last executing test programs: 3.940358962s ago: executing program 2 (id=6986): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private}}}], 0x20}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) shutdown(r2, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x24020400) 3.721694517s ago: executing program 0 (id=6988): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0xabe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) 3.527617288s ago: executing program 0 (id=6990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700202c00fe800000000000000000000000000000ff0200000000000000000000000000013c00000000000000c2040000800100006200000000000000810090780000800000ae606daf284268826bc1808cea43732e3c12919b64823d226776bcc41e3c5202785d3229bd56f53e60d87c4b46daa02a2172e8589ae8171f82bba86ff128cf82cbd379485a6ba4735a2c4ca515903da5cffde131b352d32f8d864089a5128d60f40e040533542e9fd0b0cfaa869e8017e40fa725c418"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x9, 0x30, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xe2}, @ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 3.4497312s ago: executing program 3 (id=6991): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 2.945617836s ago: executing program 2 (id=6994): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00090027bd7000000000000400000004000e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000000)=[{r9, 0x1220}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)={[0x6d9c4388]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002e00090027bd7000000000000400000004000e"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ppoll(&(0x7f0000000000)=[{r9, 0x1220}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000140)={[0x6d9c4388]}, 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', 0x0}) (async) 1.42835373s ago: executing program 2 (id=6997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000002c0)={'a', ' *:* ', 'w\x00'}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x4c, r7, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @alu={0x7, 0x0, 0x4, 0x6, 0x5, 0xc, 0x8}], &(0x7f0000000080)='GPL\x00', 0xfffffff4, 0xbf, &(0x7f0000000380)=""/191, 0x41100, 0x48, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0xc, 0x5, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000440)=[r4, r4, r10, r0, r10, r0, r0, r0, r4], &(0x7f00000004c0)=[{0x5, 0x5, 0xc}, {0x4, 0x2, 0xe, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r11, 0x0, 0xf2, 0x23, &(0x7f0000000640)="01224e5deae8ff369a1619ae40dcbddc969914b6364e4c3fc76e7f33b11e0857404ebaacef26778482ac90e5874a69c592483821121c3da394f17b14c557c146082f386d795e90b2c58c183596886046d7420ce669c74db2a5f95b7d1595a460595ea0bbcf435676290c566027e716639ea0ec21554245bfaf224458dd7856ee6f6090fd1b4cba652b98e9971b0f7bb4ddfc04cd8bbc7de6f478fca129931e77cd69430e717a3d16b13a910e24df7628e5fa59c141eb71c3934ad600cb353b1c2cea810196ebaa91cb8540d705d925d3502b003a30afda7a2f6ea7362427e656f15b2c2fda51138b5bdc9577150ccb15d934", &(0x7f00000005c0)=""/35, 0xba0, 0x0, 0x1000, 0x92, &(0x7f0000000740)="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", &(0x7f0000001740)="1c5072f7bfeb9c2e0b069ca85f6f33a3f84659c7d628e9b300f8279a86d01c341a77a917f59c1aa9cc8574fcbfc91c813465fe249cc1179e5e5a7032a665257a753334d821326f413cd6270dd19fc8c0bd95fdc6c1ab5009d434734eff8262638deecb4f2ed1b3d40481c4f1f581db15ebd3139664d15bd8ce40e13a37554dac83065f46e415cf8847bb3f4eee76c0c06011", 0x3, 0x0, 0x82a}, 0x50) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r6) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000001880)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.427386128s ago: executing program 3 (id=6998): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000005140)={r1}) r3 = socket(0xa, 0x1, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x8, 0x0, &(0x7f0000003c00)) getsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000000)={@rand_addr, @private, @local}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x0, 0x0, 0x5}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1.418231675s ago: executing program 1 (id=6999): bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@generic={&(0x7f0000007c80)='.\x00', 0x0, 0x10}, 0x18) r0 = socket$inet(0x2, 0xa, 0x400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 1.295308371s ago: executing program 0 (id=7000): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) r1 = socket$pptp(0x18, 0x1, 0x2) accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.291476267s ago: executing program 4 (id=7001): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0080, 0x0) close(r3) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffe0}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffe, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140100000b0b01022cbd7000fddbdf25010009004600eb80d88e76f5816bc70789e2c44774bd13d0397ae2028dff46dc7f71712a3ac3060ae1cdc700a40cf5149e465a7573c2d569074736e69eef1b9d4000000000000000f77f163c15000008", @ANYRES32=r1, @ANYBLOB="fd195224462035be87121997cd8c5264baac7f3a9d4be04d7701b66339e293df8d16a74936972fb5d7b68a1c7b67be47843e77e32b393bcffcfe4887fa7739c424f6623dd72d981d76291f44cf4b9d7e82ad9b12d935b611bb9bfe47b5a13577ab6c86145ec29f950fc864dc2ca66066e5f06555efb02ccd8cba8449bc96619bf9f5c574ed02576eca38b30d917164d08fa081f41978c26dd4e1e53ab2fdeb34b22f48c5f993c447c2797af60de20e20"], 0x114}, 0x1, 0x0, 0x0, 0x4000884}, 0x80) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 1.273464256s ago: executing program 3 (id=7002): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000e2b1860e2aa"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) 1.215586917s ago: executing program 1 (id=7003): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0xa9, 0x9, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x2, 0xe11}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xa}, 0x94) 1.214036067s ago: executing program 2 (id=7004): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.100715685s ago: executing program 1 (id=7005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) close(r4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x20000400) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x70, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x54e4, @empty, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @mcast2, 0x80}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x12c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf18}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff0c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.032362702s ago: executing program 3 (id=7006): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000016c4c918be620b44a00001c0000000000029078ff177c90787f00000100000000000000"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x90}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$ax25(r7, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) writev(r7, &(0x7f0000000040)=[{&(0x7f00000012c0)="a4eac9", 0x3}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYBLOB="e8df64da2126acda5824cf151200dc4c207041581ac01c91c9884c75", @ANYRES8=r6, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x7f}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r6) 967.584338ms ago: executing program 0 (id=7007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x8847}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "101b01", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x50, 0x11, &(0x7f0000000280)="c6756faed2fd23c68576f6fe2e9434ba73c207d2e7cd0f407da02d16ba601786ea2c10da803406d2e67354ccf9ac3911d96a48a46a6d7c57c3696c5fa11180871f7a0defe5886889a7d72080ae2fe89d", &(0x7f0000000000)=""/17, 0x4, 0x0, 0x7a, 0x10, &(0x7f0000000300)="b0bfc2c63480e944f64d169354e788a52ce05f381d7786eb33ff727711757a894cf41d0df2d5ec951899a92d9cd192203c3e80c42ac8e2a968cb0bf8394e55f9fb3dfedc909df719d2dabc0ad11ede5a1833bb62ad8de67a5a2a001a35a8c80c9259db6d6750be202cf48e83e3db79e92cbee92a32be6810d08d", &(0x7f0000000080)="770a7ff82024c3d14a483af441c52b7d", 0x3, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x2, 0x0, 0xe7}}}}}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x18, 0x31, 0x901, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x5452, &(0x7f00000000c0)) 920.780258ms ago: executing program 2 (id=7008): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20001800}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x7f, 0x7, 0x5, 0x2, 0xfff, 0x4, 0x20000000, 0x7ff, 0x5, 0xeacd, 0x7, 0xc, 0x9, 0x7}, 0x10, [0x0, 0x0]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x140d, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x58}}, 0x400d081) socket$kcm(0x10, 0x3, 0x10) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 870.822502ms ago: executing program 4 (id=7009): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@broadcast}]}, 0x20}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x240040c0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 643.380117ms ago: executing program 1 (id=7010): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000c9d1000000000000000000002000"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 643.123371ms ago: executing program 4 (id=7011): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000f900ffff0000000004000000850000003600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703020b173028e80008000000b72de0fb170400000100000000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)={r0, 0x7f, 0x8, "1f0433106e95f8c77b7533e47d02f531ea1a1269723aac2feff2372f8c307d21c387b7e6eeb6"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rose(r0, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default}, 0x1c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) getsockopt(r0, 0x7, 0x9, &(0x7f0000000000)=""/110, &(0x7f0000000080)=0x6e) 561.289626ms ago: executing program 2 (id=7012): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180d00000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000007b030000faffffff8500000006000000943b00011000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000400000000001c00128009000100626f6e6400000000ffff0000000000000000000045466fc0e0a71af2626c0bdc516b3d2e54b5346e6809003adc5b7155e64b387dd87f6a88a741fe44a150eca7b009acf82827dbb5e4c462fe7b744d4c6f3c49481793ff222ea79168bbabf8f84243f68ec915ff16e112cff4e18716c9bd4ea044333018ea2c890be0cb447e0f24e5"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x200100c0) socket$inet6(0xa, 0xa, 0x2) 523.49231ms ago: executing program 3 (id=7013): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") socket(0x840000000002, 0x3, 0xff) (async) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004016) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x29, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000001100)={0xbc, 0x17, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x884}, 0x800) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000040001d0000140012800b000100697036746e6c00000400028008002900b0620200"], 0x3c}}, 0x20004000) 475.424461ms ago: executing program 4 (id=7014): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x260008e8}, 0x804) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf3, 0xc, 0x8}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r4, 0x6}, &(0x7f00000000c0)=0x8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0), 0x0) 475.055771ms ago: executing program 1 (id=7015): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100)=0x1, 0x4) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) clock_gettime(0xaf098b49fff259ae, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) close(r2) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) 449.882601ms ago: executing program 0 (id=7016): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000140)=0x6106e3a7, 0x4) (async) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) (async, rerun: 32) shutdown(r4, 0x1) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0xfffffffffffffffd, 0x12) (async, rerun: 64) sendfile(r4, r6, 0x0, 0xffffffff004) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a001dd633210000000000000a00000400020057066f920b0215c57f080000000005001b0011000000"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) 325.656692ms ago: executing program 1 (id=7017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="93f601b6644a0323c5ffffffff00d8478c680000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) r3 = socket$kcm(0x2, 0x8, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1820000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x440) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r7) accept$nfc_llcp(r6, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000540)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r6, 0xffffffffffffffff}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000010901040000000000000000000000009a6c1ba3180cb5be197d187ada783ae93a93a95d2867501caec2110d230620b99100cb6e0ca39f1a557415a8ad4149ee2483da3e2257d2d9d2707449117fe35ec4fb7d8e870d20c64e344de45ed2493b3e3647430d"], 0x14}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x2, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%ps \x00'}, 0x20) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x10}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000500000018530000100000000000000000000000180000000700000000000000000000008510000001000000850000b4390000fcffffff850000006000000018500000010000000000000000000000d9491000ffffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x6d, &(0x7f0000000100)=""/109, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r8, r9, r10, r12, r13, r14], &(0x7f0000000500)=[{0x5, 0x4, 0xf, 0x7}, {0x0, 0x4, 0xe, 0x6}], 0x10, 0x1}, 0x94) 222.952563ms ago: executing program 4 (id=7018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x11, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) accept4$tipc(r7, 0x0, 0x0, 0x80800) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x20}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r11, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) r12 = accept$inet(r9, &(0x7f0000000800)={0x2, 0x0, @initdev}, &(0x7f0000000840)=0x10) sendto$inet(r12, &(0x7f00000008c0)="67ef7f7b53dd", 0x12, 0x24000010, 0x0, 0x0) (async) splice(r11, 0x0, r10, 0x0, 0x6, 0x5) (async) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@gettaction={0x3c, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x3c}}, 0x8044) (async) r13 = accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x800) (async) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x3ff, 0x81, 0x7fff, 0x6, 0x0, 0x0, 0x81, {r3, @in6={{0xa, 0x4e23, 0xd9a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x3, 0x3, 0x0, 0xa, 0xfff}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r13, 0x84, 0x1b, &(0x7f00000005c0)={r14, 0xeb, "969224d6c8be422372a1f806cdf8ad14d811811f3ee90fa37283e1afae38cca82deca114e029503ef9ba17741c47841e4570ecbc539ab76a548ef5de61d5569b32a91dd1aa115d155ec5e60e82bde56fb19bfbb77f981a357befad8784f0fc390eefe17b89150f8307875c11d1dbf4901f450ec16a3720077793c6a82488337fbad5ef1531fac7e0c74c2d47582071257a54592e23154732c2ea6c53ebe9fca6e42fae28d5f7b9f969c9ab6b92e02d455f47ecb29e1c100667e8ba7ba3c21619fe4d1cf535d6125c04bdd32aef7218f95d343a94a7b69de2aef85323d847802766b0ff806bc212cc13d900"}, &(0x7f0000000500)=0xf3) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff8, 0xd, 0x40, 0x4, 0x1, 0x7, 0x0, 0x2, 0x29, 0x800, 0x702, 0x8000000000000000, 0x0, 0x9, 0x102000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r15, 0x4}, 0x8) 222.32075ms ago: executing program 3 (id=7019): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="476d0000eafb", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @multicast1}}}}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)=r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0xffffffffffffc000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) recvmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000380)=""/112, 0x70}], 0x1, &(0x7f0000000540)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x140) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.830745ms ago: executing program 4 (id=7020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0) 0s ago: executing program 0 (id=7021): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket(0x28, 0x80000, 0x9) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e22, 0x9, @loopback, 0x6}}, 0x2, 0xfffffffb, 0x0, 0x3910, 0x4}, &(0x7f0000000180)=0x98) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000001c0)=0xffffffff, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000200)={0x3, {{0x2, 0x4e21, @remote}}}, 0x88) r3 