830762][ T7598] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.851522][ T7598] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.879311][ T7598] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.058317][T28617] syzkaller0: entered promiscuous mode [ 701.071373][T28617] syzkaller0: entered allmulticast mode [ 701.485306][T28648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.599312][T28651] atomic_op ffff888033267998 conn xmit_atomic 0000000000000000 [ 701.640763][T28654] team0: Device gtp0 is up. Set it down before adding it as a team port [ 702.160023][T28689] syzkaller0: entered promiscuous mode [ 702.168464][T28689] syzkaller0: entered allmulticast mode [ 702.169403][T28686] xt_nat: multiple ranges no longer supported [ 702.182310][T28680] syzkaller0: entered promiscuous mode [ 702.188186][T28680] syzkaller0: entered allmulticast mode [ 702.403790][T28693] syzkaller0: entered promiscuous mode [ 702.420088][T28693] syzkaller0: entered allmulticast mode [ 702.435453][T28693] __nla_validate_parse: 6 callbacks suppressed [ 702.435469][T28693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6135'. [ 702.478207][T28693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.702985][T28715] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 702.713286][T28715] netlink: 'syz.2.6140': attribute type 3 has an invalid length. [ 702.721516][T28715] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6140'. [ 703.519590][T28717] syzkaller0: entered promiscuous mode [ 703.525593][T28717] syzkaller0: entered allmulticast mode [ 705.056579][T28675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.275807][T28723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6142'. [ 705.500648][T28742] mac80211_hwsim hwsim20 ÿ: renamed from wlan1 [ 705.581604][T28749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 705.722012][T28758] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6151'. [ 705.731860][T28758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6151'. [ 705.741378][T28758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6151'. [ 705.879275][T28767] bond_slave_1: mtu less than device minimum [ 705.900667][T28763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6155'. [ 705.948600][T28772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.033677][T28778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6159'. [ 706.166167][T28786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6161'. [ 706.210960][ T30] audit: type=1804 audit(1782637634.642:10): pid=28786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6161" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=128 res=1 errno=0 [ 706.241492][ T30] audit: type=1800 audit(1782637634.672:11): pid=28786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6161" name="cgroup.controllers" dev="tmpfs" ino=128 res=0 errno=0 [ 706.378342][T28795] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 706.403101][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6164'. [ 706.433984][T28795] sctp: [Deprecated]: syz.4.6166 (pid 28795) Use of int in maxseg socket option. [ 706.433984][T28795] Use struct sctp_assoc_value instead [ 706.568332][T28801] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 805322376, id = 0 [ 706.605858][T28803] xt_socket: unknown flags 0xe4 [ 706.726135][T28811] syzkaller1: entered promiscuous mode [ 706.746137][T28811] syzkaller1: entered allmulticast mode [ 706.853501][T28820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.032168][T28829] xt_hashlimit: size too large, truncated to 1048576 [ 707.066093][T28829] netlink: 'syz.1.6176': attribute type 1 has an invalid length. [ 707.340441][T28845] bond12: Removing last arp target with arp_interval on [ 707.551222][T28869] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 707.555155][T28862] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 707.560646][T28869] __nla_validate_parse: 4 callbacks suppressed [ 707.560660][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'. [ 707.584997][T28864] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 707.874047][T28884] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6192'. [ 708.005371][T28881] syzkaller0: entered promiscuous mode [ 708.025474][T28881] syzkaller0: entered allmulticast mode [ 708.237921][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.252545][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.261857][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.272549][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.281169][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.370193][T28900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6195'. [ 708.709673][T28910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6197'. [ 708.983753][T28923] netlink: 'syz.3.6200': attribute type 3 has an invalid length. [ 710.364162][T16494] Bluetooth: hci1: command tx timeout [ 711.476854][T28963] netlink: 'syz.2.6213': attribute type 1 has an invalid length. [ 711.499892][T28964] netlink: 'syz.2.6213': attribute type 1 has an invalid length. [ 711.555740][T28963] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 711.558678][T28964] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 711.597589][T28894] lo speed is unknown, defaulting to 1000 [ 711.650329][T28894] ±ÿ speed is unknown, defaulting to 1000 [ 711.677074][T28894] lo speed is unknown, defaulting to 1000 [ 711.771236][T28977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6216'. [ 711.858082][T28972] bond13: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 711.888917][T28972] bond13 (unregistering): Released all slaves [ 712.079225][T28894] xfrm0 speed is unknown, defaulting to 1000 [ 712.085588][T28996] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 712.105991][T28996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6218'. [ 712.118505][T29001] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 712.402753][T28894] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.410058][T28894] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.417893][T28894] bridge_slave_0: entered allmulticast mode [ 712.425166][T28894] bridge_slave_0: entered promiscuous mode [ 712.433003][T28894] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.440779][T16494] Bluetooth: hci1: command tx timeout [ 712.446718][T28894] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.454612][T28894] bridge_slave_1: entered allmulticast mode [ 712.461933][T28894] bridge_slave_1: entered promiscuous mode [ 712.489628][T28894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.501588][T28894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.532630][T28894] team0: Port device team_slave_0 added [ 712.540803][T28894] team0: Port device team_slave_1 added [ 712.565278][T28894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.572780][T28894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.600552][T28894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.614048][T28894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.622062][T28894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.660917][T28894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.756349][T28894] hsr_slave_0: entered promiscuous mode [ 712.766747][T28894] hsr_slave_1: entered promiscuous mode [ 712.773253][T28894] debugfs: 'hsr0' already exists in 'hsr' [ 712.780222][T28894] Cannot create hsr debugfs directory [ 712.908126][T28894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 712.920441][T28894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 712.932913][T28894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 712.943940][T28894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 713.018703][T28894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 713.029420][T28894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 713.040308][T28894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 713.051161][T28894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 713.120700][T28894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 713.131018][T28894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 713.141882][T28894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 713.155347][T28894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 713.258500][T28894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 713.269211][T28894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 713.279853][T28894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 713.290143][T28894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 714.517341][T16494] Bluetooth: hci1: command tx timeout [ 714.789668][T28979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.815918][T29000] netlink: 'syz.3.6217': attribute type 1 has an invalid length. [ 714.859510][T28894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.896647][T28894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.911930][T28894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 714.934593][T28894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.960470][T28894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 714.995847][T28894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.025309][T29013] dvmrp0: entered allmulticast mode [ 715.035871][T29015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6221'. [ 715.050399][T28894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.071425][T28894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.089322][T29018] x_tables: duplicate underflow at hook 1 [ 715.141773][T29015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6221'. [ 715.329636][T29032] syzkaller0: entered promiscuous mode [ 715.348685][T29032] syzkaller0: entered allmulticast mode [ 715.422109][T28894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.505160][T28894] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.555443][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.562665][T13249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.642425][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.649616][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.873748][T29053] netlink: 'syz.0.6230': attribute type 2 has an invalid length. [ 716.458840][ T30] audit: type=1800 audit(1782637644.892:12): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6235" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308EB29F67CCF8E676D5B6A870732609687BABDB06E02C3A32D6D656D6F72792E6576656E7473 dev="tmpfs" ino=2722 res=0 errno=0 [ 716.599414][T16494] Bluetooth: hci1: command tx timeout [ 717.219224][T28894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.391924][T28894] veth0_vlan: entered promiscuous mode [ 717.446136][T28894] veth1_vlan: entered promiscuous mode [ 717.508820][T29135] netlink: 'syz.2.6248': attribute type 4 has an invalid length. [ 717.551696][T29132] bridge_slave_1: entered promiscuous mode [ 717.614379][T28894] veth0_macvtap: entered promiscuous mode [ 717.726641][T28894] veth1_macvtap: entered promiscuous mode [ 717.765052][T29145] netlink: 'syz.3.6251': attribute type 1 has an invalid length. [ 717.883266][T29145] bond7: entered promiscuous mode [ 717.889300][T29145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 717.929138][T28894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.002754][T28894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.105752][ T1116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.145762][ T1116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.229152][ T1116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.241236][ T1116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.459695][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.477672][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.625230][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.635907][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.981499][T29193] netlink: 'syz.1.6261': attribute type 7 has an invalid length. [ 719.017325][T29193] netlink: 'syz.1.6261': attribute type 8 has an invalid length. [ 719.034987][T29196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6261'. [ 719.193811][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 719.242670][T29198] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6263'. [ 719.277579][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6263'. [ 719.373773][T29203] netlink: 'syz.1.6266': attribute type 28 has an invalid length. [ 719.402363][T29203] netlink: 'syz.1.6266': attribute type 3 has an invalid length. [ 719.419633][T29203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6266'. [ 719.596467][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.641420][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.658820][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.691126][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.703611][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.894778][T29214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6269'. [ 720.154008][ T264] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.326721][T29229] netlink: 'syz.2.6272': attribute type 4 has an invalid length. [ 720.344607][ T264] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.442537][ T264] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.557962][ T264] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.659612][T29244] bond0: entered allmulticast mode [ 720.674391][T29244] bond_slave_1: entered allmulticast mode [ 720.692648][T29208] lo speed is unknown, defaulting to 1000 [ 720.708981][T29208] ±ÿ speed is unknown, defaulting to 1000 [ 720.727754][T29208] lo speed is unknown, defaulting to 1000 [ 720.988172][T29248] netlink: 'syz.3.6277': attribute type 16 has an invalid length. [ 721.027803][T29248] netlink: 'syz.3.6277': attribute type 17 has an invalid length. [ 721.103146][T29248] lo: left promiscuous mode [ 721.118809][T29248] tunl0: left promiscuous mode [ 721.133195][T29248] gre0: left promiscuous mode [ 721.168125][T29248] 0ªX¹¦Dö»: left allmulticast mode [ 721.191201][T29248] erspan0: left promiscuous mode [ 721.204218][T29248] ip_vti0: left promiscuous mode [ 721.275733][T29248] veth1_vlan: left promiscuous mode [ 721.292334][T29248] vlan0: left promiscuous mode [ 721.297839][T29248] veth0_vlan: left promiscuous mode [ 721.305260][T29248] veth0_vlan: entered promiscuous mode [ 721.313807][T29248] veth1_vlan: entered promiscuous mode [ 721.371656][T29248] veth1_macvtap: left promiscuous mode [ 721.395167][T29248] veth0_macvtap: left promiscuous mode [ 721.423426][T29248] veth0_macvtap: entered promiscuous mode [ 721.444702][T29248] veth1_macvtap: entered promiscuous mode [ 