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x9, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x2, 0x4, 0x4, 0x7, 0x7, 0x2, 0xffffffffffffffff, 0x58, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000012c0)={{r4, 0xffff, 0x3, 0x21ef, 0x436, 0x4, 0x5, 0x6, 0x5, 0x9, 0x9, 0x40000000000, 0x7, 0x8, 0x3}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000022c0)={0x1, [0x0]}, &(0x7f0000002300)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002340)={r5, 0xe46}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) getsockname$ax25(r1, &(0x7f0000002500)={{0x3, @default}, [@null, @default, @rose, @default, @netrom, @remote, @default, @bcast]}, &(0x7f0000002580)=0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000025c0)={r2, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x9}}, 0x1, 0xf, 0xa44, 0x0, 0x20, 0xc, 0x5}, 0x9c) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40054) r9 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f0000004dc0)={&(0x7f00000028c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/212, 0xd4}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/236, 0xec}, {&(0x7f0000004b40)=""/199, 0xc7}, {&(0x7f0000004c40)=""/49, 0x31}, {&(0x7f0000004c80)=""/7, 0x7}], 0x7, &(0x7f0000004d40)=""/108, 0x6c}, 0xc4216c9cb4c629ab) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000004e00)={'dvmrp1\x00', 0x2}) sendto$inet6(r8, &(0x7f0000004e40)="7addc1c1e657379ba1b33a148e213a04f3200d8e31db051bd4b4c96de0a0b685955fd49e2c86b5b44865888c1b561d614e8843a678ae160f09c2706d139b2bc2ba971f9fb9fdb64e8bfde6e45b1a37fd4e6042b8164d20cf8d258a3958bfa218acf5bc1b6c1fedb7b5b893eeefa205082e7409354c6298960b872a4e2f9ef2424329e9fcf69e0aa2eebdb5d17ca0d95bd637e16600332c0623eb010b77015a0d0f011d", 0xa3, 0x8000, &(0x7f0000004f00)={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000005000)={&(0x7f0000004f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x28, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @void, @val={0xc, 0x99, {0x6, 0x68}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x8800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000005100)={'sit0\x00', &(0x7f0000005080)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x3ff, 0x1, {{0xe, 0x4, 0x3, 0x2d, 0x38, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x23, 0xd5, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @remote, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r10, &(0x7f0000005200)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)=@gettfilter={0x6c, 0x2e, 0x28, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfffc, 0xfff2}, {0x10, 0xf}, {0x7}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7f}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000005240)={{0x3, 0x4}}, 0x10) kernel console output (not intermixed with test programs): 7][T25638] syzkaller1: entered allmulticast mode [ 603.028772][T25655] netlink: 'syz.0.5639': attribute type 1 has an invalid length. [ 603.533872][T25662] syzkaller0: entered promiscuous mode [ 603.542797][T25662] syzkaller0: entered allmulticast mode [ 604.216814][T25700] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 604.327506][T25707] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 604.371185][T25710] netlink: 'syz.1.5655': attribute type 29 has an invalid length. [ 604.989264][T25749] block nbd5: Unsupported socket: should be TCP or UNIX. [ 605.109674][T25757] block nbd5: Unsupported socket: should be TCP or UNIX. [ 605.302208][T25764] netlink: 'syz.2.5668': attribute type 64 has an invalid length. [ 605.378227][T25769] ipt_ECN: cannot use operation on non-tcp rule [ 606.180787][T25808] xt_nat: multiple ranges no longer supported [ 606.184012][T25807] xt_nat: multiple ranges no longer supported [ 606.633528][T25811] __nla_validate_parse: 10 callbacks suppressed [ 606.633549][T25811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5683'. [ 606.733279][T25812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5683'. [ 607.882760][T25775] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 607.888573][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5678'. [ 607.968370][T25815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5684'. [ 608.137763][T25826] netlink: 71 bytes leftover after parsing attributes in process `syz.3.5688'. [ 608.226715][T25831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.273788][T25836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5690'. [ 608.429785][T25841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5690'. [ 608.624573][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5694'. [ 608.656384][T25855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5694'. [ 608.687981][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5694'. [ 608.936615][T25871] openvswitch: netlink: Key type 31 is not supported [ 609.723598][T25931] netlink: 'syz.3.5718': attribute type 2 has an invalid length. [ 609.931246][T25949] netlink: 'syz.0.5719': attribute type 1 has an invalid length. [ 609.999202][T25951] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 610.175928][T25964] tipc: Enabling of bearer rejected, failed to enable media [ 610.788052][T26002] bridge0: port 1(vlan3) entered blocking state [ 610.802529][T26002] bridge0: port 1(vlan3) entered disabled state [ 610.820779][T26002] vlan3: entered allmulticast mode [ 610.831009][T26002] bridge0: entered allmulticast mode [ 610.918946][T26002] vlan3: left allmulticast mode [ 610.924986][T26002] bridge0: left allmulticast mode [ 611.121932][T26019] 8021q: VLANs not supported on tunl0 [ 611.186225][T26020] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 611.202735][T26019] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 611.214445][T26031] openvswitch: netlink: IP tunnel dst address not specified [ 611.260539][T26024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.282821][T26024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.301897][T26024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 611.342965][T26029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.368562][T26037] xt_TCPMSS: Only works on TCP SYN packets [ 611.493098][T26024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.504183][T26024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.515237][T26024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 611.647999][T26024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.658692][T26024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.682271][T26024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 611.835315][T26024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.863898][T26024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.877028][T26024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 612.043072][ T155] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.054561][ T155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 612.066738][ T155] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 612.098869][ T155] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.107988][ T155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 612.117056][ T155] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 612.208437][ T155] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.219053][ T155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 612.235113][ T155] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 612.261858][ T155] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.280289][ T155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 612.301806][ T155] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 612.489921][T26079] __nla_validate_parse: 10 callbacks suppressed [ 612.489943][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5761'. [ 612.873809][T26097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.928240][T26099] vlan2: entered promiscuous mode [ 612.933934][T26099] bond0: entered promiscuous mode [ 612.940211][T26099] bond0: (slave vlan2): Opening slave failed [ 613.074652][T26108] netlink: 'syz.0.5774': attribute type 1 has an invalid length. [ 613.087669][T26108] netlink: 'syz.0.5774': attribute type 1 has an invalid length. [ 613.144498][T26110] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 613.160685][T26114] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5775'. [ 613.544895][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.550936][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.576433][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.582239][T26142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5785'. [ 613.607744][T26135] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 613.626144][T26145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5787'. [ 613.688172][T26145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.726204][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.752666][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.774248][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.808531][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.846545][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.884605][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.898239][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.911252][T26135] hsr0 speed is unknown, defaulting to 1000 [ 613.920745][T26135] hsr0 speed is unknown, defaulting to 1000 [ 614.147545][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'. [ 614.190202][T26168] openvswitch: netlink: IP tunnel dst address not specified [ 614.383937][T26189] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 615.159691][T26206] tipc: Enabled bearer , priority 0 [ 615.177985][T26206] syzkaller0: entered promiscuous mode [ 615.191604][T26206] syzkaller0: entered allmulticast mode [ 615.250945][T26210] xt_hashlimit: size too large, truncated to 1048576 [ 615.256223][T26206] tipc: Resetting bearer [ 615.271306][T26206] netlink: 'syz.4.5804': attribute type 4 has an invalid length. [ 615.289167][T26205] tipc: Resetting bearer [ 615.307521][T26213] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5806'. [ 615.362328][T26205] tipc: Disabling bearer [ 615.574535][T26227] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 615.605612][T26229] netlink: 'syz.3.5810': attribute type 4 has an invalid length. [ 615.617705][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5812'. [ 615.844235][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5815'. [ 615.937029][T26247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5816'. [ 616.050212][T26258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5822'. [ 616.238225][T26247] team0 (unregistering): Port device C removed [ 616.246995][T26247] team0 (unregistering): Port device team_slave_1 removed [ 616.281257][T26268] tipc: Enabling of bearer rejected, already enabled [ 616.437960][T26279] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 616.601052][T26287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.613401][T26287] bond7: (slave bond8): making interface the new active one [ 616.625622][T26287] bond7: (slave bond8): Enslaving as an active interface with an up link [ 616.847254][T26305] º: renamed from veth1_vlan (while UP) [ 617.130658][ T30] audit: type=1107 audit(1762730502.402:8): pid=26330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ä¯} Çórk jÐ#˜ñ1¡•º,¨ÞÊÜÁ )VkÄZ *o‰ÊÀîùám®9ëp³èþ°Ò·b3»Ò‘|Oü&ª/îÁbŠÒ}” X¤Ëà0Åeç¨Ì [ 617.130658][ T30] Ü^a6çïlvŸªƒw,dµÄcS~Ç´"Æ;hñmb-©ÂË}ðUF#B&yéÐJVÉ=ÚûéÑ“ŽVN0r›ks˜ä'Àf²=¤æµç "Ó@\ÞÉÅó' [ 617.494167][T26355] __nla_validate_parse: 9 callbacks suppressed [ 617.494185][T26355] netlink: 832 bytes leftover after parsing attributes in process `syz.4.5853'. [ 617.731907][T26366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5855'. [ 617.742391][T26366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5855'. [ 617.763800][T26366] bridge0: port 1(vlan2) entered blocking state [ 617.770477][T26366] bridge0: port 1(vlan2) entered disabled state [ 617.778952][T26366] vlan2: entered allmulticast mode [ 617.785719][T26366] bridge0: entered allmulticast mode [ 617.798021][T26366] vlan2: left allmulticast mode [ 617.805584][T26366] bridge0: left allmulticast mode [ 617.833880][T26375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5858'. [ 617.928760][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5859'. [ 617.939744][T26379] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5859'. [ 618.001245][T26381] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 618.018351][T26383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5861'. [ 618.018383][T26384] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5861'. [ 618.189572][T26397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.266921][T26406] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5866'. [ 618.525717][T26427] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5871'. [ 619.013614][T26458] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 619.464800][T26487] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 619.473892][T26486] ipip0: entered allmulticast mode [ 619.610007][T26494] dvmrp1: left allmulticast mode [ 619.783373][T26504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.074375][T26520] Bluetooth: hci2: Opcode 0x0c20 failed: -22 [ 620.304826][T26532] netlink: 'syz.2.5900': attribute type 18 has an invalid length. [ 620.421150][T26541] syz.1.5901: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 620.468563][T26544] netlink: 'syz.2.5902': attribute type 1 has an invalid length. [ 620.491770][T26541] CPU: 0 UID: 0 PID: 26541 Comm: syz.1.5901 Not tainted syzkaller #0 PREEMPT(full) [ 620.491801][T26541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.491812][T26541] Call Trace: [ 620.491820][T26541] [ 620.491829][T26541] dump_stack_lvl+0x189/0x250 [ 620.491867][T26541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.491895][T26541] ? __pfx__printk+0x10/0x10 [ 620.491916][T26541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 620.491945][T26541] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 620.491974][T26541] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 620.492004][T26541] warn_alloc+0x214/0x310 [ 620.492032][T26541] ? stack_depot_save_flags+0x40/0x860 [ 620.492065][T26541] ? __pfx_warn_alloc+0x10/0x10 [ 620.492095][T26541] ? kasan_save_track+0x3e/0x80 [ 620.492121][T26541] ? __kasan_kmalloc+0x93/0xb0 [ 620.492152][T26541] ? xsk_setsockopt+0x4dc/0x8d0 [ 620.492175][T26541] ? do_sock_setsockopt+0x17c/0x1b0 [ 620.492193][T26541] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 620.492211][T26541] ? do_syscall_64+0xfa/0xfa0 [ 620.492237][T26541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.492270][T26541] __vmalloc_node_range_noprof+0x125/0x12d0 [ 620.492339][T26541] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 620.492373][T26541] ? __kasan_kmalloc+0x93/0xb0 [ 620.492410][T26541] vmalloc_user_noprof+0xad/0xf0 [ 620.492439][T26541] ? xskq_create+0xbf/0x170 [ 620.492468][T26541] xskq_create+0xbf/0x170 [ 620.492498][T26541] xsk_init_queue+0xb0/0x110 [ 620.492527][T26541] xsk_setsockopt+0x4dc/0x8d0 [ 620.492554][T26541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 620.492583][T26541] ? __pfx_aa_sk_perm+0x10/0x10 [ 620.492614][T26541] ? aa_sock_opt_perm+0xff/0x1b0 [ 620.492648][T26541] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 620.492667][T26541] ? __pfx_xsk_setsockopt+0x10/0x10 [ 620.492695][T26541] do_sock_setsockopt+0x17c/0x1b0 [ 620.492736][T26541] __x64_sys_setsockopt+0x13f/0x1b0 [ 620.492764][T26541] do_syscall_64+0xfa/0xfa0 [ 620.492790][T26541] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.492819][T26541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.492839][T26541] ? clear_bhb_loop+0x60/0xb0 [ 620.492865][T26541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.492885][T26541] RIP: 0033:0x7f7d0578f6c9 [ 620.492904][T26541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.492922][T26541] RSP: 002b:00007f7d06615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.492946][T26541] RAX: ffffffffffffffda RBX: 00007f7d059e5fa0 RCX: 00007f7d0578f6c9 [ 620.492960][T26541] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 620.492972][T26541] RBP: 00007f7d05811f91 R08: 0000000000000004 R09: 0000000000000000 [ 620.492984][T26541] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.492996][T26541] R13: 00007f7d059e6038 R14: 00007f7d059e5fa0 R15: 00007ffc1da64358 [ 620.493034][T26541] [ 620.497539][T26541] Mem-Info: [ 620.652366][T26549] tipc: Enabled bearer , priority 0 [ 620.829105][T26541] active_anon:4824 inactive_anon:0 isolated_anon:0 [ 620.829105][T26541] active_file:2629 inactive_file:40095 