721.612561][T29248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.626726][T29248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 721.662852][T29248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 721.672386][T29248] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 721.708382][T29248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.781064][T29091] Set syz1 is full, maxelem 65536 reached [ 721.809119][T16494] Bluetooth: hci0: command tx timeout [ 721.823578][T29248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.904899][T29248] veth5: left allmulticast mode [ 721.916269][T29248] veth7: left allmulticast mode [ 721.925719][T29275] netlink: 'syz.4.6279': attribute type 2 has an invalid length. [ 721.942119][T29248] 8021q: adding VLAN 0 to HW filter on device eth0 [ 721.952604][T29248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 721.968301][T29248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 721.980681][T29248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 721.995299][T29248] bond7: left promiscuous mode [ 722.003919][T16952] xfrm0 speed is unknown, defaulting to 1000 [ 722.106420][ T7595] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.118537][ T7595] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 722.131282][ T7595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.151731][T29277] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6279'. [ 722.170577][ T7595] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 722.175467][T29283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6281'. [ 722.181258][T29277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6279'. [ 722.205511][ T7601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.215725][T29277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6279'. [ 722.223954][ T7601] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.232865][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.256220][ T1116] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.268044][ T1116] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.284600][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 722.294338][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.302719][T29208] xfrm0 speed is unknown, defaulting to 1000 [ 722.316402][ T7595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.329535][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 722.344334][ T7595] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 722.355117][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 722.365174][T29288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6282'. [ 722.389757][ T7595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.411143][ T7595] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 722.411900][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.421204][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6282'. [ 722.451214][T16710] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 722.482700][ T264] batadv1: left allmulticast mode [ 722.502136][ T264] batadv1: left promiscuous mode [ 722.516836][ T264] bridge0: port 1(batadv1) entered disabled state [ 722.584152][ T264] pim6reg: left allmulticast mode [ 722.611920][ T264] pimreg: left allmulticast mode [ 722.765735][ T264] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 722.777509][ T264] ip6gre1 (unregistering): left promiscuous mode [ 722.903290][ T264] bond11 (unregistering): (slave geneve5): Releasing active interface [ 722.916152][ T264] bond5 (unregistering): (slave geneve4): Releasing active interface [ 723.007014][ T264] bond0 (unregistering): Released all slaves [ 723.017497][ T264] bond1 (unregistering): Released all slaves [ 723.032160][ T264] bond2 (unregistering): Released all slaves [ 723.046559][ T264] bond3 (unregistering): Released all slaves [ 723.060462][ T264] bond4 (unregistering): Released all slaves [ 723.075083][ T264] bond5 (unregistering): Released all slaves [ 723.101031][ T264] bond6 (unregistering): Released all slaves [ 723.114367][ T264] bond7 (unregistering): Released all slaves [ 723.128249][ T264] bond8 (unregistering): Released all slaves [ 723.144186][ T264] bond9 (unregistering): Released all slaves [ 723.166214][ T264] bond10 (unregistering): Released all slaves [ 723.184258][ T264] bond11 (unregistering): Released all slaves [ 723.529127][ T264] tipc: Left network mode [ 723.538167][T29319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6290'. [ 723.589224][T29319] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6290'. [ 723.878143][T16494] Bluetooth: hci0: command tx timeout [ 724.022786][T29342] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 724.032836][T29342] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 724.639887][T29384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6305'. [ 724.696329][T29388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6304'. [ 724.798439][T29392] netlink: 'syz.1.6306': attribute type 1 has an invalid length. [ 724.941914][T29379] erspan0: entered promiscuous mode [ 725.059331][T29208] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.082855][T29208] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.102098][T29208] bridge_slave_0: entered allmulticast mode [ 725.104692][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.115935][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.123870][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.131783][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.132425][T29208] bridge_slave_0: entered promiscuous mode [ 725.139696][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.153354][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.161650][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.170649][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.178586][T29403] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 725.214870][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 725.254033][T29208] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.266423][T29208] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.278832][T29208] bridge_slave_1: entered allmulticast mode [ 725.327668][T29208] bridge_slave_1: entered promiscuous mode [ 725.570952][T29419] xt_bpf: check failed: parse error [ 725.643194][T29208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.682282][T29208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.902851][ T264] hsr_slave_0: left promiscuous mode [ 725.922018][ T264] hsr_slave_1: left promiscuous mode [ 725.957797][T16494] Bluetooth: hci0: command tx timeout [ 726.266987][T29452] xt_hashlimit: max too large, truncated to 1048576 [ 726.274386][T29452] No such timeout policy "syz1" [ 726.627675][T29208] team0: Port device team_slave_0 added [ 726.698647][T29208] team0: Port device team_slave_1 added [ 726.752787][T29208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.788525][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.866755][T29208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.900979][T29208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.910859][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.984011][T29208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.242715][ T2177] IPVS: starting estimator thread 0... [ 727.248558][T29208] hsr_slave_0: entered promiscuous mode [ 727.290566][T29208] hsr_slave_1: entered promiscuous mode [ 727.335076][T29208] debugfs: 'hsr0' already exists in 'hsr' [ 727.347956][T29495] IPVS: using max 28 ests per chain, 67200 per kthread [ 727.365660][T29208] Cannot create hsr debugfs directory [ 727.483288][T29497] tipc: Enabled bearer , priority 0 [ 727.633527][T29501] syzkaller0: entered promiscuous mode [ 727.647907][T29501] syzkaller0: entered allmulticast mode [ 727.664494][T29501] tipc: Resetting bearer [ 728.023868][T29527] __nla_validate_parse: 2 callbacks suppressed [ 728.023884][T29527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6341'. [ 728.039540][T16494] Bluetooth: hci0: command tx timeout [ 728.116471][ T1116] tipc: Resetting bearer [ 728.135405][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6341'. [ 728.512632][T29501] tipc: Resetting bearer [ 728.602009][T29533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6342'. [ 728.845309][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 728.845327][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 730.565252][T29501] tipc: Disabling bearer [ 730.579829][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 730.646738][ T264] IPVS: stop unused estimator thread 0... [ 730.826114][T29546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6344'. [ 731.434352][T29573] bond1: entered promiscuous mode [ 731.856619][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'. [ 731.872827][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6359'. [ 731.944975][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'. [ 731.986108][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6359'. [ 732.178494][T29627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 732.250241][T29625] batadv_slave_0: entered promiscuous mode [ 732.272092][T29627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.341294][T29627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.521980][T29208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 732.546068][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.565015][T29208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 732.610497][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.636894][T29208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 732.699778][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.728707][T29208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 732.756569][T29208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.771047][T29656] hsr0: entered allmulticast mode [ 732.781517][T29656] hsr_slave_0: entered allmulticast mode [ 732.801149][T29656] hsr_slave_1: entered allmulticast mode [ 732.924285][T29678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6374'. [ 732.989537][T29685] netlink: 'syz.4.6375': attribute type 21 has an invalid length. [ 733.019931][T29685] netlink: 'syz.4.6375': attribute type 5 has an invalid length. [ 733.038845][T29685] netlink: 'syz.4.6375': attribute type 6 has an invalid length. [ 733.046721][T29685] __nla_validate_parse: 1 callbacks suppressed [ 733.046737][T29685] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6375'. [ 733.225307][T29208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.283508][T29696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 733.301137][T29208] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.386528][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6381'. [ 733.613455][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.620750][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.695060][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.702276][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.717384][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 733.854672][T29721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6382'. [ 733.893837][T29721] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6382'. [ 733.935474][T29721] netlink: 'syz.2.6382': attribute type 5 has an invalid length. [ 733.944311][T29729] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 734.353915][T29752] syzkaller0: entered promiscuous mode [ 734.379002][T29752] syzkaller0: entered allmulticast mode [ 734.404948][T29754] tipc: Started in network mode [ 734.419475][T29754] tipc: Node identity 2003, cluster identity 4711 [ 734.431657][T29759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6393'. [ 734.441175][T29754] tipc: Node number set to 8195 [ 734.456404][T29764] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 734.487025][T29754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6392'. [ 734.561023][T29759] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 734.888297][T29791] netlink: 'syz.4.6396': attribute type 2 has an invalid length. [ 734.954574][T29791] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6396'. [ 734.997757][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 735.091878][T29208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.195432][T29804] sctp: [Deprecated]: syz.3.6400 (pid 29804) Use of int in max_burst socket option. [ 735.195432][T29804] Use struct sctp_assoc_value instead [ 735.216358][T29208] veth0_vlan: entered promiscuous mode [ 735.272637][T29804] sctp: [Deprecated]: syz.3.6400 (pid 29804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.272637][T29804] Use struct sctp_sack_info instead [ 735.296294][T29208] veth1_vlan: entered promiscuous mode [ 735.354290][T29810] netlink: 'syz.1.6402': attribute type 1 has an invalid length. [ 735.488124][T29208] veth0_macvtap: entered promiscuous mode [ 735.523082][T29817] macvlan2: entered promiscuous mode [ 735.532681][T29817] macvlan2: entered allmulticast mode [ 735.555082][T29817] bond2: entered promiscuous mode [ 735.572130][T29817] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 735.631043][T29817] bond2: left promiscuous mode [ 735.686113][T29823] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 735.713402][T29815] tipc: Enabled bearer , priority 0 [ 735.800272][T29835] netlink: 'syz.2.6405': attribute type 58 has an invalid length. [ 735.806601][T29208] veth1_macvtap: entered promiscuous mode [ 735.852822][T29835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6405'. [ 735.875358][T29208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.925443][T29208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.096603][T29842] syzkaller0: entered promiscuous mode [ 736.113719][T29842] syzkaller0: entered allmulticast mode [ 736.130827][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.152144][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.567984][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 738.624365][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.638247][T29814] tipc: Disabling bearer [ 738.652368][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.870413][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.890775][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.992979][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.002349][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.014581][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6413'. [ 739.025062][T29883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6413'. [ 739.112776][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6414'. [ 739.185734][T29889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6265'. [ 739.196127][T29886] geneve4: entered promiscuous mode [ 739.203840][T29886] geneve4: entered allmulticast mode [ 739.213251][ T7601] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 739.224310][ T7601] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 739.243493][ T7601] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 739.346238][T29890] syzkaller0: entered promiscuous mode [ 739.352272][T29890] syzkaller0: entered allmulticast mode [ 739.539381][T29898] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6417'. [ 739.601588][T29900] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6418'. [ 739.621065][T29900] Bluetooth: MGMT ver 1.23 [ 740.400816][T29927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.420948][T29927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.436879][T29927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.451359][T29927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.462138][T29927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.596702][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6430'. [ 740.779992][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6434'. [ 740.809941][T29934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.980179][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6434'. [ 741.001319][T29952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6434'. [ 741.143868][T29963] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.151263][T29963] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.219813][T29967] block nbd7: Unsupported socket: should be TCP or UNIX. [ 741.298252][T29925] lo speed is unknown, defaulting to 1000 [ 741.320316][T29925] ±ÿ speed is unknown, defaulting to 1000 [ 741.348935][T29925] lo speed is unknown, defaulting to 1000 [ 741.872026][T29925] xfrm0 speed is unknown, defaulting to 1000 [ 741.917955][T29999] xt_hashlimit: size too large, truncated to 1048576 [ 741.928042][T29997] syzkaller0: entered promiscuous mode [ 741.942563][T29997] syzkaller0: entered allmulticast mode [ 741.997091][T30003] dvmrp0: entered allmulticast mode [ 742.084149][T30006] tipc: Enabling of bearer rejected, failed to enable media [ 742.525625][T29927] Bluetooth: hci5: command tx timeout [ 742.945385][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.017039][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.025076][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.032847][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.048763][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.069069][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.085997][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.102115][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.119230][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.122663][T29925] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.132955][T29925] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.140510][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.140635][T29925] bridge_slave_0: entered allmulticast mode [ 743.155334][T29925] bridge_slave_0: entered promiscuous mode [ 743.164571][T29925] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.172052][T29925] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.172853][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.180055][T29925] bridge_slave_1: entered allmulticast mode [ 743.193734][T29925] bridge_slave_1: entered promiscuous mode [ 743.201305][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.227926][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.237601][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.253259][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.263739][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.291472][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.298181][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.304479][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.311855][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.325811][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.333436][T29925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.333592][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.350503][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.356778][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.356931][T29925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.364998][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.381654][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.389667][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.396073][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.403383][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.420053][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.434532][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.445813][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.454224][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.463948][T30055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 743.486871][T29925] team0: Port device team_slave_0 added [ 743.510950][T29925] team0: Port device team_slave_1 added [ 743.638777][T29925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.657590][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.731342][T29925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.775643][T29925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.793918][T29925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.830297][T29925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.867988][T30101] syzkaller0: entered promiscuous mode [ 743.879299][T30101] syzkaller0: entered allmulticast mode [ 744.002858][T29925] hsr_slave_0: entered promiscuous mode [ 744.014091][T29925] hsr_slave_1: entered promiscuous mode [ 744.025611][T29925] debugfs: 'hsr0' already exists in 'hsr' [ 744.037782][T29925] Cannot create hsr debugfs directory [ 744.597820][T29927] Bluetooth: hci5: command tx timeout [ 744.910042][T30114] __nla_validate_parse: 18 callbacks suppressed [ 744.910061][T30114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6476'. [ 745.098791][T30127] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6482'. [ 745.135931][T30127] 0·: renamed from hsr0 (while UP) [ 745.155010][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6482'. [ 745.166400][T30127] 0·: entered allmulticast mode [ 745.174797][T30127] hsr_slave_0: entered allmulticast mode [ 745.200498][T30127] hsr_slave_1: entered allmulticast mode [ 745.211415][T30131] net_ratelimit: 45 callbacks suppressed [ 745.211433][T30131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.218009][T30127] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 745.273773][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6483'. [ 745.300219][T30133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6484'. [ 745.327224][T30134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6484'. [ 745.457816][T30139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6487'. [ 745.472733][T30140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.525728][T29925] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.538401][T29925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.549161][T29925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 745.589011][T30147] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6488'. [ 745.752473][T29925] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.774686][T29925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.796052][T29925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 745.905621][T29925] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.915509][T29925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.925841][T29925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 746.065527][T29925] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.085261][T29925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.098389][T29925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 746.550776][T29925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.593936][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.621871][T29925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.664751][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.677671][T29927] Bluetooth: hci5: command tx timeout [ 746.711277][T30196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6502'. [ 746.746039][T30195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6502'. [ 746.760743][T29925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.777871][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.797984][T29925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 746.811815][T29925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 747.110349][T30228] netlink: 'syz.2.6510': attribute type 9 has an invalid length. [ 747.132366][T30228] netlink: 'syz.2.6510': attribute type 6 has an invalid length. [ 747.151989][T30224] tc action pedit offset must be on 32 bit boundaries [ 747.155885][T29925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.363533][T30235] netlink: 'syz.2.6513': attribute type 16 has an invalid length. [ 747.364788][T29925] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.429341][T30239] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 747.450023][T30239] bond2 (unregistering): Released all slaves [ 747.556859][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.564065][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.647896][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.655081][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.829453][T30263] netlink: 'syz.4.6521': attribute type 2 has an invalid length. [ 747.995234][T30270] netlink: 'syz.1.6524': attribute type 8 has an invalid length. [ 748.011093][T30270] veth1_to_team: entered promiscuous mode [ 748.035587][T30270] gretap0: entered promiscuous mode [ 748.053412][T30270] dummy0: entered promiscuous mode [ 748.093099][T30270] hsr1: entered promiscuous mode [ 748.164056][T30276] tun0: tun_chr_ioctl cmd 1074025675 [ 748.189987][T30276] tun0: persist enabled [ 748.380732][T30288] syzkaller0: entered promiscuous mode [ 748.401972][T30288] syzkaller0: entered allmulticast mode [ 748.406676][T30298] netlink: 'syz.0.6529': attribute type 33 has an invalid length. [ 748.438050][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 748.492978][T30298] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 748.510269][T30298] bond1 (unregistering): Released all slaves [ 748.757905][T29927] Bluetooth: hci5: command tx timeout [ 749.454094][T30339] netlink: 'syz.0.6538': attribute type 1 has an invalid length. [ 749.463607][T29925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.471592][T30339] netlink: 'syz.0.6538': attribute type 1 has an invalid length. [ 749.494060][T30338] tipc: Enabling of bearer rejected, failed to enable media [ 749.594296][T29925] veth0_vlan: entered promiscuous mode [ 749.639123][T29925] veth1_vlan: entered promiscuous mode [ 749.701895][T29925] veth0_macvtap: entered promiscuous mode [ 749.714246][T29925] veth1_macvtap: entered promiscuous mode [ 749.765531][T29925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.795965][T29925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.900641][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.953701][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.981019][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.025363][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.111093][T30366] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 750.382302][ T24] IPVS: starting estimator thread 0... [ 750.392622][ T7601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.431846][ T7601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.497376][T30381] IPVS: using max 55 ests per chain, 132000 per kthread [ 750.571900][ T7595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.600546][ T7595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.615786][T30393] __nla_validate_parse: 6 callbacks suppressed [ 750.615804][T30393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6556'. [ 750.875875][T30417] netlink: 'syz.4.6560': attribute type 1 has an invalid length. [ 751.012970][T30417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 751.038621][T30421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6561'. [ 751.072553][T30421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6561'. [ 751.106890][T30420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6561'. [ 751.140563][T30420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6561'. [ 751.276672][T16494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.296796][T16494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.308504][T16494] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.321096][T16494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.330647][T16494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 751.406488][T30441] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 751.638611][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 752.021032][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6575'. [ 752.051959][T30478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6575'. [ 752.215187][T30493] xt_cgroup: path and classid specified [ 752.234495][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6579'. [ 752.365653][T30433] lo speed is unknown, defaulting to 1000 [ 752.376697][T30433] ±ÿ speed is unknown, defaulting to 1000 [ 752.395572][T30433] lo speed is unknown, defaulting to 1000 [ 752.542011][T30516] netlink: 'syz.1.6586': attribute type 1 has an invalid length. [ 752.570501][T30517] netlink: 'syz.1.6586': attribute type 1 has an invalid length. [ 752.599314][T30516] netlink: 'syz.1.6586': attribute type 2 has an invalid length. [ 752.627027][T30517] netlink: 'syz.1.6586': attribute type 2 has an invalid length. [ 752.639398][T30522] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6587'. [ 752.695140][T30525] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6587'. [ 752.976746][T30433] xfrm0 speed is unknown, defaulting to 1000 [ 753.397820][T16494] Bluetooth: hci3: command tx timeout [ 753.653847][T30582] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 753.680595][T30577] syzkaller0: entered promiscuous mode [ 753.696853][T30577] syzkaller0: entered allmulticast mode [ 753.753861][ T30] audit: type=1804 audit(1782637682.182:13): pid=30588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6607" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=683 res=1 errno=0 [ 753.788332][ T30] audit: type=1800 audit(1782637682.182:14): pid=30588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6607" name="cgroup.controllers" dev="tmpfs" ino=683 res=0 errno=0 [ 754.095337][T30595] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.103033][T30595] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.183525][T30595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.198139][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 754.219422][T30595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.300736][T30595] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 754.369964][ T7595] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.385195][ T7595] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.475722][ T7595] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.497337][ T7595] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.516405][T30624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.838387][T16494] Bluetooth: hci0: command 0x0c1a tx timeout [ 754.841232][T29927] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 754.915106][T30433] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.923687][T30433] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.932463][T30433] bridge_slave_0: entered allmulticast mode [ 754.942134][T30433] bridge_slave_0: entered promiscuous mode [ 754.952961][T30433] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.960750][T30433] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.968264][T30433] bridge_slave_1: entered allmulticast mode [ 754.976205][T30433] bridge_slave_1: entered promiscuous mode [ 755.016539][T30433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.031387][T30433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.080755][T30433] team0: Port device team_slave_0 added [ 755.092187][T30433] team0: Port device team_slave_1 added [ 755.144195][T30662] netlink: 'syz.1.6625': attribute type 11 has an invalid length. [ 755.166734][T30670] netlink: 'syz.4.6624': attribute type 1 has an invalid length. [ 755.200313][T30433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.223209][T30433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.275515][T30433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.289127][T30433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.296086][T30433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.324742][T30433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.430461][T30681] x_tables: duplicate underflow at hook 3 [ 755.511925][T30680] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 755.546387][T29927] Bluetooth: hci3: command tx timeout [ 755.586365][T30680] bond3 (unregistering): Released all slaves [ 755.648651][T30433] hsr_slave_0: entered promiscuous mode [ 755.656774][T30694] __nla_validate_parse: 29 callbacks suppressed [ 755.656790][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 755.677233][T30433] hsr_slave_1: entered promiscuous mode [ 755.684467][T30694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6633'. [ 755.764625][T30702] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6635'. [ 755.832839][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6635'. [ 755.900235][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6635'. [ 756.155404][T30433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.178457][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6640'. [ 756.191303][T30433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 756.206201][T30433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 756.373114][T30433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.412677][T30433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 756.429229][T30433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 756.592262][T30433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.608537][T30433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 756.619853][T30433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 756.643940][T30729] netlink: 'syz.1.6642': attribute type 4 has an invalid length. [ 757.176119][T30760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 757.182696][T30433] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 757.208381][T30433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.233712][T30760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6652'. [ 757.233828][T30433] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 757.261392][T30433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.281935][ T264] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.291828][T30770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6655'. [ 757.301543][ T264] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.311610][T30433] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 757.329972][T30433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.357698][ T264] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.377463][ T264] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 757.491072][T30767] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.510789][T30433] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 757.530772][T30433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.552002][ T7603] bridge_slave_1: left promiscuous mode [ 757.567449][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.567573][T16494] Bluetooth: hci3: command tx timeout [ 757.606536][ T7603] bridge_slave_0: left allmulticast mode [ 757.620545][ T7603] bridge_slave_0: left promiscuous mode [ 757.627027][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.682253][ T7603] pim6reg: left allmulticast mode [ 757.914191][T30797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6656'. [ 758.156626][ T7603] bond1 (unregistering): Released all slaves [ 758.177074][ T7603] bond2 (unregistering): Released all slaves [ 758.195825][ T7603] bond3 (unregistering): Released all slaves [ 758.214412][ T7603] bond4 (unregistering): Released all slaves [ 758.234008][ T7603] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 758.246512][ T7603] bond5 (unregistering): Released all slaves [ 758.261286][ T7603] bond6 (unregistering): Released all slaves [ 758.285152][ T7603] bond0 (unregistering): (slave bond7): Releasing backup interface [ 758.303699][ T7603] bond7 (unregistering): left allmulticast mode [ 758.312489][ T7603] bond0 (unregistering): Released all slaves [ 758.326295][ T7603] bond7 (unregistering): Released all slaves [ 758.340004][ T7603] bond8 (unregistering): Released all slaves [ 758.353618][ T7603] bond9 (unregistering): Released all slaves [ 758.795698][T30433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.880632][ T7603] : left promiscuous mode [ 758.900531][T30820] netlink: 'syz.3.6662': attribute type 1 has an invalid length. [ 758.996052][T30820] bond1: entered promiscuous mode [ 759.001641][T30820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.059647][T30829] vcan1: entered promiscuous mode [ 759.064723][T30829] vcan1: entered allmulticast mode [ 759.086229][ T7603] tipc: Left network mode [ 759.119811][T30820] bond1: (slave bridge1): making interface the new active one [ 759.127933][T30820] bridge1: entered promiscuous mode [ 759.135672][T30820] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 759.205228][T30433] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.292290][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.299473][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.375275][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.382479][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.648799][T16494] Bluetooth: hci3: command tx timeout [ 759.726060][T30866] netlink: 'syz.3.6673': attribute type 1 has an invalid length. [ 759.765377][T30866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 759.869361][T30866] gretap1: entered promiscuous mode [ 759.956920][T30878] sctp: [Deprecated]: syz.0.6676 (pid 30878) Use of int in max_burst socket option. [ 759.956920][T30878] Use struct sctp_assoc_value instead [ 760.169491][T30882] xt_socket: unknown flags 0xe4 [ 760.669952][T30911] bridge0: port 3(ipvlan2) entered blocking state [ 760.685835][T30911] bridge0: port 3(ipvlan2) entered disabled state [ 760.694773][T30911] ipvlan2: entered allmulticast mode [ 760.701201][T30911] bridge0: entered allmulticast mode [ 760.730462][T30911] ipvlan2: left allmulticast mode [ 760.745105][T30916] __nla_validate_parse: 8 callbacks suppressed [ 760.745122][T30916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6683'. [ 760.746692][T30911] bridge0: left allmulticast mode [ 760.880043][T30919] gtp0: entered promiscuous mode [ 760.885212][T30919] gtp0: entered allmulticast mode [ 760.907102][T30921] tipc: Started in network mode [ 760.912547][T30921] tipc: Node identity ac14140f, cluster identity 4711 [ 760.930453][T30921] tipc: New replicast peer: 255.255.255.255 [ 760.954228][T30921] tipc: Enabled bearer , priority 10 [ 761.002575][T30433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.043250][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.059976][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.085798][ T7603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.094407][ T7603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.164929][T30928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6690'. [ 761.192540][T30928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6690'. [ 761.387643][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6693'. [ 761.421086][T30938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6693'. [ 761.588899][T30936] veth0: entered promiscuous mode [ 761.599489][T30939] batadv_slave_1: entered promiscuous mode [ 761.614028][T30934] batadv_slave_1: left promiscuous mode [ 761.620325][T30934] veth0: left promiscuous mode [ 761.746632][T30433] veth0_vlan: entered promiscuous mode [ 761.836665][T30433] veth1_vlan: entered promiscuous mode [ 761.957119][ T29] tipc: Node number set to 2886997007 [ 761.975259][T30433] veth0_macvtap: entered promiscuous mode [ 762.047786][T30433] veth1_macvtap: entered promiscuous mode [ 762.143618][T30433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.181502][T30433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.233247][T30969] bridge0: port 3(batadv1) entered blocking state [ 762.242587][T30969] bridge0: port 3(batadv1) entered disabled state [ 762.250584][T30969] batadv1: entered allmulticast mode [ 762.258500][T30969] batadv1: entered promiscuous mode [ 762.272508][ T7603] IPVS: stop unused estimator thread 0... [ 762.284428][ T7595] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.298668][ T7599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.333128][ T7599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.362776][ T7599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.616210][T30982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6708'. [ 762.727334][ T1116] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 762.738679][ T1116] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 762.810678][ T7599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.842660][ T7599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.880263][T30996] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.6711'. [ 762.971534][ T7599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.991575][T31005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6712'. [ 763.006862][ T7599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.119283][T31014] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6714'. [ 763.169175][T31014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6714'. [ 763.456350][T31024] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.113136][T31048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 764.340968][T31053] netlink: 'syz.3.6727': attribute type 1 has an invalid length. [ 764.449363][T31053] bond3: entered promiscuous mode [ 764.469203][T31053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 764.565685][T31067] bond3: (slave bridge2): making interface the new active one [ 764.574074][T31067] bridge2: entered promiscuous mode [ 764.583194][T31067] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 765.704298][T31085] netlink: 'syz.2.6734': attribute type 83 has an invalid length. [ 766.030664][T31098] netlink: 'syz.2.6739': attribute type 3 has an invalid length. [ 766.097022][T31102] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 766.211166][T31106] __nla_validate_parse: 9 callbacks suppressed [ 766.211184][T31106] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6741'. [ 766.278915][T31111] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6743'. [ 766.568746][T31123] sctp: [Deprecated]: syz.3.6747 (pid 31123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.568746][T31123] Use struct sctp_sack_info instead [ 766.621012][T31123] netlink: 'syz.3.6747': attribute type 1 has an invalid length. [ 766.645875][T31123] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6747'. [ 766.678129][T31123] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6747'. [ 767.039713][T31147] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 767.196663][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6755'. [ 767.680705][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6760'. [ 767.721282][T31173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6760'. [ 767.823339][T31181] x_tables: duplicate underflow at hook 1 [ 767.915843][T31186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.932458][T31191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6764'. [ 768.103220][T31202] netlink: 'syz.2.6768': attribute type 4 has an invalid length. [ 768.128967][T31202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6768'. [ 768.164030][T31196] netlink: 'syz.4.6766': attribute type 1 has an invalid length. [ 768.451631][T31222] netlink: 'syz.0.6776': attribute type 3 has an invalid length. [ 768.467463][T31222] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6776'. [ 768.789689][T31244] Bluetooth: MGMT ver 1.23 [ 768.840416][T31244] netlink: 'syz.1.6783': attribute type 5 has an invalid length. [ 768.855274][T31247] netlink: 'syz.0.6784': attribute type 6 has an invalid length. [ 768.879841][T31247] netlink: 'syz.0.6784': attribute type 5 has an invalid length. [ 769.192896][T16952] IPVS: starting estimator thread 0... [ 769.248832][T31262] debugfs: '1ùà^!' already exists in 'ieee80211' [ 769.289240][T31264] IPVS: using max 31 ests per chain, 74400 per kthread [ 769.433074][T31278] sctp: [Deprecated]: syz.2.6791 (pid 31278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 769.433074][T31278] Use struct sctp_sack_info instead [ 769.515133][T31261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.786091][T31287] netlink: 'syz.1.6794': attribute type 1 has an invalid length. [ 770.079072][T31303] vlan2: entered allmulticast mode [ 770.084352][T31303] bond0: entered allmulticast mode [ 770.101129][T31303] bond_slave_0: entered allmulticast mode [ 770.115512][T31303] bond_slave_1: entered allmulticast mode [ 770.128393][T31312] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 770.152919][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.176748][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.195541][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.219199][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.227840][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.235391][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.243103][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.250453][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.262563][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.270577][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.278182][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.286310][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.296857][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.305099][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.313041][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.320606][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.347464][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.356001][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.366708][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.401384][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.427024][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.444673][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.461738][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.477586][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.490681][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.508837][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.523563][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.550490][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.574151][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.595337][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.618071][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.654396][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.670381][T31313] IPVS: ip_vs_add_dest(): server weight less than zero [ 770.830413][T31335] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 770.936981][T31347] netlink: 'syz.0.6812': attribute type 1 has an invalid length. [ 770.945978][T31335] bond3: entered promiscuous mode [ 770.952088][T31335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 771.112536][T31348] bond3: (slave bridge3): making interface the new active one [ 771.120921][T31348] bridge3: entered promiscuous mode [ 771.131405][T31348] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 771.166549][T31353] bond1: (slave geneve2): making interface the new active one [ 771.183677][T31353] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 771.288085][T31361] veth0_macvtap: left promiscuous mode [ 771.296967][T31371] netlink: 'syz.4.6818': attribute type 11 has an invalid length. [ 771.380352][T31356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.391621][ T7599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 771.404464][ T7599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 771.425253][ T7603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 771.473918][ T7603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 771.548450][T31379] __nla_validate_parse: 12 callbacks suppressed [ 771.548469][T31379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6821'. [ 771.714396][T31393] netlink: 'syz.1.6823': attribute type 4 has an invalid length. [ 771.766770][T31396] netlink: 'syz.1.6823': attribute type 4 has an invalid length. [ 771.956723][T31403] netlink: 'syz.2.6827': attribute type 1 has an invalid length. [ 772.126647][T31403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 772.141988][T31411] xt_hashlimit: size too large, truncated to 1048576 [ 772.155183][T31416] bond1: (slave batadv1): Opening slave failed [ 772.334224][T31432] syzkaller0: entered promiscuous mode [ 772.350432][T31432] syzkaller0: entered allmulticast mode [ 772.418894][T31436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6836'. [ 772.567065][ T29] bridge0: entered promiscuous mode [ 772.603735][T31440] syzkaller1: entered promiscuous mode [ 772.617462][T31440] syzkaller1: entered allmulticast mode [ 772.854331][T31460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.865088][T31462] netlink: 'syz.0.6846': attribute type 1 has an invalid length. [ 772.887348][T31462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6846'. [ 772.901833][T31460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.968058][T31458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6844'. [ 772.979250][T31463] ip6tnl0: entered promiscuous mode [ 772.988390][T31463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6845'. [ 773.202227][T31481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6850'. [ 773.255257][T31487] netlink: 'syz.4.6852': attribute type 8 has an invalid length. [ 773.317110][T31487] syzkaller0: entered promiscuous mode [ 773.347727][T31487] syzkaller0: entered allmulticast mode [ 773.586423][T31507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6855'. [ 773.785304][T31512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6857'. [ 773.836008][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6859'. [ 773.878647][T31516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.898881][T31521] netlink: 'syz.0.6860': attribute type 1 has an invalid length. [ 773.938085][T31521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6860'. [ 774.255157][T31516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.431014][T31540] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 774.832380][T31570] block nbd7: Unsupported socket: should be TCP or UNIX. [ 775.230985][T31594] validate_nla: 1 callbacks suppressed [ 775.231002][T31594] netlink: 'syz.3.6878': attribute type 1 has an invalid length. [ 775.384833][T31609] netlink: 'syz.2.6883': attribute type 1 has an invalid length. [ 775.389449][T31594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.540384][T31609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.598917][T31612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.606469][T31612] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 775.618057][T31621] netlink: 'syz.4.6886': attribute type 1 has an invalid length. [ 775.625186][T31612] bond2: (slave gre1): Error -95 calling set_mac_address [ 775.668489][T31615] gretap1: entered promiscuous mode [ 775.691578][T31615] bond2: (slave gretap1): making interface the new active one [ 775.714226][T31615] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 775.726202][T31617] netlink: 'syz.3.6885': attribute type 12 has an invalid length. [ 775.733415][T31619] macvlan2: entered promiscuous mode [ 775.740197][T31619] macvlan2: entered allmulticast mode [ 775.748147][T31619] bond2: entered promiscuous mode [ 775.754527][T31619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 775.796946][T31619] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 775.834079][T31631] sctp: [Deprecated]: syz.3.6889 (pid 31631) Use of int in max_burst socket option. [ 775.834079][T31631] Use struct sctp_assoc_value instead [ 775.849778][T31632] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 775.863933][T31619] bond2: left promiscuous mode [ 775.888728][T31632] rdma_rxe: rxe_newlink: failed to add lo [ 776.178166][T31640] tunl0: entered promiscuous mode [ 776.204179][T31640] netlink: 'syz.4.6893': attribute type 4 has an invalid length. [ 776.251953][T31652] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 776.583835][T31671] __nla_validate_parse: 18 callbacks suppressed [ 776.583855][T31671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6904'. [ 776.663735][T31676] IPVS: length: 8 != 1152 [ 776.705972][T31675] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 776.713019][T31677] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 776.729967][T31674] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 776.801754][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6906'. [ 776.854298][T31689] netlink: 'syz.2.6907': attribute type 39 has an invalid length. [ 776.945764][T31691] netlink: 'syz.4.6909': attribute type 3 has an invalid length. [ 777.006653][T31683] nbd: must specify a size in bytes for the device [ 777.076673][T31700] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 777.086824][T31701] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 777.101927][ T264] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 777.144295][T31702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6912'. [ 777.168451][T31702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6912'. [ 777.198101][T31701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.251356][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6914'. [ 777.326781][T31708] netlink: 'syz.4.6914': attribute type 83 has an invalid length. [ 777.379224][T31708] lo: entered promiscuous mode [ 777.411281][T31708] gre0: entered promiscuous mode [ 777.480087][T31708] gretap0: entered promiscuous mode [ 777.549472][T31728] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 777.624588][T31708] erspan0: entered promiscuous mode [ 777.652328][T31708] ip_vti0: entered promiscuous mode [ 777.880412][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 778.180963][T31750] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6927'. [ 778.208754][T31757] netlink: 756 bytes leftover after parsing attributes in process `syz.3.6927'. [ 778.236087][T31750] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6927'. [ 778.271239][T31750] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6927'. [ 778.316613][T31757] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6927'. [ 778.694919][T31782] syzkaller0: entered promiscuous mode [ 778.720595][T31782] syzkaller0: entered allmulticast mode [ 778.915392][T31796] x_tables: unsorted entry at hook 2 [ 779.208436][ T30] audit: type=1804 audit(1782637707.632:15): pid=31820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6948" name="/newroot/210/cgroup.controllers" dev="tmpfs" ino=1092 res=1 errno=0 [ 779.256096][ T30] audit: type=1800 audit(1782637707.632:16): pid=31820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6948" name="cgroup.controllers" dev="tmpfs" ino=1092 res=0 errno=0 [ 779.291020][T31819] bond5: option fail_over_mac: invalid value (16) [ 779.340501][T31819] bond5 (unregistering): Released all slaves [ 779.452267][T31831] syzkaller0: entered promiscuous mode [ 779.464144][T31831] syzkaller0: entered allmulticast mode [ 779.482568][T31834] tipc: Resetting bearer [ 779.704506][T31834] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 779.730333][T31834] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 779.952210][T31834] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 779.970920][T31834] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 780.003764][T31866] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 780.078740][T31866] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 780.142254][T31834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.156615][T31834] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 780.211604][T31834] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 780.217959][T31834] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 780.357914][T31834] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.376661][T31834] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 780.643765][T31897] syzkaller1: entered promiscuous mode [ 780.657439][T31897] syzkaller1: entered allmulticast mode [ 780.750433][T31900] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.763582][T31900] bridge_slave_0 (unregistering): left allmulticast mode [ 780.771555][T31900] bridge_slave_0 (unregistering): left promiscuous mode [ 780.784465][T31900] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.873016][T31905] bond5: option min_links: invalid value (18446744073709551614) [ 780.882091][T31905] bond5: option min_links: allowed values 0 - 2147483647 [ 780.922850][T31905] bond5 (unregistering): Released all slaves [ 781.038778][T31912] geneve0: entered promiscuous mode [ 781.046461][T31912] debugfs: 'hsr0' already exists in 'hsr' [ 781.052805][T31912] Cannot create hsr debugfs directory [ 781.066118][T31909] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.507992][T31995] __nla_validate_parse: 8 callbacks suppressed [ 782.508018][T31995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7000'. [ 782.533481][T32012] validate_nla: 7 callbacks suppressed [ 782.533509][T32012] netlink: 'syz.2.7004': attribute type 4 has an invalid length. [ 782.554862][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7004'. [ 782.715914][T32022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7006'. [ 782.730038][T32023] x_tables: duplicate entry at hook 3 [ 782.752218][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7005'. [ 782.795422][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7005'. [ 782.811496][T32026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.964144][T32036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7011'. [ 783.399824][T32063] lo: entered promiscuous mode [ 783.416771][T32063] netlink: 'syz.2.7019': attribute type 2 has an invalid length. [ 783.441120][T32063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.647799][T32077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7025'. [ 783.826978][T32081] veth3: entered allmulticast mode [ 783.943457][T32089] vcan0: entered allmulticast mode [ 783.964473][T32093] batadv1: left allmulticast mode [ 783.987276][T32093] batadv1: left promiscuous mode [ 783.996800][T32093] bridge0: port 3(batadv1) entered disabled state [ 784.044118][T32093] bridge_slave_1: left allmulticast mode [ 784.078260][T32093] bridge_slave_1: left promiscuous mode [ 784.102531][T32093] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.132840][T32103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7034'. [ 784.146852][T32093] bridge_slave_0: left allmulticast mode [ 784.163475][T32093] bridge_slave_0: left promiscuous mode [ 784.171545][T32093] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.620844][T32135] netlink: 'syz.1.7042': attribute type 2 has an invalid length. [ 784.800511][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7044'. [ 784.818010][T32146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7047'. [ 784.919635][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 