isolated_file:0 [ 620.829105][T26541] unevictable:768 dirty:45 writeback:0 [ 620.829105][T26541] slab_reclaimable:13801 slab_unreclaimable:138404 [ 620.829105][T26541] mapped:26982 shmem:1365 pagetables:1369 [ 620.829105][T26541] sec_pagetables:0 bounce:0 [ 620.829105][T26541] kernel_misc_reclaimable:0 [ 620.829105][T26541] free:1286377 free_pcp:13051 free_cma:0 [ 620.881107][T26553] syzkaller0: entered promiscuous mode [ 620.886830][T26553] syzkaller0: entered allmulticast mode [ 620.902126][T26541] Node 0 active_anon:19532kB inactive_anon:0kB active_file:10516kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107988kB dirty:180kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15916kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 620.941354][T26549] tipc: Resetting bearer [ 620.984845][T26541] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 621.043616][T26541] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.079566][T26541] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 621.085580][T26541] Node 0 DMA32 free:1219852kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19480kB inactive_anon:0kB active_file:10516kB inactive_file:160180kB unevictable:1536kB writepending:180kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:39412kB local_pcp:19484kB free_cma:0kB [ 621.120309][T26541] lowmem_reserve[]: 0 0 0 0 0 [ 621.133308][T26541] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.198248][T26548] tipc: Resetting bearer [ 621.203126][T26541] lowmem_reserve[]: 0 0 0 0 0 [ 621.219916][T26541] Node 1 Normal free:3905336kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9396kB local_pcp:5716kB free_cma:0kB [ 621.254876][T26548] tipc: Disabling bearer [ 621.257522][T26541] lowmem_reserve[]: 0 0 0 0 0 [ 621.283070][T26541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 621.296804][T26541] Node 0 DMA32: 303*4kB (UME) 401*8kB (M) 173*16kB (UM) 960*32kB (UME) 557*64kB (UME) 282*128kB (UME) 624*256kB (UM) 394*512kB (UME) 234*1024kB (UM) 6*2048kB (UM) 119*4096kB (M) = 1210452kB [ 621.331903][T26541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 621.346475][T26541] Node 1 Normal: 2*4kB (ME) 32*8kB (UME) 45*16kB (UME) 207*32kB (UME) 67*64kB (UME) 10*128kB (UME) 6*256kB (UM) 6*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3904888kB [ 621.366478][T26541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.368249][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 621.378575][T26541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.394240][T26541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.413707][T26541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 621.424665][T26541] 44087 total pagecache pages [ 621.424768][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 621.429372][T26541] 0 pages in swap cache [ 621.429385][T26541] Free swap = 124996kB [ 621.429394][T26541] Total swap = 124996kB [ 621.429405][T26541] 2097051 pages RAM [ 621.429413][T26541] 0 pages HighMem/MovableOnly [ 621.429423][T26541] 424119 pages reserved [ 621.429431][T26541] 0 pages cma reserved [ 621.472045][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 621.486577][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 621.501975][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.520099][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.584819][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 621.602403][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 621.614415][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 621.623160][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 621.631866][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 621.639886][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.660006][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 621.779838][T26562] lo speed is unknown, defaulting to 1000 [ 621.856367][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.889441][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 621.932112][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 621.981242][T26588] netlink: 'syz.1.5913': attribute type 1 has an invalid length. [ 622.003557][T26588] netlink: 'syz.1.5913': attribute type 2 has an invalid length. [ 622.054150][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.087199][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 622.097849][ T5844] Bluetooth: hci2: command tx timeout [ 622.125848][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 622.213642][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.232389][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 622.260762][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 622.292519][T26562] vxcan1 speed is unknown, defaulting to 1000 [ 622.507189][T26609] º: renamed from wg0 [ 622.625133][ T57] veth1: left allmulticast mode [ 622.640313][ T57] veth1: left promiscuous mode [ 622.648047][ T57] bridge3: port 1(veth1) entered disabled state [ 623.398990][ T57] team0: Port device geneve0 removed [ 623.497387][T26633] __nla_validate_parse: 14 callbacks suppressed [ 623.497408][T26633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5927'. [ 623.513394][T26633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5927'. [ 623.522288][T26634] xt_hashlimit: invalid interval [ 623.532187][T26633] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5927'. [ 623.691674][ T5844] Bluetooth: hci0: command tx timeout [ 623.719313][ T57] bond0 (unregistering): Released all slaves [ 623.836932][ T57] bond1 (unregistering): Released all slaves [ 623.956034][ T57] bond2 (unregistering): (slave veth3): Releasing active interface [ 623.966624][ T57] bond2 (unregistering): Released all slaves [ 623.980957][ T57] bond3 (unregistering): Released all slaves [ 624.094782][ T57] bond4 (unregistering): (slave veth5): Releasing backup interface [ 624.105092][ T57] bond4 (unregistering): Released all slaves [ 624.119826][ T57] bond5 (unregistering): Released all slaves [ 624.134936][ T57] bond6 (unregistering): Released all slaves [ 624.150067][ T57] bond7 (unregistering): (slave bond8): Releasing backup interface [ 624.160377][ T57] bond7 (unregistering): Released all slaves [ 624.278770][ T57] bond8 (unregistering): Released all slaves [ 624.299771][T26562] hsr0 speed is unknown, defaulting to 1000 [ 624.370047][T26637] netlink: 'syz.3.5928': attribute type 1 has an invalid length. [ 625.147700][T26684] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5941'. [ 625.221620][T26684] tipc: Invalid UDP bearer configuration [ 625.221689][T26684] tipc: Enabling of bearer rejected, failed to enable media [ 625.252614][T26689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5942'. [ 625.269092][T26562] chnl_net:caif_netlink_parms(): no params data found [ 625.300310][T26683] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5941'. [ 625.317321][T26683] tipc: Invalid UDP bearer configuration [ 625.317391][T26683] tipc: Enabling of bearer rejected, failed to enable media [ 625.382991][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5944'. [ 625.542341][T26562] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.549603][T26562] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.564552][T26562] bridge_slave_0: entered allmulticast mode [ 625.579366][T26562] bridge_slave_0: entered promiscuous mode [ 625.600399][T26562] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.607954][T26562] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.615727][T26562] bridge_slave_1: entered allmulticast mode [ 625.629669][T26562] bridge_slave_1: entered promiscuous mode [ 625.771886][ T5844] Bluetooth: hci0: command tx timeout [ 625.773101][T26562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.808906][T26562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.906369][T26562] team0: Port device team_slave_0 added [ 625.920049][T26562] team0: Port device team_slave_1 added [ 625.944643][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5952'. [ 626.037727][T26562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.048292][T26562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.079523][T26562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.105514][ T57] : left promiscuous mode [ 626.128118][T26737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5955'. [ 626.141071][T26562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.153157][T26562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.200113][T26562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.230957][ T57] tipc: Left network mode [ 626.240526][T26743] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 626.255365][T26740] netlink: 'syz.1.5956': attribute type 6 has an invalid length. [ 626.409376][T26562] hsr_slave_0: entered promiscuous mode [ 626.417516][T26562] hsr_slave_1: entered promiscuous mode [ 626.426598][T26562] debugfs: 'hsr0' already exists in 'hsr' [ 626.439325][T26562] Cannot create hsr debugfs directory [ 626.506205][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5961'. [ 626.699318][T26765] bond2 (unregistering): Released all slaves [ 626.726099][T26763] tipc: Enabled bearer , priority 0 [ 626.747854][T26770] syzkaller0: entered promiscuous mode [ 626.760116][T26770] syzkaller0: entered allmulticast mode [ 626.890140][T26762] tipc: Resetting bearer [ 626.924295][T26762] tipc: Disabling bearer [ 626.929228][T26775] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 626.938143][T26775] netlink: 'syz.2.5967': attribute type 2 has an invalid length. [ 626.975917][T26775] netlink: 'syz.2.5967': attribute type 1 has an invalid length. [ 626.984100][T26775] netlink: 'syz.2.5967': attribute type 2 has an invalid length. [ 627.436266][T26786] netlink: 'syz.1.5970': attribute type 1 has an invalid length. [ 627.665310][T26799] netlink: 'syz.3.5974': attribute type 83 has an invalid length. [ 627.810329][ T57] hsr_slave_0: left promiscuous mode [ 627.833776][ T57] hsr_slave_1: left promiscuous mode [ 627.852532][ T5844] Bluetooth: hci0: command tx timeout [ 627.881064][ T57] º: left promiscuous mode [ 627.890884][ T57] veth0_vlan: left promiscuous mode [ 628.379820][ T57] team0 (unregistering): Port device veth0_virt_wifi removed [ 629.300122][T26562] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 629.346213][T26844] __nla_validate_parse: 4 callbacks suppressed [ 629.346232][T26844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5987'. [ 629.346378][T26562] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 629.404904][T26562] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 629.435666][T26562] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 629.490312][ T57] IPVS: stop unused estimator thread 0... [ 629.554233][T26859] netlink: 'syz.1.5991': attribute type 18 has an invalid length. [ 629.569210][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 629.589429][T26859] netlink: 'syz.1.5991': attribute type 18 has an invalid length. [ 629.598985][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 629.720820][T26866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5993'. [ 629.733658][T26866] block nbd3: Unsupported socket: should be TCP or UNIX. [ 629.736533][T26562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.761547][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5993'. [ 629.772179][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5993'. [ 629.780004][T26562] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.805980][T26870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5994'. [ 629.806442][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.816553][T26866] x_tables: duplicate entry at hook 1 [ 629.822211][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.834070][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.842386][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.932818][ T5844] Bluetooth: hci0: command tx timeout [ 630.305136][T26562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.512299][T26894] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6001'. [ 631.184377][T26562] veth0_vlan: entered promiscuous mode [ 631.242965][T26562] veth1_vlan: entered promiscuous mode [ 631.263309][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6005'. [ 631.298920][T26912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6006'. [ 631.321362][T26562] veth0_macvtap: entered promiscuous mode [ 631.344966][T26562] veth1_macvtap: entered promiscuous mode [ 631.420011][T26562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.478156][T26562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.515095][ T6105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.533392][ T6105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.547783][ T6105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.578292][ T6105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.713663][T26935] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 631.796493][T26931] lo speed is unknown, defaulting to 1000 [ 631.813772][ T3083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.833972][ T3083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.943248][ T3083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.959761][ T3083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.135002][T26931] vxcan1 speed is unknown, defaulting to 1000 [ 634.228756][T26931] hsr0 speed is unknown, defaulting to 1000 [ 634.235227][T26968] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 634.734007][T26992] __nla_validate_parse: 3 callbacks suppressed [ 634.734028][T26992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6027'. [ 634.761841][T26992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6027'. [ 635.082461][T26997] netlink: 'syz.0.6029': attribute type 1 has an invalid length. [ 635.110745][T26997] netlink: 'syz.0.6029': attribute type 3 has an invalid length. [ 635.136822][T26997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6029'. [ 635.254114][T26997] syzkaller0: entered promiscuous mode [ 635.260819][T26997] syzkaller0: entered allmulticast mode [ 635.278739][T26997] netlink: 'syz.0.6029': attribute type 29 has an invalid length. [ 635.299678][T26997] netlink: 'syz.0.6029': attribute type 29 has an invalid length. [ 635.332337][T26997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 635.755280][T27015] ip6gre0: Master is either lo or non-ether device [ 635.956938][T27023] netem: change failed [ 636.263431][T27033] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6040'. [ 636.572324][ T5832] Bluetooth: hci0: command 0x0405 tx timeout [ 636.768621][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.779874][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.789353][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.839614][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.852088][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.993411][T27049] lo speed is unknown, defaulting to 1000 [ 637.344677][ T57] batman_adv: batadv0: Removing interface: netdevsim0 [ 637.421202][T27088] netlink: 'syz.4.6051': attribute type 1 has an invalid length. [ 637.827445][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6054'. [ 637.857636][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6054'. [ 637.882792][ T57] bridge0: port 1(batadv0) entered disabled state [ 638.355455][ T57] bond4 (unregistering): (slave gretap1): Releasing active interface [ 638.364835][ T57] gretap1 (unregistering): left promiscuous mode [ 638.371243][ T57] gretap1 (unregistering): left allmulticast mode [ 638.396825][ T57] bond6 (unregistering): (slave gretap2): Releasing active interface [ 638.504746][ T57] bond3 (unregistering): (slave geneve2): Releasing active interface [ 638.892128][ T5844] Bluetooth: hci1: command tx timeout [ 639.034467][ T57] bond0 (unregistering): Released all slaves [ 639.048951][ T57] bond1 (unregistering): Released all slaves [ 639.063797][ T57] bond2 (unregistering): Released all slaves [ 639.083078][ T57] bond3 (unregistering): Released all slaves [ 639.210069][ T57] bond4 (unregistering): Released all slaves [ 639.225938][ T57] bond5 (unregistering): Released all slaves [ 639.239611][ T57] bond6 (unregistering): Released all slaves [ 639.367515][ T57] bond7 (unregistering): Released all slaves [ 639.380964][ T57] bond8 (unregistering): Released all slaves [ 639.395352][ T57] bond9 (unregistering): Released all slaves [ 639.409333][ T57] bond10 (unregistering): Released all slaves [ 639.443896][T27049] vxcan1 speed is unknown, defaulting to 1000 [ 639.606906][T27138] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6066'. [ 