784.955586][T32158] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 785.312349][T32182] netlink: 'syz.0.7058': attribute type 1 has an invalid length. [ 785.372042][T32182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.495655][T32189] bond2: (slave gretap1): making interface the new active one [ 785.536925][T32189] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 785.842329][T32213] x_tables: duplicate underflow at hook 2 [ 785.845590][T32215] x_tables: duplicate underflow at hook 2 [ 785.992068][T32225] netlink: 'syz.1.7070': attribute type 1 has an invalid length. [ 786.084831][ T7601] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.109559][ T7601] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.145796][ T7601] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.164292][T32237] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 786.183497][ T7601] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.248594][T32235] netlink: 'syz.3.7072': attribute type 21 has an invalid length. [ 786.284023][T32235] netlink: 'syz.3.7072': attribute type 7 has an invalid length. [ 786.302602][T32235] netlink: 'syz.3.7072': attribute type 8 has an invalid length. [ 786.433277][T32255] block nbd7: Unsupported socket: should be TCP or UNIX. [ 786.462594][T32253] xt_hashlimit: size too large, truncated to 1048576 [ 786.573916][T32266] Bluetooth: hci2: Opcode 0x0c20 failed: -22 [ 786.709532][T32275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.838092][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 787.256886][T32312] openvswitch: netlink: Actions may not be safe on all matching packets [ 787.648854][T32333] bond3 (unregistering): Released all slaves [ 787.699119][T32340] __nla_validate_parse: 19 callbacks suppressed [ 787.699136][T32340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7100'. [ 787.782736][T32351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7104'. [ 787.795053][T32353] team0: entered promiscuous mode [ 787.805256][T32353] team_slave_0: entered promiscuous mode [ 787.817111][T32353] team_slave_1: entered promiscuous mode [ 787.955478][T32355] bond0: entered promiscuous mode [ 787.982203][T32355] bond_slave_0: entered promiscuous mode [ 787.982676][T32362] netlink: 'syz.4.7105': attribute type 1 has an invalid length. [ 788.008994][T32355] bond_slave_1: entered promiscuous mode [ 788.021958][T32355] batadv0: entered promiscuous mode [ 788.029117][T32355] debugfs: 'hsr1' already exists in 'hsr' [ 788.039173][T32355] Cannot create hsr debugfs directory [ 788.060519][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7105'. [ 788.061253][T32355] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 788.085468][T32367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7105'. [ 788.124546][T32355] bond0: left promiscuous mode [ 788.131976][T32355] bond_slave_0: left promiscuous mode [ 788.142441][T32355] bond_slave_1: left promiscuous mode [ 788.142570][T32372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7110'. [ 788.162466][T32355] batadv0: left promiscuous mode [ 788.254626][T32362] bond3: entered promiscuous mode [ 788.262722][T32362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 788.391407][ C1] vcan0: j1939_tp_rxtimer: 0xffff888043ba7c00: rx timeout, send abort [ 788.416229][T32375] bond3: (slave bridge1): making interface the new active one [ 788.425058][T32375] bridge1: entered promiscuous mode [ 788.433713][T32375] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 788.522824][T32390] syzkaller0: entered promiscuous mode [ 788.534900][T32390] syzkaller0: entered allmulticast mode [ 788.646794][T32401] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 788.811446][T32412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7120'. [ 788.855752][T32412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7120'. [ 788.866103][T32412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7120'. [ 788.875236][T32412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7120'. [ 788.884483][T32412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7120'. [ 788.915547][T32409] bond4: entered promiscuous mode [ 788.932526][T32409] bond4: entered allmulticast mode [ 788.943060][T32409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.405087][T32444] ksmbd: Unknown IPC event: 1, ignore. [ 789.691117][T32457] IPVS: length: 44 != 8 [ 790.204832][T32484] sctp: [Deprecated]: syz.1.7135 (pid 32484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.204832][T32484] Use struct sctp_sack_info instead [ 790.446562][T32491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.615557][T32516] IPv6: NLM_F_CREATE should be specified when creating new route [ 790.779687][T32523] xt_l2tp: invalid flags combination: 0 [ 791.064443][T32541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.781321][T32595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.969034][T32610] netlink: 'syz.1.7173': attribute type 7 has an invalid length. [ 792.245438][T32629] Cannot find del_set index 3 as target [ 792.726814][T32671] __nla_validate_parse: 13 callbacks suppressed [ 792.726833][T32671] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7185'. [ 792.744784][T32661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7188'. [ 792.760830][T32661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7188'. [ 792.764424][T32671] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7185'. [ 792.911034][T32659] syzkaller0: entered promiscuous mode [ 792.925076][T32659] syzkaller0: entered allmulticast mode [ 792.941847][T32671] 1·: renamed from c0· (while UP) [ 793.000744][T32671] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 793.004208][T32682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7191'. [ 793.058913][T32673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7186'. [ 793.782021][T32707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7196'. [ 795.823868][T32729] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7200'. [ 795.839432][T32728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7203'. [ 795.864102][T32723] team0: Device gtp0 is up. Set it down before adding it as a team port [ 795.876919][T32728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7203'. [ 796.022492][T32728] bond5: entered promiscuous mode [ 796.035274][T32728] 8021q: adding VLAN 0 to HW filter on device bond5 [ 796.149715][T32741] syzkaller0: entered promiscuous mode [ 796.165261][T32741] syzkaller0: entered allmulticast mode [ 796.861750][ T319] xt_hashlimit: size too large, truncated to 1048576 [ 796.910179][ T322] netlink: 'syz.4.7218': attribute type 1 has an invalid length. [ 796.950319][ T322] netlink: 'syz.4.7218': attribute type 1 has an invalid length. [ 797.183430][ T345] pim6reg527: entered allmulticast mode [ 797.212507][ T347] netlink: 'syz.1.7225': attribute type 12 has an invalid length. [ 797.247056][ T347] nbd: must specify at least one socket [ 797.417468][ T361] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 797.435333][ T366] bridge_slave_1: left allmulticast mode [ 797.450177][ T366] bridge_slave_1: left promiscuous mode [ 797.457679][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.496966][ T366] bridge_slave_0: left allmulticast mode [ 797.519060][ T366] bridge_slave_0: left promiscuous mode [ 797.537203][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.861410][ T389] netlink: 'syz.1.7237': attribute type 2 has an invalid length. [ 797.902887][ T389] __nla_validate_parse: 12 callbacks suppressed [ 797.902922][ T389] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7237'. [ 798.255520][ T410] hsr0: entered promiscuous mode [ 798.467866][ T420] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 798.702317][ T264] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.745906][ T264] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.785458][ T264] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.825103][ T264] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.897088][ T439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7252'. [ 798.928993][ T440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7252'. [ 799.322965][ T459] veth1_macvtap: left promiscuous mode [ 799.340329][ T459] macsec0: entered promiscuous mode [ 799.434553][ T473] bridge0: port 3(ipvlan2) entered blocking state [ 799.465057][ T473] bridge0: port 3(ipvlan2) entered disabled state [ 799.499851][ T473] ipvlan2: entered allmulticast mode [ 799.510001][ T473] bridge0: entered allmulticast mode [ 799.542543][ T473] ipvlan2: left allmulticast mode [ 799.562039][ T473] bridge0: left allmulticast mode [ 799.604124][ T480] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7262'. [ 799.634173][ T480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7262'. [ 799.656753][ T480] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7262'. [ 799.684175][ T480] netlink: 'syz.0.7262': attribute type 2 has an invalid length. [ 799.707581][ T480] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7262'. [ 799.895447][ T494] ipvlan2: entered promiscuous mode [ 799.936274][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7267'. [ 800.002904][ T495] tun1: tun_chr_ioctl cmd 1074025673 [ 800.012276][ T496] tun1: tun_chr_ioctl cmd 1074025675 [ 800.022269][ T496] tun1: persist enabled [ 800.026623][ T498] tun1: tun_chr_ioctl cmd 1074025675 [ 800.048020][ T498] tun1: persist enabled [ 800.340055][ T513] batman_adv: batadv0: Adding interface: dummy0 [ 800.387569][ T508] can: request_module (can-proto-0) failed. [ 800.418409][ T513] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.505733][ T526] xt_cluster: node mask cannot exceed total number of nodes [ 800.528963][ T513] batman_adv: batadv0: Interface activated: dummy0 [ 800.612813][ T508] batadv0: mtu less than device minimum [ 800.648660][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.662467][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.676447][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.689637][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.703758][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.718520][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.734494][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.747323][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.761517][ T508] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 801.155348][ T556] xt_TPROXY: Can be used only with -p tcp or -p udp [ 801.232914][ T563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7284'. [ 801.633388][ T582] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7289'. [ 801.796209][ T588] veth1_to_bond: entered allmulticast mode [ 801.835235][ T588] veth1_to_bond: entered promiscuous mode [ 801.925078][ T590] veth1_to_bond (unregistering): left allmulticast mode [ 801.963688][ T590] veth1_to_bond (unregistering): left promiscuous mode [ 802.049481][ T590] bond0: (slave bond_slave_1): Releasing backup interface [ 802.123358][ T597] netlink: 'syz.3.7294': attribute type 1 has an invalid length. [ 802.360598][ T597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 803.202914][ T653] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 803.266243][ T656] netlink: 'syz.4.7311': attribute type 1 has an invalid length. [ 803.292999][ T657] __nla_validate_parse: 4 callbacks suppressed [ 803.293034][ T657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7310'. [ 803.423422][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7312'. [ 803.462542][ T668] xt_policy: too many policy elements [ 803.521580][ T659] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 803.559059][ T659] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 803.578123][ T659] bond5: (slave ip6gre1): making interface the new active one [ 803.590151][ T659] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 803.603410][ T681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7315'. [ 803.626406][ T662] netlink: 'syz.1.7314': attribute type 1 has an invalid length. [ 803.879230][ T682] syzkaller0: entered promiscuous mode [ 803.896034][ T682] syzkaller0: entered allmulticast mode [ 804.088627][ T699] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7321'. [ 804.206668][ T704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7322'. [ 804.452934][ T720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7326'. [ 804.470245][ T720] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 804.480424][ T721] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 804.491208][ T721] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 804.501842][ T722] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7326'. [ 804.955078][ T733] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 805.471890][ T757] netlink: 'syz.3.7339': attribute type 2 has an invalid length. [ 805.496424][ T757] vlan0: entered promiscuous mode [ 805.687478][ T767] netlink: 'syz.0.7342': attribute type 7 has an invalid length. [ 806.772540][ T825] netlink: 'syz.0.7354': attribute type 1 has an invalid length. [ 806.875429][ T825] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 807.548991][ T860] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 807.576679][ T860] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 807.594786][ T857] net_ratelimit: 11 callbacks suppressed [ 807.594805][ T857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 807.678244][ T7601] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 807.883371][ T871] xt_hashlimit: overflow, rate too high: 0 [ 808.453652][ T897] netlink: 'syz.2.7377': attribute type 9 has an invalid length. [ 808.558401][ T905] __nla_validate_parse: 14 callbacks suppressed [ 808.558421][ T905] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7376'. [ 808.573497][ T894] team0: Device xfrm0 is of different type [ 809.117977][ T929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.403973][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.452848][ T944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.488063][ T944] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 809.504231][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.533813][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.543425][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7386'. [ 809.555135][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.603585][ T955] netlink: 'syz.3.7389': attribute type 1 has an invalid length. [ 809.627668][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.696676][ T955] bond7: entered promiscuous mode [ 809.704486][ T955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 809.726368][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.809900][ T955] 8021q: adding VLAN 0 to HW filter on device bond7 [ 