639.640038][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 639.642797][ T57] tipc: Left network mode [ 639.677218][T27136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6065'. [ 639.766420][T27136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 639.802502][T27136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6065'. [ 639.824001][ T3083] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.831643][T27146] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6068'. [ 639.873665][ T3083] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.907905][ T3083] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.964400][ T3083] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.202828][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6069'. [ 640.231636][T27049] hsr0 speed is unknown, defaulting to 1000 [ 640.630120][T27175] netlink: 'syz.1.6077': attribute type 1 has an invalid length. [ 640.683495][T27178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 640.772810][T27175] Bluetooth: MGMT ver 1.23 [ 640.972561][ T5844] Bluetooth: hci1: command tx timeout [ 641.079929][ T57] hsr_slave_0: left promiscuous mode [ 641.097107][ T57] hsr_slave_1: left promiscuous mode [ 641.124894][ T57] vlan0: left allmulticast mode [ 641.129811][ T57] veth0_vlan: left allmulticast mode [ 641.137951][ T57] vlan0: left promiscuous mode [ 641.154745][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6084'. [ 641.348281][T27214] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 641.354811][T27214] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 641.413854][T27207] can: request_module (can-proto-0) failed. [ 641.669621][T27226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6089'. [ 642.372960][T27192] lo: entered allmulticast mode [ 642.377988][T27192] lo: left allmulticast mode [ 642.408082][T27199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.420235][T27199] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.458728][T27226] team0: entered promiscuous mode [ 642.483925][T27226] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.544600][T27199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.575876][T27199] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.616214][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6092'. [ 642.626278][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6092'. [ 642.738651][T27199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.753176][T27199] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.786509][T27049] chnl_net:caif_netlink_parms(): no params data found [ 642.870990][T27199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.884211][T27199] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.051886][ T5844] Bluetooth: hci1: command tx timeout [ 643.147455][T27049] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.155308][T27049] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.164552][T27049] bridge_slave_0: entered allmulticast mode [ 643.176088][T27049] bridge_slave_0: entered promiscuous mode [ 643.209474][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.220437][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.237006][T27049] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.244525][T27049] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.252686][T27049] bridge_slave_1: entered allmulticast mode [ 643.260178][T27049] bridge_slave_1: entered promiscuous mode [ 643.285658][T27256] lo speed is unknown, defaulting to 1000 [ 643.341951][T27049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.352279][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.360662][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.394903][T27049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.406286][ T57] IPVS: stop unused estimator thread 0... [ 643.412755][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.423639][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.464721][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.478606][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.572822][T27049] team0: Port device team_slave_0 added [ 643.604634][T27049] team0: Port device team_slave_1 added [ 643.727302][T27256] vxcan1 speed is unknown, defaulting to 1000 [ 643.774405][T27049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.793119][T27049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.827564][T27049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.846770][T27049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.871484][T27049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.919993][T27049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.007050][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6102'. [ 644.039105][T27278] netlink: 'syz.1.6102': attribute type 1 has an invalid length. [ 644.239117][T27049] hsr_slave_0: entered promiscuous mode [ 644.262928][T27049] hsr_slave_1: entered promiscuous mode [ 644.279849][T27049] debugfs: 'hsr0' already exists in 'hsr' [ 644.292254][T27049] Cannot create hsr debugfs directory [ 644.324728][T27256] hsr0 speed is unknown, defaulting to 1000 [ 644.531291][T27283] netlink: 'syz.0.6104': attribute type 1 has an invalid length. [ 644.628752][T27283] 8021q: adding VLAN 0 to HW filter on device bond9 [ 644.651260][T27301] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 644.834314][T27283] bond9: (slave veth9): Enslaving as an active interface with a down link [ 645.132013][ T5844] Bluetooth: hci1: command tx timeout [ 645.147966][T27321] tipc: Enabling of bearer rejected, failed to enable media [ 645.473463][T27337] tipc: Enabling of bearer rejected, failed to enable media [ 645.595854][T27333] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 645.608064][T27333] __nla_validate_parse: 1 callbacks suppressed [ 645.608082][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.634935][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.653969][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.696076][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.706892][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.738182][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.748450][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.760331][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.804120][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.815957][T27333] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6118'. [ 645.850992][T27346] sctp: [Deprecated]: syz.2.6122 (pid 27346) Use of int in max_burst socket option deprecated. [ 645.850992][T27346] Use struct sctp_assoc_value instead [ 645.875786][T27049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.890128][T27049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.909370][T27049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.956867][T27049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 646.304962][T27049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.330699][T27049] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.368856][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.376185][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.388304][T27369] tipc: Enabled bearer , priority 0 [ 646.458068][T27369] syzkaller0: entered promiscuous mode [ 646.464033][T27369] syzkaller0: entered allmulticast mode [ 646.470472][T27369] tipc: Resetting bearer [ 646.484231][T27376] netlink: 'syz.0.6128': attribute type 29 has an invalid length. [ 646.499015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.506268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.519772][T27367] tipc: Resetting bearer [ 647.382260][T20597] tipc: Node number set to 344374744 [ 648.404277][T27367] tipc: Disabling bearer [ 648.416966][T27376] netlink: 'syz.0.6128': attribute type 29 has an invalid length. [ 648.441634][T27379] netlink: 'syz.0.6128': attribute type 29 has an invalid length. [ 648.483285][T27379] netlink: 'syz.0.6128': attribute type 29 has an invalid length. [ 648.674358][T27396] »»»»»»: renamed from bond_slave_1 [ 648.854048][T27403] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 649.100154][T27049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.309050][T27049] veth0_vlan: entered promiscuous mode [ 649.366048][T27049] veth1_vlan: entered promiscuous mode [ 649.417921][T27425] netlink: 'syz.4.6139': attribute type 1 has an invalid length. [ 649.485599][T27049] veth0_macvtap: entered promiscuous mode [ 649.535736][T27430] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.544478][T27049] veth1_macvtap: entered promiscuous mode [ 649.594419][T27049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.629741][T27049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.660873][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.697791][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.733786][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.748269][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.040304][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.071660][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.160512][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.169389][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.190660][T27465] netlink: 'syz.0.6150': attribute type 5 has an invalid length. [ 650.283049][T27470] netlink: 'syz.4.6151': attribute type 10 has an invalid length. [ 650.292477][T27470] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.300422][T27470] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.316674][T27470] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.323999][T27470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.331612][T27470] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.338833][T27470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.390832][T27470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 651.141002][T27504] syzkaller0: entered promiscuous mode [ 651.162854][T27504] syzkaller0: entered allmulticast mode [ 651.414775][ T57] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.443228][ T57] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.531272][ T57] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.546554][ T57] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.593515][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 651.604950][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 651.608272][ T57] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.624700][ T57] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.624705][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 651.653765][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 651.667713][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.714342][ T57] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.730160][ T57] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.918267][T27511] lo speed is unknown, defaulting to 1000 [ 652.050197][T27520] __nla_validate_parse: 40 callbacks suppressed [ 652.050220][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6164'. [ 652.088641][T27517] syzkaller0: entered allmulticast mode [ 652.097549][T27522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.359989][T27538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6168'. [ 652.420865][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6168'. [ 652.466060][T27542] netlink: 'syz.2.6168': attribute type 9 has an invalid length. [ 652.620475][T27549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6172'. [ 653.695743][ T5844] Bluetooth: hci2: command tx timeout [ 654.259285][T27532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6168'. [ 654.277886][T27534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6169'. [ 654.303136][T27511] vxcan1 speed is unknown, defaulting to 1000 [ 654.507889][T27558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 654.538294][T27558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6175'. [ 654.594521][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6176'. [ 654.744599][T27569] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6178'. [ 654.882637][T27566] netlink: 'syz.0.6177': attribute type 10 has an invalid length. [ 654.996408][ T57] bond1 (unregistering): (slave gretap1): Releasing active interface [ 655.074529][ T57] team0: Port device geneve0 removed [ 655.183964][ T57] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 655.284863][ T57] bond4 (unregistering): (slave bridge3): Releasing active interface [ 655.436612][ T57] bond1 (unregistering): Released all slaves [ 655.557626][ T57] bond0 (unregistering): Released all slaves [ 655.572369][ T57] bond2 (unregistering): Released all slaves [ 655.690210][ T57] bond3 (unregistering): (slave veth7): Releasing active interface [ 655.701264][ T57] bond3 (unregistering): Released all slaves [ 655.716205][ T57] bond4 (unregistering): Released all slaves [ 655.773817][ T5844] Bluetooth: hci2: command tx timeout [ 655.839557][ T57] bond5 (unregistering): Released all slaves [ 655.853322][ T57] bond6 (unregistering): Released all slaves [ 655.869589][ T57] bond7 (unregistering): Released all slaves [ 655.885327][ T57] bond8 (unregistering): Released all slaves [ 655.899001][ T57] bond9 (unregistering): Released all slaves [ 655.952126][T27566] geneve0: entered promiscuous mode [ 655.958549][T27566] team0: Port device geneve0 added [ 656.001504][T27511] hsr0 speed is unknown, defaulting to 1000 [ 656.011768][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.020766][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.078448][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.098318][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.474896][T27594] netlink: 'syz.3.6184': attribute type 4 has an invalid length. [ 656.514956][T27596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 656.564857][T27511] chnl_net:caif_netlink_parms(): no params data found [ 657.018795][T20598] hid-generic 0005:0B57:1001.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 657.251555][T27511] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.280233][T27511] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.303925][T27511] bridge_slave_0: entered allmulticast mode [ 657.337456][T27511] bridge_slave_0: entered promiscuous mode [ 657.369386][T27511] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.398947][T27511] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.410473][T27637] netlink: 'syz.3.6191': attribute type 10 has an invalid length. [ 657.427594][T27511] bridge_slave_1: entered allmulticast mode [ 657.473142][T27511] bridge_slave_1: entered promiscuous mode [ 657.540024][T27643] __nla_validate_parse: 2 callbacks suppressed [ 657.540043][T27643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6196'. [ 657.556414][T27637] team0: Port device dummy0 added [ 657.595616][T27643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6196'. [ 657.646641][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'. [ 657.655807][T27645] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6196'. [ 657.710630][T27511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.742716][T27511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.792404][T27655] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 657.819841][T27643] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6196'. [ 657.851696][ T5844] Bluetooth: hci2: command tx timeout [ 657.892304][T27662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'. [ 657.913634][T27663] x_tables: duplicate entry at hook 2 [ 657.965465][T27511] team0: Port device team_slave_0 added [ 658.026602][T27659] lo speed is unknown, defaulting to 1000 [ 658.037835][T27511] team0: Port device team_slave_1 added [ 658.069977][ T57] tipc: Disabling bearer [ 658.093852][ T57] tipc: Disabling bearer [ 658.105449][ T57] tipc: Left network mode [ 658.328021][ T57] IPVS: stopping backup sync thread 19053 ... [ 658.347569][T27511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.363016][T27511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.422120][T27511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.472696][T27511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.491188][T27511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.533821][T27511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.667417][T27659] vxcan1 speed is unknown, defaulting to 1000 [ 658.669796][T27689] 8021q: VLANs not supported on ipvlan1 [ 658.729615][T27692] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 658.776490][T27692] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 658.811965][T27692] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 658.844955][T27691] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 658.854736][T27691] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 658.871692][T27691] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 658.894696][T27511] hsr_slave_0: entered promiscuous mode [ 658.911019][T27511] hsr_slave_1: entered promiscuous mode [ 658.921346][T27511] debugfs: 'hsr0' already exists in 'hsr' [ 658.941058][T27511] Cannot create hsr debugfs directory [ 658.967232][T27700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6212'. [ 659.567746][T27659] hsr0 speed is unknown, defaulting to 1000 [ 659.574411][T27715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6217'. [ 659.854764][T27723] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6220'. [ 659.915522][T27726] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 659.936110][ T5844] Bluetooth: hci2: command tx timeout [ 660.028670][T27725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6221'. [ 660.896685][T27764] lo: entered allmulticast mode [ 660.905770][T27763] lo: left allmulticast mode [ 661.074615][ T5844] block nbd3: Receive control failed (result -32) [ 661.394787][ T57] hsr_slave_1: left promiscuous mode [ 661.558244][ T57] pim6reg (unregistering): left allmulticast mode [ 661.989257][T27795] netlink: 'syz.2.6235': attribute type 1 has an invalid length. [ 662.439971][T21714] hsr0 speed is unknown, defaulting to 1000 [ 662.461990][T21714] infiniband syz1: ib_query_port failed (-19) [ 662.540556][T27796] bond2: (slave geneve4): making interface the new active one [ 662.549347][T27796] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 662.655062][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 662.687634][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 662.717204][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 662.735223][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 662.752044][T27804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.804801][T27511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 662.835994][T27511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 662.858888][T27511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 662.883973][T27511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 663.065497][T27829] !