809.835464][ T955] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 809.855257][ T955] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 809.878360][ T955] bond7: (slave vti0): making interface the new active one [ 809.886517][ T955] vti0: entered promiscuous mode [ 809.906364][ T955] vti0: left promiscuous mode [ 809.957808][ T965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7390'. [ 809.967016][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 809.989059][ T944] netlink: 'syz.2.7387': attribute type 10 has an invalid length. [ 810.939941][ T1010] tipc: Started in network mode [ 810.958345][ T1010] tipc: Node identity d60b7f9a380f, cluster identity 4711 [ 810.996887][ T1010] tipc: Enabled bearer , priority 0 [ 811.045329][ T1011] syzkaller0: entered promiscuous mode [ 811.079900][ T1011] syzkaller0: entered allmulticast mode [ 811.129545][ T1010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 811.262251][ T1010] tipc: Resetting bearer [ 811.356559][ T1008] tipc: Resetting bearer [ 811.435566][ T1008] tipc: Disabling bearer [ 811.589615][ T1030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7408'. [ 811.718040][ T1035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7409'. [ 812.270622][ T1057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7412'. [ 812.323095][ T1057] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7412'. [ 815.019617][ T4994] udevd[4994]: worker [16502] /devices/virtual/block/nbd4 is taking a long time [ 815.509869][ T1065] bond6: entered promiscuous mode [ 815.516050][ T1065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 815.534630][ T1069] ipvlan4: entered allmulticast mode [ 815.547527][ T1069] bond6: entered allmulticast mode [ 815.602705][ T1057] veth3: entered promiscuous mode [ 815.646584][ T1072] bond6: (slave bridge0): making interface the new active one [ 815.665172][ T1072] bridge0: entered promiscuous mode [ 815.676625][ T1072] bridge0: entered allmulticast mode [ 815.706651][ T1072] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 815.753057][ T1085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7417'. [ 815.785618][ T1085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7417'. [ 815.991811][ T1100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7420'. [ 816.045722][ T1100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7420'. [ 816.080061][ T1105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7422'. [ 816.356735][ T1115] 8021q: adding VLAN 0 to HW filter on device bond5 [ 816.398759][ T1115] bond5 (unregistering): Released all slaves [ 816.542553][ T1134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7426'. [ 816.653081][ T1113] syzkaller1: entered promiscuous mode [ 816.659239][ T1113] syzkaller1: entered allmulticast mode [ 816.931728][ T1134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7426'. [ 817.115065][ T1148] x_tables: duplicate underflow at hook 3 [ 817.152312][ T1145] lo speed is unknown, defaulting to 1000 [ 817.173664][ T1145] ±ÿ speed is unknown, defaulting to 1000 [ 817.204891][ T1145] lo speed is unknown, defaulting to 1000 [ 817.211011][ T1152] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7431'. [ 817.238306][ T1153] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7431'. [ 817.635161][ T1166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7434'. [ 817.921742][ T1180] validate_nla: 26 callbacks suppressed [ 817.921760][ T1180] netlink: 'syz.0.7440': attribute type 1 has an invalid length. [ 818.105576][ T1145] xfrm0 speed is unknown, defaulting to 1000 [ 818.900220][ T1213] bond3 (unregistering): Released all slaves [ 819.010914][ T1214] bond3 (unregistering): Released all slaves [ 819.058856][ T1201] syzkaller0: entered promiscuous mode [ 819.065001][ T1201] syzkaller0: entered allmulticast mode [ 819.559788][ T30] audit: type=1804 audit(1782637747.982:17): pid=1246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7450" name="/newroot/138/cgroup.controllers" dev="tmpfs" ino=718 res=1 errno=0 [ 819.677492][ T30] audit: type=1800 audit(1782637747.982:18): pid=1246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7450" name="cgroup.controllers" dev="tmpfs" ino=718 res=0 errno=0 [ 819.755993][ T1247] syzkaller1: entered promiscuous mode [ 819.779784][ T1247] syzkaller1: entered allmulticast mode [ 820.150035][ T1270] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 820.161947][ T1269] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 820.424273][ T1275] openvswitch: netlink: Flow key attr not present in new flow. [ 820.469027][ T1280] netlink: 'syz.2.7462': attribute type 10 has an invalid length. [ 821.312558][ T1319] netlink: 'syz.2.7470': attribute type 1 has an invalid length. [ 821.358094][ T1319] __nla_validate_parse: 8 callbacks suppressed [ 821.358143][ T1319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7470'. [ 821.932829][ T1332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 822.091483][ T1355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7481'. [ 822.213121][ T1361] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7480'. [ 822.264984][ T1368] sctp: [Deprecated]: syz.0.7485 (pid 1368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.264984][ T1368] Use struct sctp_sack_info instead [ 822.421252][ T1353] bond7: Unable to set up delay as MII monitoring is disabled [ 822.483534][ T1353] bond7 (unregistering): Released all slaves [ 822.560300][ T1383] netlink: 'syz.0.7489': attribute type 29 has an invalid length. [ 822.612052][ T1383] netlink: 'syz.0.7489': attribute type 12 has an invalid length. [ 823.204422][ T1405] netlink: 'syz.0.7494': attribute type 1 has an invalid length. [ 823.349969][ T1408] ip6gretap1: entered promiscuous mode [ 823.365781][ T1408] ip6gretap1: entered allmulticast mode [ 823.394990][ T1408] bond7: (slave ip6gretap1): making interface the new active one [ 823.421229][ T1408] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.433689][ T1408] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.453509][ T1408] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 823.586703][ T1397] syz.4.7491 (1397) used greatest stack depth: 17808 bytes left [ 823.621140][ T1413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 824.114640][ T1444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7497'. [ 824.409899][ T1444] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.441669][ T1446] macvlan2: entered promiscuous mode [ 824.447508][ T1446] macvlan2: entered allmulticast mode [ 824.501588][ T1446] bond8: entered promiscuous mode [ 824.517288][ T1460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7500'. [ 824.544937][ T1446] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 824.585065][ T1463] netlink: 'syz.3.7501': attribute type 1 has an invalid length. [ 824.616860][ T1446] bond8: left promiscuous mode [ 824.736666][ T1465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7502'. [ 824.793297][ T1463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7501'. [ 824.800837][ T1465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7502'. [ 824.866698][ T1466] bond8: (slave geneve2): making interface the new active one [ 824.911457][ T1466] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 825.195657][ T1463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 825.227816][ T7603] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.262910][ T7603] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.263823][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7506'. [ 825.311904][T13249] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.348170][T13249] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.941881][ T1516] netlink: 'syz.3.7517': attribute type 2 has an invalid length. [ 825.946281][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7518'. [ 826.004101][ T1516] : entered promiscuous mode [ 826.053789][ T1516] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 826.092545][ T1516] batman_adv: batadv0: Adding interface: gretap1 [ 826.108177][ T1516] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.144094][ T1516] batman_adv: batadv0: Interface activated: gretap1 [ 826.152307][ T1516] batadv0: mtu less than device minimum [ 826.162458][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.175643][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.187349][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.199056][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.210727][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.222437][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.234087][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.245777][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.257479][ T1516] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 826.308438][ T1520] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 826.495028][ T1531] syzkaller0: entered promiscuous mode [ 826.516086][ T1531] syzkaller0: entered allmulticast mode [ 826.696033][ T1531] netlink: 'syz.3.7522': attribute type 83 has an invalid length. [ 826.782991][ T1551] __nla_validate_parse: 1 callbacks suppressed [ 826.783009][ T1551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7528'. [ 826.899332][ T1552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7528'. [ 827.417831][ T1574] sctp: [Deprecated]: syz.1.7534 (pid 1574) Use of int in max_burst socket option. [ 827.417831][ T1574] Use struct sctp_assoc_value instead [ 827.571492][ T1584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7537'. [ 827.581791][ T1583] 8021q: VLANs not supported on ip_vti0 [ 827.595950][ T1579] syzkaller1: entered promiscuous mode [ 827.623300][ T1579] syzkaller1: entered allmulticast mode [ 827.703502][ T1589] sctp: [Deprecated]: syz.0.7536 (pid 1589) Use of int in maxseg socket option. [ 827.703502][ T1589] Use struct sctp_assoc_value instead [ 828.234970][ T1603] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 828.670083][ T1619] nbd: couldn't find device at index 1694498816 [ 829.070145][ T1635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7550'. [ 830.094295][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7566'. [ 830.489036][ T1711] netlink: 'syz.1.7575': attribute type 4 has an invalid length. [ 830.525047][ T1711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7575'. [ 830.596786][ T1711] .`: renamed from bond0 (while UP) [ 830.766428][ T1723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 830.834055][ T1719] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 830.924113][ T1719] bond6 (unregistering): Released all slaves [ 831.026958][ T1724] veth7: entered allmulticast mode [ 831.049258][ T1733] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 831.180150][ T1744] net_ratelimit: 10 callbacks suppressed [ 831.180169][ T1744] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 831.437419][ T1758] sctp: [Deprecated]: syz.0.7590 (pid 1758) Use of int in max_burst socket option deprecated. [ 831.437419][ T1758] Use struct sctp_assoc_value instead [ 831.486879][ T1760] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7591'. [ 831.525658][ T1760] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7591'. [ 831.550532][ T1764] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7591'. [ 831.599975][ T30] audit: type=1804 audit(1782637760.032:19): pid=1766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7593" name="/newroot/347/cgroup.controllers" dev="tmpfs" ino=1793 res=1 errno=0 [ 831.630172][ T1765] tap0: tun_chr_ioctl cmd 2148553947 [ 831.645023][ T1765] tap0: tun_chr_ioctl cmd 35108 [ 831.668381][ T30] audit: type=1800 audit(1782637760.032:20): pid=1766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7593" name="cgroup.controllers" dev="tmpfs" ino=1793 res=0 errno=0 [ 832.212013][ T1782] syzkaller0: entered promiscuous mode [ 832.225055][ T1782] syzkaller0: entered allmulticast mode [ 832.242871][ T1790] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 832.726104][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7596'. [ 832.801531][ T1810] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 832.946474][ T1819] netlink: 'syz.4.7609': attribute type 4 has an invalid length. [ 835.986375][ T1833] syzkaller0: entered promiscuous mode [ 835.999579][ T1833] syzkaller0: entered allmulticast mode [ 836.120956][ T1840] netlink: 'syz.3.7615': attribute type 3 has an invalid length. [ 836.140446][ T1840] netlink: 'syz.3.7615': attribute type 1 has an invalid length. [ 836.301594][ T1845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7616'. [ 836.322369][ T1846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7616'. [ 836.453060][ T1852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'. [ 836.473362][ T1849] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 836.573168][ T1846] syzkaller0: entered promiscuous mode [ 836.593320][ T1846] syzkaller0: entered allmulticast mode [ 836.773983][ T1867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7625'. [ 836.970284][ T1876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7626'. [ 837.040165][ T1880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 837.092817][ T1880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'. [ 837.136453][ T1884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7630'. [ 837.213322][ T1884] gre1: entered promiscuous mode [ 837.235733][ T1884] gre1: entered allmulticast mode [ 837.383802][ T1897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.551673][ T1902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.675795][ T1907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7637'. [ 838.059486][ T1924] netlink: 'syz.1.7642': attribute type 1 has an invalid length. [ 838.231328][ T1929] __nla_validate_parse: 1 callbacks suppressed [ 838.231344][ T1929] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7643'. [ 838.321559][ T1944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7646'. [ 838.521462][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.564792][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.599498][ T1955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.631066][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.693417][ T1955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.720369][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.766942][ T1955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.790525][ T1962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.803005][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.816923][ T1955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.845548][ T1951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.128026][ T1972] netlink: 'syz.4.7654': attribute type 83 has an invalid length. [ 839.318635][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.855941][ T1998] sch_fq: defrate 0 ignored. [ 840.194834][ T2013] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7664'. [ 840.250180][ T2013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7664'. [ 840.300016][ T2013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7664'. [ 840.375630][ T2028] netlink: 'syz.2.7669': attribute type 21 has an invalid length. [ 840.409325][ T2028] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7669'. [ 840.451447][ T2028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7669'. [ 840.629863][ T2038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7673'. [ 840.647007][ T2034] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7672'. [ 840.733180][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 841.134701][ T2057] netlink: 'syz.1.7676': attribute type 2 has an invalid length. [ 841.144990][ T2057] netlink: 'syz.1.7676': attribute type 1 has an invalid length. [ 841.154471][ T2057] netlink: 'syz.1.7676': attribute type 1 has an invalid length. [ 841.164236][ T2057] netlink: 'syz.1.7676': attribute type 1 has an invalid length. [ 841.178644][ T2057] netlink: 'syz.1.7676': attribute type 1 has an invalid length. [ 841.197538][ T2057] netlink: 'syz.1.7676': attribute type 1 has an invalid length. [ 841.685750][ T2038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.361552][ T2060] vcan1: entered promiscuous mode [ 842.387227][ T2060] vcan1: entered allmulticast mode [ 842.565367][ T2054] netlink: 'syz.0.7674': attribute type 11 has an invalid length. [ 842.565499][ T7603] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.582968][ T7603] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.593778][ T7603] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.605094][ T7603] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.618794][ T7603] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.628440][ T7603] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.660185][ T7603] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.683942][ T7603] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.704919][ T2072] syzkaller0: entered promiscuous mode [ 842.717122][ T2072] syzkaller0: entered allmulticast mode [ 842.925021][ T2079] netlink: 'syz.1.7683': attribute type 1 has an invalid length. [ 843.321701][ T2094] __nla_validate_parse: 5 callbacks suppressed [ 843.321721][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7687'. [ 843.608558][ T2107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'. [ 843.746327][ T2117] xfrm1: entered allmulticast mode [ 843.810873][ T2119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7693'. [ 843.836241][ T2119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7693'. [ 844.074009][ T2134] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 844.163066][ T2138] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 844.174484][ T2139] netlink: 'syz.2.7700': attribute type 10 has an invalid length. [ 844.183373][ T2139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7700'. [ 844.221441][ T2139] team0: Port device geneve1 added [ 844.228931][ T1439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.246454][ T1439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.256503][ T1439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.270439][ T1439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.454473][ T2146] netlink: 'syz.0.7704': attribute type 19 has an invalid length. [ 844.753630][ T2162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7708'. [ 844.878880][ T2162] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 845.236909][ T2183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7714'. [ 845.286467][ T2183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7714'. [ 845.368813][ T2187] netlink: 'syz.0.7716': attribute type 1 has an invalid length. [ 845.475142][ T2195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7718'. [ 845.486726][ T2196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7716'. [ 845.565229][ T2196] bond10 (unregistering): Released all slaves [ 845.610705][ T2199] syzkaller0: entered promiscuous mode [ 845.655312][ T2199] syzkaller0: entered allmulticast mode [ 846.054900][ T2217] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 846.080810][ T2217] bond6 (unregistering): Released all slaves [ 846.304466][ T2229] bond0: entered promiscuous mode [ 846.311218][ T2229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.381192][ T2235] syzkaller0: entered promiscuous mode [ 846.416645][ T2235] syzkaller0: entered allmulticast mode [ 846.464829][ T2238] tipc: Started in network mode [ 846.485964][ T2238] tipc: Node identity cab0b84fd73d, cluster identity 4711 [ 846.523374][ T2238] tipc: Enabled bearer , priority 0 [ 847.100093][ T2261] syzkaller0: entered promiscuous mode [ 847.110203][ T2261] syzkaller0: entered allmulticast mode [ 847.128212][ T2232] tipc: Resetting bearer [ 847.132714][ T2279] validate_nla: 2 callbacks suppressed [ 847.132747][ T2279] netlink: 'syz.3.7742': attribute type 1 has an invalid length. [ 847.163420][ T2279] netlink: 'syz.3.7742': attribute type 1 has an invalid length. [ 847.179590][ T2232] tipc: Disabling bearer [ 850.428989][ T2279] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 850.682838][ T2325] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 850.754731][ T2330] __nla_validate_parse: 11 callbacks suppressed [ 850.754750][ T2330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7751'. [ 851.081693][ T2344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7754'. [ 851.442803][ T2359] netlink: 524 bytes leftover after parsing attributes in process `syz.0.7760'. [ 851.478283][ T31] INFO: task kworker/1:3H:22816 blocked for more than 143 seconds. [ 851.486486][ T31] Not tainted syzkaller #0 [ 851.496605][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 851.511856][ T31] task:kworker/1:3H state:D stack:26920 pid:22816 tgid:22816 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 851.572551][ T31] Workqueue: kblockd blk_mq_run_work_fn [ 851.588762][ T31] Call Trace: [ 851.609185][ T31] [ 851.621865][ T31] __schedule+0x17d9/0x56c0 [ 851.639785][ T31] ? __lock_acquire+0x683/0x2cf0 [ 851.646612][ T31] ? __pfx___schedule+0x10/0x10 [ 851.656231][ T31] ? schedule+0x90/0x2b0 [ 851.676130][ T31] schedule+0x164/0x2b0 [ 851.683441][ T31] schedule_timeout+0x152/0x2c0 [ 851.698053][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 851.707053][ T31] ? __pfx_process_timeout+0x10/0x10 [ 851.713297][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 851.721208][ T31] ? prepare_to_wait_event+0x436/0x480 [ 851.726771][ T31] nbd_queue_rq+0x889/0x1150 [ 851.733209][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 851.738983][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 851.745138][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 851.751073][ T31] ? sbitmap_get+0x229/0x390 [ 851.755780][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 851.762398][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 851.768991][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 851.775445][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 851.782614][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 851.787868][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 851.793114][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 851.799307][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 851.805335][ T31] ? blk_mq_run_work_fn+0x144/0x300 [ 851.811073][ T31] blk_mq_run_work_fn+0x16c/0x300 [ 851.816148][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 851.823368][ T31] process_scheduled_works+0xa8e/0x14e0 [ 851.829873][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 851.835910][ T31] ? assign_work+0x3cf/0x5d0 [ 851.840702][ T31] worker_thread+0xa47/0xfb0 [ 851.845331][ T31] ? __kthread_parkme+0x71/0x1f0 [ 851.850555][ T31] kthread+0x388/0x470 [ 851.854669][ T31] ? __pfx_worker_thread+0x10/0x10 [ 851.860467][ T31] ? __pfx_kthread+0x10/0x10 [ 851.865101][ T31] ret_from_fork+0x514/0xb70 [ 851.869916][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 851.875071][ T31] ? __switch_to+0xc89/0x1420 [ 851.880173][ T31] ? __pfx_kthread+0x10/0x10 [ 851.884813][ T31] ret_from_fork_asm+0x1a/0x30 [ 851.890355][ T31] [ 851.894457][ T31] [ 851.894457][ T31] Showing all locks held in the system: [ 851.903085][ T31] 1 lock held by khungtaskd/31: [ 851.908145][ T31] #0: ffffffff8e959c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 851.927466][ T31] 1 lock held by udevd/4994: [ 851.933567][ T31] 2 locks held by getty/5385: [ 851.961786][ T31] #0: ffff888035adf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 851.987593][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 851.998006][ T31] 1 lock held by udevd/16502: [ 852.002744][ T31] #0: ffff888026b0d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 852.012642][ T31] 4 locks held by kworker/1:3H/22816: [ 852.018348][ T31] #0: ffff88801e6a3d40 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 852.029582][ T31] #1: ffffc90003417c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 852.043416][ T31] #2: ffff88802696b018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 852.052993][ T31] #3: ffff888026cee178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 852.062299][ T31] [ 852.064653][ T31] ============================================= [ 852.064653][ T31] [ 852.074504][ T31] NMI backtrace for cpu 1 [ 852.074531][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 852.074553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.074568][ T31] Call Trace: [ 852.074576][ T31] [ 852.074583][ T31] dump_stack_lvl+0xe8/0x150 [ 852.074612][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 852.074738][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 852.074777][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 852.074805][ T31] sys_info+0x135/0x170 [ 852.074826][ T31] watchdog+0xfd7/0x1030 [ 852.074881][ T31] ? watchdog+0x1c7/0x1030 [ 852.074916][ T31] kthread+0x388/0x470 [ 852.074938][ T31] ? __pfx_watchdog+0x10/0x10 [ 852.074964][ T31] ? __pfx_kthread+0x10/0x10 [ 852.074986][ T31] ret_from_fork+0x514/0xb70 [ 852.075011][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 852.075033][ T31] ? __switch_to+0xc89/0x1420 [ 852.075065][ T31] ? __pfx_kthread+0x10/0x10 [ 852.075087][ T31] ret_from_fork_asm+0x1a/0x30 [ 852.075128][ T31] [ 852.075145][ T31] Sending NMI from CPU 1 to CPUs 0: [ 852.188011][ C0] NMI backtrace for cpu 0 [ 852.188030][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 852.188050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.188061][ C0] RIP: 0010:__hrtimer_get_next_event+0x23/0x600 [ 852.188091][ C0] Code: 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 41 89 f4 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 6d 82 13 00 <48> c7 c0 00 06 33 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 45 05 00 [ 852.188172][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00000006 [ 852.188216][ C0] RAX: ffffffff81b2ef13 RBX: dffffc0000000000 RCX: ffffffff8e68ef40 [ 852.188230][ C0] RDX: 0000000000010000 RSI: 00000000000000f0 RDI: ffff8880b86281c0 [ 852.188242][ C0] RBP: dffffc0000000000 R08: ffffffff81b3e6ad R09: 0000000000080000 [ 852.188254][ C0] R10: 0000000000000000 R11: ffffffff9a4f3748 R12: 00000000000000f0 [ 852.188266][ C0] R13: 0000000000000002 R14: ffff8880b86281c0 R15: ffff8880b8628230 [ 852.188279][ C0] FS: 0000000000000000(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 852.188293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.188306][ C0] CR2: 00007f8ef7bea2f8 CR3: 00000000752ce000 CR4: 00000000003526f0 [ 852.188321][ C0] Call Trace: [ 852.188329][ C0] [ 852.188343][ C0] hrtimer_interrupt+0x56d/0x910 [ 852.188383][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 852.188409][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 852.188466][ C0] [ 852.188472][ C0] [ 852.188480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 852.188519][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 852.188543][ C0] Code: 7c 76 02 e9 53 04 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 b9 15 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 852.188558][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000242 [ 852.188572][ C0] RAX: 0000000000de26f7 RBX: ffffffff819ab370 RCX: 0000000080000001 [ 852.188584][ C0] RDX: 0000000000000001 RSI: ffffffff8dfe0294 RDI: ffffffff8c2a9f80 [ 852.188596][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 852.188609][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 852.188627][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 852.188643][ C0] ? do_idle+0x2e0/0x540 [ 852.188666][ C0] default_idle+0x9/0x20 [ 852.188682][ C0] default_idle_call+0x72/0xb0 [ 852.188699][ C0] do_idle+0x2e0/0x540 [ 852.188717][ C0] ? __pfx_do_idle+0x10/0x10 [ 852.188735][ C0] ? do_idle+0x4cd/0x540 [ 852.188753][ C0] cpu_startup_entry+0x43/0x60 [ 852.188769][ C0] rest_init+0x2de/0x300 [ 852.188789][ C0] start_kernel+0x392/0x3e0 [ 852.188894][ C0] x86_64_start_reservations+0x24/0x30 [ 852.188947][ C0] x86_64_start_kernel+0x137/0x1b0 [ 852.188971][ C0] common_startup_64+0x13e/0x157 [ 852.189005][ C0] [ 852.479303][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 852.486159][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 852.495270][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.505333][ T31] Call Trace: [ 852.508618][ T31] [ 852.511555][ T31] vpanic+0x56c/0xa60 [ 852.515538][ T31] ? __pfx___schedule+0x10/0x10 [ 852.520392][ T31] ? __pfx_vpanic+0x10/0x10 [ 852.524899][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 852.531064][ T31] panic+0xc5/0xd0 [ 852.534783][ T31] ? __pfx_panic+0x10/0x10 [ 852.539198][ T31] ? preempt_schedule_common+0x82/0xd0 [ 852.544662][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 852.550036][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 852.556189][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 852.562343][ T31] watchdog+0x1030/0x1030 [ 852.566712][ T31] ? watchdog+0x1c7/0x1030 [ 852.571136][ T31] kthread+0x388/0x470 [ 852.575207][ T31] ? __pfx_watchdog+0x10/0x10 [ 852.579895][ T31] ? __pfx_kthread+0x10/0x10 [ 852.584482][ T31] ret_from_fork+0x514/0xb70 [ 852.589070][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 852.594178][ T31] ? __switch_to+0xc89/0x1420 [ 852.598863][ T31] ? __pfx_kthread+0x10/0x10 [ 852.603456][ T31] ret_from_fork_asm+0x1a/0x30 [ 852.608232][ T31] [ 852.611522][ T31] Kernel Offset: disabled [ 852.615834][ T31] Rebooting in 86400 seconds..