€ÿ: renamed from ip6gretap0 [ 663.168111][ T57] IPVS: stop unused estimator thread 0... [ 663.256322][T27511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.338607][T27511] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.388673][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.396122][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.406403][T27841] __nla_validate_parse: 3 callbacks suppressed [ 663.406423][T27841] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6246'. [ 663.434642][T27841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6246'. [ 663.444437][T27841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6246'. [ 663.456961][T27841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6246'. [ 663.469776][T27839] tipc: Enabled bearer , priority 0 [ 663.485945][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.493189][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.530923][T27839] syzkaller0: entered promiscuous mode [ 663.557193][T27839] syzkaller0: entered allmulticast mode [ 663.580542][T27839] tipc: Resetting bearer [ 663.605476][T27838] tipc: Resetting bearer [ 663.629003][T27838] tipc: Disabling bearer [ 663.667116][T27855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.904499][T27859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6253'. [ 664.376582][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6257'. [ 664.391774][T27511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.578810][T27908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6262'. [ 664.628980][T27511] veth0_vlan: entered promiscuous mode [ 664.646869][T27511] veth1_vlan: entered promiscuous mode [ 664.714393][T27511] veth0_macvtap: entered promiscuous mode [ 664.746845][T27511] veth1_macvtap: entered promiscuous mode [ 664.793771][T27511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.822360][T27511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.844706][ T3083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.863076][ T3083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.875133][ T3083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.888346][ T3083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.946714][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'. [ 664.999102][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.017606][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.056776][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6268'. [ 665.060240][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.092375][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.318555][T27926] syzkaller1: entered promiscuous mode [ 665.338294][T27926] syzkaller1: entered allmulticast mode [ 665.635755][T27933] pim6reg1: entered promiscuous mode [ 665.641130][T27933] pim6reg1: entered allmulticast mode [ 665.860644][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 665.874721][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 665.885675][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 665.894383][T27940] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6274'. [ 665.903958][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 665.904878][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 665.963775][ T75] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.988186][T27942] xt_hashlimit: invalid interval [ 666.080451][T27942] syzkaller0: entered promiscuous mode [ 666.102122][T27942] syzkaller0: entered allmulticast mode [ 666.139227][T27936] lo speed is unknown, defaulting to 1000 [ 666.148728][ T75] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.262148][T27952] netlink: 'syz.4.6277': attribute type 1 has an invalid length. [ 666.379952][T27957] netlink: 'syz.4.6277': attribute type 1 has an invalid length. [ 667.938089][ T5832] Bluetooth: hci4: command tx timeout [ 668.141121][ T75] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.168350][T27952] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 668.249107][T27982] netlink: 'syz.3.6280': attribute type 6 has an invalid length. [ 668.266780][T27982] netlink: 'syz.3.6280': attribute type 5 has an invalid length. [ 668.291998][T27936] vxcan1 speed is unknown, defaulting to 1000 [ 668.429215][T27976] __nla_validate_parse: 7 callbacks suppressed [ 668.429239][T27976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6279'. [ 668.471854][T27973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6279'. [ 668.563275][ T75] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.670435][T27993] tipc: Started in network mode [ 668.684203][T27993] tipc: Node identity a, cluster identity 4711 [ 668.701143][T27993] tipc: Node number set to 10 [ 668.718254][T27993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.943646][T27997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6285'. [ 669.100736][ T75] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 669.111041][ T75] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 669.119568][ T75] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 72:dd:dc:53:07:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 669.333513][ T75] dvmrp6 (unregistering): left allmulticast mode [ 669.354211][ T75] dvmrp0 (unregistering): left allmulticast mode [ 669.387804][ T75] geneve0 (unregistering): left promiscuous mode [ 669.396744][ T75] team0: Port device geneve0 removed [ 669.756164][ T75] bond0 (unregistering): Released all slaves [ 669.770792][ T75] bond1 (unregistering): Released all slaves [ 669.899455][ T75] bond2 (unregistering): Released all slaves [ 670.018004][ T5832] Bluetooth: hci4: command tx timeout [ 670.051836][ T75] bond3 (unregistering): Released all slaves [ 670.177855][ T75] bond4 (unregistering): Released all slaves [ 670.298491][ T75] bond5 (unregistering): (slave veth3): Releasing backup interface [ 670.308838][ T75] bond5 (unregistering): Released all slaves [ 670.323709][ T75] bond6 (unregistering): Released all slaves [ 670.446902][ T75] bond7 (unregistering): Released all slaves [ 670.460493][ T75] bond8 (unregistering): Released all slaves [ 670.599849][ T75] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 670.611173][ T75] bond9 (unregistering): (slave veth9): Releasing active interface [ 670.623348][ T75] bond9 (unregistering): Released all slaves [ 670.657272][T28004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.795244][T28010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6290'. [ 670.895070][ T75] tipc: Left network mode [ 671.190078][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'. [ 671.500558][ T30] audit: type=1800 audit(1762730556.772:9): pid=28031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6292" name="memory.events" dev="tmpfs" ino=196 res=0 errno=0 [ 671.744805][T27936] chnl_net:caif_netlink_parms(): no params data found [ 671.852826][T28053] Cannot find add_set index 0 as target [ 671.878330][T28053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6301'. [ 671.926170][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6300'. [ 672.091758][ T5832] Bluetooth: hci4: command tx timeout [ 672.116313][T28062] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6302'. [ 672.136313][T28062] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 672.323046][T28067] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 672.349075][T27936] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.368197][T28065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6303'. [ 672.396602][T27936] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.432061][T27936] bridge_slave_0: entered allmulticast mode [ 672.455794][T27936] bridge_slave_0: entered promiscuous mode [ 672.484199][T28070] netlink: 'syz.1.6304': attribute type 1 has an invalid length. [ 672.516750][T27936] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.551840][T27936] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.583009][T27936] bridge_slave_1: entered allmulticast mode [ 672.591239][T27936] bridge_slave_1: entered promiscuous mode [ 672.601980][T28068] netlink: 'syz.4.6303': attribute type 3 has an invalid length. [ 672.667594][ T75] hsr_slave_0: left promiscuous mode [ 672.691596][ T75] hsr_slave_1: left promiscuous mode [ 672.718499][T28089] netlink: 'syz.1.6308': attribute type 1 has an invalid length. [ 672.728534][T28089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6308'. [ 672.733915][ T30] audit: type=1107 audit(1762730558.012:10): pid=28088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ƒSyDXñÄYäèÝw&Sú!DIÄ̶ÖZ=~¬´à' [ 672.799358][ T75] pim6reg (unregistering): left allmulticast mode [ 673.646317][ T12] smc: removing ib device syz2 [ 674.123646][T28090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6307'. [ 674.172349][ T5832] Bluetooth: hci4: command tx timeout [ 674.264786][T27936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.304678][T27936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.451321][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6315'. [ 674.983925][T27936] team0: Port device team_slave_0 added [ 675.013362][T27936] team0: Port device team_slave_1 added [ 675.201355][T28145] netlink: 'syz.4.6322': attribute type 1 has an invalid length. [ 675.226119][T28146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6323'. [ 675.557452][T28154] veth5: entered promiscuous mode [ 675.587380][T27936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.631479][T27936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.682105][T27936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.759003][T27936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.773138][T27936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.839543][T27936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.879249][T28166] netlink: 'syz.2.6326': attribute type 10 has an invalid length. [ 676.078800][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'. [ 676.086890][T27936] hsr_slave_0: entered promiscuous mode [ 676.118779][T27936] hsr_slave_1: entered promiscuous mode [ 676.135415][T27936] debugfs: 'hsr0' already exists in 'hsr' [ 676.152605][T27936] Cannot create hsr debugfs directory [ 676.470786][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6332'. [ 676.602975][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6333'. [ 676.890171][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6336'. [ 676.985361][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6337'. [ 677.371191][T28219] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 677.409858][T28219] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 677.432475][T28219] gretap1: entered promiscuous mode [ 677.452111][T28219] gretap1: entered allmulticast mode [ 677.831292][T28234] netlink: 'syz.2.6345': attribute type 6 has an invalid length. [ 677.851249][T28242] netlink: 'syz.4.6348': attribute type 21 has an invalid length. [ 677.891096][T28246] x_tables: duplicate underflow at hook 2 [ 677.947833][T28242] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 677.972317][T28242] bond2 (unregistering): Released all slaves [ 677.981649][T28247] nbd5: detected capacity change from 0 to 127 [ 678.071308][ T5832] block nbd5: Receive control failed (result -104) [ 678.146217][ T75] IPVS: stop unused estimator thread 0... [ 678.284745][T28262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6356'. [ 678.328533][T28267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6355'. [ 678.436187][T28267] netlink: 'syz.4.6355': attribute type 1 has an invalid length. [ 678.448099][T28267] netlink: 'syz.4.6355': attribute type 2 has an invalid length. [ 678.781060][T27936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.842665][T28296] IPVS: length: 8 != 1152 [ 678.847313][T27936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.895931][T27936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 678.916505][T27936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.357069][T27936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.429465][T27936] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.464980][T19268] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.472236][T19268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.523412][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.530653][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.559983][T28337] block nbd1: NBD_DISCONNECT [ 679.582493][T28337] block nbd1: Send disconnect failed -32 [ 679.685232][T28343] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 679.697432][T28343] bond1 (unregistering): Released all slaves [ 680.187676][T28357] netlink: 'syz.4.6378': attribute type 3 has an invalid length. [ 680.405021][T28373] team0: Cannot enslave team device to itself [ 680.567768][T27936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.603060][T28385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.619689][T28391] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 680.893416][T28404] __nla_validate_parse: 1 callbacks suppressed [ 680.893435][T28404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6392'. [ 680.909924][T28403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6392'. [ 680.945813][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6392'. [ 681.041005][T28411] Cannot find add_set index 2 as target [ 682.739659][T27936] veth0_vlan: entered promiscuous mode [ 682.775495][T27936] veth1_vlan: entered promiscuous mode [ 682.790865][T28419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'. [ 682.869356][T27936] veth0_macvtap: entered promiscuous mode [ 682.917079][T27936] veth1_macvtap: entered promiscuous mode [ 682.999460][T27936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.057080][T27936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.096332][T28430] set match dimension is over the limit! [ 683.125157][ T6105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.158303][ T6105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.186300][ T6105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.204034][ T6105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.473905][T28425] netlink: 'syz.4.6397': attribute type 11 has an invalid length. [ 683.484555][ T6105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.492789][ T6105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.700467][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.741516][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.844829][T28458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6407'. [ 684.044622][T28466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6409'. [ 684.093536][T28471] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6269'. [ 684.108317][T28471] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6269'. [ 684.120752][T28466] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 684.375233][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6416'. [ 684.550766][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6417'. [ 685.079720][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 685.091242][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 685.101881][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 685.116067][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 685.124305][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.192951][T28501] lo speed is unknown, defaulting to 1000 [ 685.329915][T28511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 685.559871][T28521] netlink: 'syz.3.6425': attribute type 7 has an invalid length. [ 685.989751][T28544] __nla_validate_parse: 4 callbacks suppressed [ 685.989771][T28544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6431'. [ 686.073791][T28544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6431'. [ 686.140021][T28553] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 686.328267][T28561] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6436'. [ 686.501993][T28501] chnl_net:caif_netlink_parms(): no params data found [ 686.557046][T28577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6441'. [ 686.656978][T28582] bridge0: port 3(batadv1) entered blocking state [ 686.665055][T28582] bridge0: port 3(batadv1) entered disabled state [ 686.673188][T28582] batadv1: entered allmulticast mode [ 686.680995][T28582] batadv1: entered promiscuous mode [ 686.687996][T28588] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 686.688177][T28587] netlink: 'syz.1.6445': attribute type 1 has an invalid length. [ 686.709615][T28588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.844663][T28591] syzkaller0: entered promiscuous mode [ 686.872538][T28591] syzkaller0: entered allmulticast mode [ 687.004869][T28501] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.053066][T28501] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.060398][T28501] bridge_slave_0: entered allmulticast mode [ 687.118064][T28501] bridge_slave_0: entered promiscuous mode [ 687.154031][ T57] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 687.163939][ T57] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 687.216628][ T5832] Bluetooth: hci3: command tx timeout [ 687.263402][T28625] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 687.286666][T28625] netlink: 'syz.1.6452': attribute type 1 has an invalid length. [ 687.321655][T28501] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.328922][T28501] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.350089][T28501] bridge_slave_1: entered allmulticast mode [ 687.358630][T28501] bridge_slave_1: entered promiscuous mode [ 687.465230][T28501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.478816][T28501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.690392][T28501] team0: Port device team_slave_0 added [ 687.719559][T28501] team0: Port device team_slave_1 added [ 687.966054][T28501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.976215][T28667] netlink: 'syz.3.6461': attribute type 21 has an invalid length. [ 688.011924][T28501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.100690][T28501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.132390][T28676] netlink: 'syz.0.6462': attribute type 2 has an invalid length. [ 688.150512][T28667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6461'. [ 688.192593][T28501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.212509][T28501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.260751][T28501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.359676][T28685] netlink: 'syz.3.6464': attribute type 3 has an invalid length. [ 688.438658][T28685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6464'. [ 688.469268][T28501] hsr_slave_0: entered promiscuous mode [ 688.483645][T28501] hsr_slave_1: entered promiscuous mode [ 688.500924][T28501] debugfs: 'hsr0' already exists in 'hsr' [ 688.520672][T28501] Cannot create hsr debugfs directory [ 688.606875][T28692] 8021q: VLANs not supported on ipvlan0 [ 688.884264][T28709] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 689.019713][T28501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 689.036568][T28718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6473'. [ 689.086664][T28720] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6474'. [ 689.096132][T28720] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6474'. [ 689.128726][T28722] Bluetooth: MGMT ver 1.23 [ 689.180823][T28501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 689.288642][T28501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 689.306385][ T5832] Bluetooth: hci3: command tx timeout [ 689.333431][T28731] xt_TPROXY: Can be used only with -p tcp or -p udp [ 689.445311][T28731] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.452882][T28731] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.635544][T28731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.654813][T28731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.716666][T28755] netlink: 'syz.1.6485': attribute type 1 has an invalid length. [ 689.829521][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'. [ 689.868752][T28731] veth5: left promiscuous mode [ 689.874804][T28731] gretap1: left promiscuous mode [ 689.884008][T28757] bridge_slave_1: left allmulticast mode [ 689.899882][T28757] bridge_slave_1: left promiscuous mode [ 689.906137][T28757] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.917941][T28757] bridge_slave_0: left allmulticast mode [ 689.924487][T28757] bridge_slave_0: left promiscuous mode [ 689.930443][T28757] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.935950][T28762] netlink: 'syz.3.6487': attribute type 1 has an invalid length. [ 690.044521][T28501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 690.074822][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.111005][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.141720][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.150992][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.183502][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.199840][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.210214][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.229308][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.250872][T28769] netlink: 'syz.0.6489': attribute type 1 has an invalid length. [ 690.285082][T28766] netlink: 'syz.3.6488': attribute type 83 has an invalid length. [ 690.548306][T28501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.595073][T28501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 690.667426][T28501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 690.709729][T28501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 691.240613][T28809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6499'. [ 691.328243][T28501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.371876][ T5832] Bluetooth: hci3: command tx timeout [ 691.427601][T28501] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.468548][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.473634][T28813] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6501'. [ 691.475809][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.511269][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.518529][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.706191][T28825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6505'. [ 691.864494][T28833] tipc: Can't bind to reserved service type 0 [ 692.102722][T28501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.249243][T28501] veth0_vlan: entered promiscuous mode [ 692.316974][T28501] veth1_vlan: entered promiscuous mode [ 692.377654][T28861] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6516'. [ 692.408960][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6516'. [ 692.450391][T28501] veth0_macvtap: entered promiscuous mode [ 692.475790][T28501] veth1_macvtap: entered promiscuous mode [ 692.545722][T28501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.584601][T28501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.606260][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.629349][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.652156][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.678380][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.996479][T28882] v: renamed from veth1_vlan [ 693.014726][T28885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6521'. [ 693.025327][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.038585][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.099617][ T3083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.110685][ T3083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.452583][ T5832] Bluetooth: hci3: command tx timeout [ 693.530742][T28907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6529'. [ 693.543010][T28907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6529'. [ 693.633146][T28915] tipc: Enabling of bearer rejected, failed to enable media [ 693.711222][T28914] tipc: Enabled bearer , priority 0 [ 693.732494][T28914] syzkaller0: entered promiscuous mode [ 693.738042][T28914] syzkaller0: entered allmulticast mode [ 693.781224][T28915] syzkaller0: entered promiscuous mode [ 693.787106][T28915] syzkaller0: entered allmulticast mode [ 693.806020][T28920] netlink: 'syz.1.6533': attribute type 1 has an invalid length. [ 693.840667][T28920] netlink: 'syz.1.6533': attribute type 1 has an invalid length. [ 693.870875][T28920] netlink: 'syz.1.6533': attribute type 1 has an invalid length. [ 693.890839][T28925] pimreg: entered allmulticast mode [ 693.903398][T28914] tipc: Resetting bearer [ 693.908551][T28920] netlink: 'syz.1.6533': attribute type 2 has an invalid length. [ 693.933463][T28914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.942144][T28914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.956438][T28920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6533'. [ 693.971770][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'. [ 694.014106][T28938] tipc: Started in network mode [ 694.019336][T28938] tipc: Node identity ce9a0785cea1, cluster identity 4711 [ 694.027153][T28938] tipc: Enabled bearer , priority 0 [ 694.065927][T28932] tipc: Resetting bearer [ 694.114502][T28932] tipc: Disabling bearer [ 694.162578][T28944] tipc: Started in network mode [ 694.169140][T28944] tipc: Node identity ac14140f, cluster identity 4711 [ 694.179501][T28944] tipc: New replicast peer: 255.255.255.255 [ 694.191225][T28944] tipc: Enabled bearer , priority 10 [ 694.206966][T28937] tipc: Disabling bearer [ 694.664523][T28974] Bluetooth: MGMT ver 1.23 [ 694.703762][T28977] netlink: 'syz.1.6547': attribute type 10 has an invalid length. [ 695.311732][T13531] tipc: Node number set to 2886997007 [ 696.239911][T29022] netlink: 'syz.0.6560': attribute type 10 has an invalid length. [ 696.274589][T29022] veth1_macvtap: left promiscuous mode [ 696.341330][T29028] netlink: 'syz.4.6562': attribute type 1 has an invalid length. [ 696.458641][T29032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.492544][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 696.563446][T29026] bond2: (slave bridge2): making interface the new active one [ 696.574711][T29026] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 696.607824][T29040] syzkaller0: entered promiscuous mode [ 696.621026][T29040] syzkaller0: entered allmulticast mode [ 697.006269][T29061] __nla_validate_parse: 2 callbacks suppressed [ 697.006290][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6569'. [ 697.106116][T29061] netlink: 'syz.3.6569': attribute type 1 has an invalid length. [ 697.137816][T29061] netlink: 'syz.3.6569': attribute type 2 has an invalid length. [ 697.217421][T29066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6570'. [ 697.626411][T29080] syzkaller1: entered promiscuous mode [ 697.632896][T29080] syzkaller1: entered allmulticast mode [ 697.759524][T29092] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 698.532576][T29110] xt_cgroup: path and classid specified [ 698.644024][T29114] openvswitch: netlink: IP tunnel dst address not specified [ 698.657413][T29115] openvswitch: netlink: IP tunnel dst address not specified [ 698.699946][T29118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6585'. [ 698.731309][T29118] netlink: 'syz.1.6585': attribute type 4 has an invalid length. [ 698.752056][T29118] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6585'. [ 698.788255][T29118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 698.948259][T29126] x_tables: duplicate underflow at hook 1 [ 699.049704][T29130] tipc: Started in network mode [ 699.065965][T29130] tipc: Node identity 26ef5d48e037, cluster identity 4711 [ 699.084062][T29130] tipc: Enabled bearer , priority 0 [ 699.098216][T29130] syzkaller0: entered promiscuous mode [ 699.106882][T29130] syzkaller0: entered allmulticast mode [ 699.127137][T29136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6591'. [ 699.173373][T29130] tipc: Resetting bearer [ 699.201793][T29129] tipc: Resetting bearer [ 699.242270][T29129] tipc: Disabling bearer [ 699.269699][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6593'. [ 699.280628][T29145] netlink: 'syz.3.6594': attribute type 1 has an invalid length. [ 699.460365][T29149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 699.468007][T29145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6594'. [ 699.481013][T29149] bond1: (slave bond2): making interface the new active one [ 699.500655][T29149] bond1: (slave bond2): Enslaving as an active interface with an up link [ 699.635234][T29145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.764551][T29163] sctp: [Deprecated]: syz.1.6598 (pid 29163) Use of int in max_burst socket option. [ 699.764551][T29163] Use struct sctp_assoc_value instead [ 700.340921][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6602'. [ 700.444923][T29192] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 700.468736][T29192] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.477243][T29192] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.687028][T29212] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6610'. [ 700.994407][T29226] syzkaller1: entered promiscuous mode [ 701.011104][T29226] syzkaller1: entered allmulticast mode [ 701.085503][T29233] xfrm1: entered allmulticast mode [ 701.220940][T29243] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.228908][T29243] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.448526][T29249] netlink: 'syz.2.6622': attribute type 4 has an invalid length. [ 701.508623][T29255] netlink: 'syz.2.6622': attribute type 4 has an invalid length. [ 701.853349][T29272] netlink: 'syz.4.6626': attribute type 13 has an invalid length. [ 703.291552][T29260] netlink: 'syz.2.6622': attribute type 11 has an invalid length. [ 703.306488][T29262] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 703.317008][T29262] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 703.324836][T29262] gretap2: entered promiscuous mode [ 703.330070][T29262] gretap2: entered allmulticast mode [ 703.376200][T29268] batman_adv: batadv0: Adding interface: dummy0 [ 703.392241][T29268] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.419563][T29268] batman_adv: batadv0: Interface activated: dummy0 [ 703.442215][T29280] __nla_validate_parse: 2 callbacks suppressed [ 703.442233][T29280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6629'. [ 703.478038][T29282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6629'. [ 703.868327][T29305] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6637'. [ 703.995120][T29316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6641'. [ 704.003558][ T985] IPVS: starting estimator thread 0... [ 704.040233][T29315] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 704.083365][T29323] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6642'. [ 704.118315][T29317] IPVS: using max 27 ests per chain, 64800 per kthread [ 704.199525][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6643'. [ 704.364678][T29342] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6647'. [ 704.389240][T29342] 8021q: VLANs not supported on ip_vti0 [ 705.077619][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6659'. [ 705.096932][T29392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6659'. [ 705.149808][T29391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6661'. [ 705.154215][T29396] xt_hashlimit: size too large, truncated to 1048576 [ 705.171854][T29391] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 706.104475][T29445] sctp: [Deprecated]: syz.0.6676 (pid 29445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.104475][T29445] Use struct sctp_sack_info instead [ 706.463237][ T155] bridge_slave_0: left allmulticast mode [ 706.491561][ T155] bridge_slave_0: left promiscuous mode [ 706.523445][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.643767][T29473] netlink: 'syz.3.6685': attribute type 2 has an invalid length. [ 706.868312][T29483] netlink: 'syz.1.6687': attribute type 1 has an invalid length. [ 707.094869][ T155] bond4 (unregistering): (slave gretap2): Releasing active interface [ 707.105530][ T155] gretap2 (unregistering): left promiscuous mode [ 707.112534][ T155] gretap2 (unregistering): left allmulticast mode [ 707.168019][ T155] dvmrp6 (unregistering): left allmulticast mode [ 707.227918][ T155] team0: Port device geneve0 removed [ 707.718111][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.730780][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.732562][T29486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.753682][ T155] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 707.764452][ T155] bond0 (unregistering): Released all slaves [ 707.778014][ T155] bond1 (unregistering): Released all slaves [ 707.792784][ T155] bond2 (unregistering): Released all slaves [ 707.909404][ T155] bond3 (unregistering): (slave veth5): Releasing backup interface [ 707.921333][ T155] bond3 (unregistering): Released all slaves [ 708.044160][ T155] bond4 (unregistering): Released all slaves [ 708.257747][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 30 seconds [ 708.270260][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 30 seconds [ 708.282877][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 30 seconds [ 708.295142][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 30 seconds [ 708.357211][ T155] bond2 (unregistering): (slave geneve4): Releasing active interface [ 708.545253][ T155] bond1 (unregistering): Released all slaves [ 708.564116][ T155] bond0 (unregistering): Released all slaves [ 708.578677][ T155] bond2 (unregistering): Released all slaves [ 708.662681][T29488] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 708.685086][T29495] __nla_validate_parse: 10 callbacks suppressed [ 708.685110][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6689'. [ 708.700522][T29489] ip6tnl1: entered promiscuous mode [ 708.715316][T29489] ip6tnl1: entered allmulticast mode [ 708.909666][T29495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.200288][T29522] xt_hashlimit: size too large, truncated to 1048576 [ 709.261311][T29524] gtp0: entered promiscuous mode [ 709.276033][T29524] gtp0: entered allmulticast mode [ 709.304190][T29524] gtp1: entered promiscuous mode [ 709.309674][T29524] gtp1: entered allmulticast mode [ 709.596097][T29542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6700'. [ 710.184616][T29563] netlink: 'syz.1.6706': attribute type 142 has an invalid length. [ 710.298396][T29565] syzkaller0: entered allmulticast mode [ 710.346295][ T155] tipc: Disabling bearer [ 710.364131][ T155] tipc: Disabling bearer [ 710.376030][ T155] tipc: Left network mode [ 712.605225][T29573] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 712.606389][T29580] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 712.796023][T29583] netlink: 'syz.2.6713': attribute type 25 has an invalid length. [ 712.828821][ T155] tipc: Left network mode [ 713.038174][T29612] netlink: 'syz.3.6719': attribute type 12 has an invalid length. [ 713.081583][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6722'. [ 713.184117][T29621] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6722'. [ 713.221180][T29612] bond3: option primary_reselect: invalid value (255) [ 713.260587][T29612] bond3 (unregistering): Released all slaves [ 713.320382][T29614] netlink: 'syz.0.6722': attribute type 1 has an invalid length. [ 713.351016][T29614] netlink: 'syz.0.6722': attribute type 2 has an invalid length. [ 713.387971][T29623] veth3: entered allmulticast mode [ 713.399135][T29627] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 713.565041][T29615] lo speed is unknown, defaulting to 1000 [ 714.293685][T29660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.827971][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6741'. [ 714.842478][T29680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6741'. [ 714.880129][T29683] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 714.887495][T29680] geneve2: entered promiscuous mode [ 714.887522][T29680] geneve2: entered allmulticast mode [ 714.889632][T29681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.003964][T29688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6744'. [ 715.491574][ T155] hsr_slave_0: left promiscuous mode [ 715.515831][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.550295][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.620394][T29713] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6751'. [ 715.647853][ T155] hsr_slave_0: left promiscuous mode [ 715.662613][ T155] hsr_slave_1: left promiscuous mode [ 715.697708][ T155] veth1_macvtap: left promiscuous mode [ 715.704765][ T155] veth1_vlan: left promiscuous mode [ 715.710353][ T155] veth0_vlan: left promiscuous mode [ 715.928882][ T155] pimreg3 (unregistering): left allmulticast mode [ 716.281285][ T155] team0 (unregistering): Port device team_slave_1 removed [ 716.330713][ T155] team0 (unregistering): Port device team_slave_0 removed [ 717.946928][T29730] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6755'. [ 717.984344][T29730] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6755'. [ 718.052537][T29741] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6755'. [ 718.156692][T29730] gretap0: entered promiscuous mode [ 718.254908][T29741] 0ªî{X¹¦: renamed from gretap0 [ 718.461237][T29741] 0ªî{X¹¦: left promiscuous mode [ 718.511624][T29741] 0ªî{X¹¦: entered allmulticast mode [ 718.646263][T29741] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 719.350358][T29746] gtp0: entered promiscuous mode [ 719.376125][T29746] gtp0: entered allmulticast mode [ 719.444840][T29751] netlink: 'syz.3.6760': attribute type 11 has an invalid length. [ 719.517655][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 719.542496][T29762] netlink: 'syz.1.6762': attribute type 1 has an invalid length. [ 719.560499][T29760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6761'. [ 719.595586][T29763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.671979][T29763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6763'. [ 719.782296][ T155] IPVS: stop unused estimator thread 0... [ 719.812163][T29775] syzkaller1: entered promiscuous mode [ 719.815328][ T155] IPVS: stop unused estimator thread 0... [ 719.838309][T29775] syzkaller1: entered allmulticast mode [ 719.855573][T29779] __nla_validate_parse: 3 callbacks suppressed [ 719.855591][T29779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6769'. [ 719.898253][T29779] netlink: 'syz.2.6769': attribute type 1 has an invalid length. [ 719.974967][T29773] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 720.203728][T29784] bond2: (slave gretap3): making interface the new active one [ 720.249003][T29784] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 720.276324][T29793] smc: net device gre0 applied user defined pnetid SYZ1 [ 720.293468][T29780] lo speed is unknown, defaulting to 1000 [ 720.307944][T29796] smc: net device gre0 erased user defined pnetid SYZ1 [ 720.582012][T29804] netlink: 'syz.2.6774': attribute type 1 has an invalid length. [ 720.601309][T29808] netlink: 'syz.1.6776': attribute type 10 has an invalid length. [ 720.641849][T29810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6774'. [ 720.706038][T29813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6778'. [ 720.723263][T29815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6777'. [ 720.732820][T29808] batman_adv: batadv0: Adding interface: netdevsim0 [ 720.739456][T29808] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.765805][T29808] batman_adv: batadv0: Interface activated: netdevsim0 [ 720.843315][T29822] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6779'. [ 720.969311][T29827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6780'. [ 721.038961][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 721.059201][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 721.069114][T29834] xt_time: unknown flags 0xf4 [ 721.149337][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.159232][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 721.169385][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6782'. [ 721.182538][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.231040][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.243750][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.357116][T29843] atomic_op ffff8880541c2998 conn xmit_atomic 0000000000000000 [ 721.454189][T29846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 721.865153][T29833] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 721.964246][ T30] audit: type=1804 audit(1762730607.242:11): pid=29866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6794" name="/newroot/82/cgroup.controllers" dev="tmpfs" ino=432 res=1 errno=0 [ 722.017171][ T30] audit: type=1800 audit(1762730607.242:12): pid=29866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6794" name="cgroup.controllers" dev="tmpfs" ino=432 res=0 errno=0 [ 722.202336][T29881] 8021q: VLANs not supported on ip6gre0 [ 723.326360][T29951] bridge2: entered promiscuous mode [ 723.327701][T29947] x_tables: duplicate underflow at hook 2 [ 723.338335][T29951] bridge2: entered allmulticast mode [ 723.559647][T29964] netlink: 'syz.3.6826': attribute type 1 has an invalid length. [ 723.569504][T29964] netem: unknown loss type 0 [ 723.574969][T29964] netem: change failed [ 723.590061][T29967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.692514][T29970] set match dimension is over the limit! [ 723.701880][ T30] audit: type=1804 audit(1762730608.972:13): pid=29970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6828" name="/newroot/86/cgroup.controllers" dev="tmpfs" ino=453 res=1 errno=0 [ 723.767987][ T30] audit: type=1800 audit(1762730608.972:14): pid=29970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6828" name="cgroup.controllers" dev="tmpfs" ino=453 res=0 errno=0 [ 723.768819][T29973] syzkaller0: entered promiscuous mode [ 723.826769][T29973] syzkaller0: entered allmulticast mode [ 723.880021][T29982] netlink: 'syz.0.6832': attribute type 2 has an invalid length. [ 724.128650][T29993] syzkaller0: entered promiscuous mode [ 724.134833][T29993] syzkaller0: entered allmulticast mode [ 724.638723][T29987] tipc: Enabling of bearer rejected, failed to enable media [ 724.850549][T30009] netlink: 'syz.1.6840': attribute type 11 has an invalid length. [ 724.868729][T30009] __nla_validate_parse: 9 callbacks suppressed [ 724.868748][T30009] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.6840'. [ 724.917340][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6840'. [ 724.926826][T30011] netlink: 'syz.1.6840': attribute type 3 has an invalid length. [ 724.948597][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6840'. [ 724.981522][T30009] netlink: 'syz.1.6840': attribute type 3 has an invalid length. [ 724.987203][T30020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6842'. [ 725.141704][T30020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6842'. [ 725.234651][T30026] syzkaller0: entered promiscuous mode [ 725.240184][T30026] syzkaller0: entered allmulticast mode [ 727.407045][T30064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6852'. [ 727.427372][T30066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6854'. [ 727.478700][T30070] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6855'. [ 727.958413][T30098] batadv0: mtu less than device minimum [ 727.980067][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 727.992330][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.004620][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.016781][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.028693][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.040830][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.053041][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.065173][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.077282][T30098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 728.157901][T30104] pimreg: entered allmulticast mode [ 728.284130][T30116] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6867'. [ 728.344686][T30120] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6867'. [ 728.499616][T30122] netlink: 'syz.0.6871': attribute type 1 has an invalid length. [ 728.512998][T30120] netlink: 'syz.1.6867': attribute type 4 has an invalid length. [ 728.667251][T30135] netlink: 'syz.3.6874': attribute type 178 has an invalid length. [ 728.780733][T30139] tipc: Started in network mode [ 728.875661][T30139] tipc: Node identity de5cb0afbfe6, cluster identity 4711 [ 728.888023][T30139] tipc: Enabled bearer , priority 0 [ 728.957161][T30148] syzkaller0: entered promiscuous mode [ 728.973149][T30148] syzkaller0: entered allmulticast mode [ 728.987271][T30139] tipc: Resetting bearer [ 729.054091][T30138] tipc: Resetting bearer [ 729.108915][T30138] tipc: Disabling bearer [ 729.845140][T30200] tipc: Enabled bearer , priority 0 [ 729.863420][T30200] syzkaller0: entered promiscuous mode [ 729.873791][T30198] netlink: 'syz.0.6891': attribute type 1 has an invalid length. [ 729.879232][T30200] syzkaller0: entered allmulticast mode [ 729.899887][T30200] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 729.908212][T30198] __nla_validate_parse: 3 callbacks suppressed [ 729.908232][T30198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6891'. [ 729.977024][T30200] tipc: Resetting bearer [ 729.995995][T30194] tipc: Resetting bearer [ 730.053357][T30194] tipc: Disabling bearer [ 730.137489][T30210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6896'. [ 730.157782][T30210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6896'. [ 730.198400][T30210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6896'. [ 730.289745][T30207] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6888'. [ 730.379929][T30216] delete_channel: no stack [ 730.755036][T30239] netlink: 'syz.0.6904': attribute type 21 has an invalid length. [ 730.763905][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6904'. [ 730.858400][T30243] bridge0: port 3(batadv1) entered blocking state [ 730.873660][T30243] bridge0: port 3(batadv1) entered disabled state [ 730.880413][T30243] batadv1: entered allmulticast mode [ 730.890999][T30243] batadv1: entered promiscuous mode [ 730.918160][T30249] netlink: 'syz.2.6907': attribute type 6 has an invalid length. [ 731.243620][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6902'. [ 731.343610][ T155] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 731.353163][ T155] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 731.368716][T30270] veth3: entered allmulticast mode [ 731.650709][T30280] team0 (unregistering): Port device team_slave_0 removed [ 731.665585][T30280] team0 (unregistering): Port device team_slave_1 removed [ 731.699245][T30296] vcan0: entered allmulticast mode [ 731.884732][T30303] netlink: 'syz.2.6924': attribute type 33 has an invalid length. [ 731.961310][T30303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6924'. [ 732.414799][T30322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.444042][T30322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.492732][T30338] netlink: 'syz.4.6931': attribute type 1 has an invalid length. [ 732.644377][T30322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.673286][T30322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.860179][T30322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.885928][T30357] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6937'. [ 732.891194][T30322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.936520][T30356] vlan2: entered allmulticast mode [ 732.945888][T30356] hsr0: entered allmulticast mode [ 732.954343][T30356] hsr_slave_0: entered allmulticast mode [ 732.965397][T30356] hsr_slave_1: entered allmulticast mode [ 733.117193][T30322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.148599][T30322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.232115][T30375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.498949][ T6105] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.522142][ T6105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.604560][ T6106] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.616749][ T6106] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.674272][ T6106] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.685306][ T6106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.720261][ T3083] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.729830][ T3083] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.211675][ T5199] udevd[5199]: worker [28243] /devices/virtual/block/nbd5 is taking a long time [ 738.334430][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 60 seconds [ 738.345465][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 60 seconds [ 738.356793][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 60 seconds [ 738.367808][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 60 seconds [ 759.618986][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 768.414233][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 90 seconds [ 768.425434][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 90 seconds [ 768.436568][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 90 seconds [ 768.448806][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 90 seconds [ 777.627211][T30396] net_ratelimit: 11 callbacks suppressed [ 777.627231][T30396] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 777.661855][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6944'. [ 777.819328][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6943'. [ 777.937722][T30402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 778.056503][T30424] netlink: 'syz.4.6948': attribute type 1 has an invalid length. [ 778.062716][T30422] vlan2: entered promiscuous mode [ 778.069344][T30422] geneve1: entered promiscuous mode [ 778.075416][T30422] vlan2: entered allmulticast mode [ 778.080573][T30422] geneve1: entered allmulticast mode [ 778.096985][T30424] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6948'. [ 778.248267][T30429] IPVS: length: 239 != 24 [ 778.289332][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.384972][T30443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6951'. [ 778.635334][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6959'. [ 778.933869][T30482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6965'. [ 778.975729][T30482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 778.994582][T30482] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6965'. [ 779.073009][T30488] Cannot find add_set index 65532 as target [ 779.199290][T30492] bond4 (unregistering): Released all slaves [ 779.234157][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6968'. [ 779.706608][T30521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6977'. [ 779.948798][T30534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 779.960105][T30534] netlink: 'syz.2.6980': attribute type 30 has an invalid length. [ 780.341507][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 780.535890][T30554] syzkaller0: entered promiscuous mode [ 780.545912][T30554] syzkaller0: entered allmulticast mode [ 782.459182][T30564] geneve2: entered promiscuous mode [ 782.487292][T30569] veth1_to_bond: entered allmulticast mode [ 782.544020][T30571] bond0: (slave bond_slave_1): Releasing backup interface [ 782.589602][T30571] veth1_to_bond (unregistering): left allmulticast mode [ 782.762198][T30591] __nla_validate_parse: 6 callbacks suppressed [ 782.762222][T30591] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6997'. [ 783.047866][T30614] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 783.059122][T30614] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 783.074783][T30614] bond3: (slave wireguard0): making interface the new active one [ 783.083658][T30614] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 783.102517][T30613] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 783.129806][T30619] Unsupported ieee802154 address type: 0 [ 783.145200][T30613] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 783.360054][T30639] netlink: 'syz.2.7008': attribute type 6 has an invalid length. [ 783.360054][T30633] netlink: 'syz.2.7008': attribute type 6 has an invalid length. [ 783.385002][T30643] netlink: 'syz.2.7008': attribute type 6 has an invalid length. [ 783.387867][T30639] netlink: 'syz.2.7008': attribute type 6 has an invalid length. [ 783.394852][T30633] netlink: 'syz.2.7008': attribute type 11 has an invalid length. [ 783.408730][T30633] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7008'. [ 783.657529][T30651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7012'. [ 783.956060][T30677] netlink: 'syz.4.7018': attribute type 2 has an invalid length. [ 783.996646][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7016'. [ 784.211029][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7020'. [ 784.223309][T30690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7020'. [ 784.235082][T30690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7020'. [ 784.324413][T30697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7022'. [ 784.425821][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7022'. [ 784.451143][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.493308][T30699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7022'. [ 784.515817][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.540910][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.588435][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.699547][T30711] IPv6: sit1: Disabled Multicast RS [ 784.706551][T30711] sit1: entered allmulticast mode [ 784.888095][T30723] tipc: Enabled bearer , priority 0 [ 784.908751][T30723] syzkaller0: entered promiscuous mode [ 784.914860][T30723] syzkaller0: entered allmulticast mode [ 784.975875][T30723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 785.056903][T30730] 8021q: VLANs not supported on ip_vti0 [ 785.072050][T30733] tipc: Resetting bearer [ 785.091663][T30722] tipc: Resetting bearer [ 785.130941][T30722] tipc: Disabling bearer [ 790.335948][T30735] Bluetooth: hci2: command 0x0406 tx timeout [ 790.335954][T30734] Bluetooth: hci4: command 0x0406 tx timeout [ 798.504409][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 120 seconds [ 798.515344][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 120 seconds [ 798.526633][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 120 seconds [ 798.538055][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 120 seconds [ 828.575750][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 150 seconds [ 828.586621][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 150 seconds [ 828.597706][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 150 seconds [ 828.609011][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 150 seconds [ 858.652430][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 180 seconds [ 858.663734][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 180 seconds [ 858.674869][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 180 seconds [ 858.686073][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 180 seconds [ 859.442206][ T5199] udevd[5199]: worker [28243] /devices/virtual/block/nbd5 timeout; kill it [ 859.450975][ T5199] udevd[5199]: seq 32386 '/devices/virtual/block/nbd5' killed [ 888.735137][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 210 seconds [ 888.746184][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 210 seconds [ 888.757641][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 210 seconds [ 888.768691][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 210 seconds [ 902.971563][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 918.813895][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 240 seconds [ 918.825372][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 240 seconds [ 918.836641][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 240 seconds [ 918.847951][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 240 seconds [ 948.895703][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 270 seconds [ 948.906762][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 270 seconds [ 948.918789][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 270 seconds [ 948.930051][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 270 seconds [ 978.973261][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 300 seconds [ 978.984109][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 300 seconds [ 978.995422][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 300 seconds [ 979.006537][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 300 seconds [ 1004.574509][ T31] INFO: task udevd:28243 blocked for more than 143 seconds. [ 1004.582082][ T31] Not tainted syzkaller #0 [ 1004.587185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.595996][ T31] task:udevd state:D stack:20200 pid:28243 tgid:28243 ppid:5199 task_flags:0x400140 flags:0x00080003 [ 1004.608090][ T31] Call Trace: [ 1004.611523][ T31] [ 1004.614493][ T31] __schedule+0x1798/0x4cc0 [ 1004.619019][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.624045][ T31] ? schedule+0x91/0x360 [ 1004.628388][ T31] schedule+0x165/0x360 [ 1004.632670][ T31] io_schedule+0x80/0xd0 [ 1004.636988][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 1004.642442][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1004.648315][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1004.653944][ T31] ? __filemap_get_folio+0x6c0/0xaf0 [ 1004.659262][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 1004.664650][ T31] do_read_cache_folio+0x1aa/0x590 [ 1004.669816][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1004.675432][ T31] read_part_sector+0xb6/0x2b0 [ 1004.680243][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 1004.686015][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1004.691962][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1004.698101][ T31] bdev_disk_changed+0x75f/0x14b0 [ 1004.703465][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1004.708981][ T31] ? wait_on_inode+0xc0/0x230 [ 1004.714389][ T31] blkdev_get_whole+0x380/0x510 [ 1004.719331][ T31] bdev_open+0x31e/0xd30 [ 1004.723744][ T31] blkdev_open+0x457/0x600 [ 1004.728190][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1004.734052][ T31] do_dentry_open+0x953/0x13f0 [ 1004.738888][ T31] vfs_open+0x3b/0x340 [ 1004.743372][ T31] ? path_openat+0x2ecd/0x3830 [ 1004.748242][ T31] path_openat+0x2ee5/0x3830 [ 1004.753354][ T31] ? __pfx_path_openat+0x10/0x10 [ 1004.758379][ T31] do_filp_open+0x1fa/0x410 [ 1004.763117][ T31] ? __lock_acquire+0xab9/0xd20 [ 1004.767996][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1004.773137][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1004.778012][ T31] ? alloc_fd+0x64c/0x6c0 [ 1004.782491][ T31] do_sys_openat2+0x121/0x1c0 [ 1004.787265][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1004.792553][ T31] __x64_sys_openat+0x138/0x170 [ 1004.797427][ T31] do_syscall_64+0xfa/0xfa0 [ 1004.802237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.807473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.815035][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1004.819767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.825921][ T31] RIP: 0033:0x7f34072a7407 [ 1004.830398][ T31] RSP: 002b:00007ffdb2875f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1004.838911][ T31] RAX: ffffffffffffffda RBX: 00007f3407987880 RCX: 00007f34072a7407 [ 1004.846986][ T31] RDX: 00000000000a0800 RSI: 0000564f70f6d4d0 RDI: ffffffffffffff9c [ 1004.855131][ T31] RBP: 0000564f70f6c910 R08: 0000000000000000 R09: 0000000000000000 [ 1004.863339][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564f70f86320 [ 1004.871407][ T31] R13: 0000564f70f7a190 R14: 0000000000000000 R15: 0000564f70f86320 [ 1004.879431][ T31] [ 1004.882553][ T31] [ 1004.882553][ T31] Showing all locks held in the system: [ 1004.890282][ T31] 1 lock held by khungtaskd/31: [ 1004.895233][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1004.905286][ T31] 2 locks held by getty/5590: [ 1004.909975][ T31] #0: ffff888033dd50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1004.919939][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1004.930263][ T31] 1 lock held by udevd/28243: [ 1004.935234][ T31] #0: ffff888025872358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1004.944603][ T31] [ 1004.947036][ T31] ============================================= [ 1004.947036][ T31] [ 1004.955527][ T31] NMI backtrace for cpu 0 [ 1004.955545][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1004.955567][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1004.955578][ T31] Call Trace: [ 1004.955586][ T31] [ 1004.955595][ T31] dump_stack_lvl+0x189/0x250 [ 1004.955628][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.955653][ T31] ? __pfx__printk+0x10/0x10 [ 1004.955687][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1004.955714][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1004.955739][ T31] ? __pfx__printk+0x10/0x10 [ 1004.955765][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1004.955798][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1004.955833][ T31] watchdog+0xf60/0xfa0 [ 1004.955859][ T31] ? watchdog+0x1e2/0xfa0 [ 1004.955886][ T31] kthread+0x711/0x8a0 [ 1004.955915][ T31] ? __pfx_watchdog+0x10/0x10 [ 1004.955934][ T31] ? __pfx_kthread+0x10/0x10 [ 1004.955960][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1004.955985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.956008][ T31] ? __pfx_kthread+0x10/0x10 [ 1004.956034][ T31] ret_from_fork+0x4bc/0x870 [ 1004.956058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1004.956084][ T31] ? __switch_to_asm+0x39/0x70 [ 1004.956100][ T31] ? __switch_to_asm+0x33/0x70 [ 1004.956115][ T31] ? __pfx_kthread+0x10/0x10 [ 1004.956140][ T31] ret_from_fork_asm+0x1a/0x30 [ 1004.956212][ T31] [ 1004.956220][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1005.101865][ C1] NMI backtrace for cpu 1 [ 1005.101884][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1005.101902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1005.101912][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1005.101938][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1005.101952][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1005.101968][ C1] RAX: c4b0ff9b2efb1100 RBX: ffffffff81967bf7 RCX: c4b0ff9b2efb1100 [ 1005.101980][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760 [ 1005.101991][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1005.102002][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce270 [ 1005.102014][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1005.102025][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 1005.102038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1005.102050][ C1] CR2: 00007fefde834fcb CR3: 000000007740c000 CR4: 00000000003526f0 [ 1005.102073][ C1] Call Trace: [ 1005.102082][ C1] [ 1005.102088][ C1] default_idle+0x13/0x20 [ 1005.102104][ C1] default_idle_call+0x73/0xb0 [ 1005.102120][ C1] do_idle+0x1e7/0x510 [ 1005.102140][ C1] ? __pfx_do_idle+0x10/0x10 [ 1005.102164][ C1] cpu_startup_entry+0x44/0x60 [ 1005.102180][ C1] start_secondary+0x101/0x110 [ 1005.102202][ C1] common_startup_64+0x13e/0x147 [ 1005.102230][ C1] [ 1009.052428][ T56] block nbd5: Possible stuck request ffff88802591e000: control (read@0,1024B). Runtime 330 seconds [ 1009.063514][ T56] block nbd5: Possible stuck request ffff88802591e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1009.075521][ T56] block nbd5: Possible stuck request ffff88802591e380: control (read@2048,1024B). Runtime 330 seconds [ 1009.087037][ T56] block nbd5: Possible stuck request ffff88802591e540: control (read@3072,1024B). Runtime 330 seconds