last executing test programs: 7.759169005s ago: executing program 3 (id=3322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x2, 'wg1\x00', {0x4}, 0x513b}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010280}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0000000000800030000000000000000000000070900010073797a30000000000900010073797a310000000006000240910000004400048008000140000000ff08000140feff0001080001400000000108000140000000ff08000140000000030800014000000005080001400000000608000140160000000600024088b800001400048008000440000000ef08000440000000060500030084000000060002408858e058d9dce97c170f6400000900010073797a300000000018fd5f36b8b6adc87694fbb9"], 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040881) (async) r1 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) (async, rerun: 64) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000080)={0x7, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @broadcast}}}, 0x62) sendto$unix(r4, &(0x7f0000000480)="4ae9cd136fead0eab0f4b15e4e9c1b5c15750742e6c2461a9ceffbba32822c3805026a32f5f18cec7fde57c643175f0f61f831d10a9ef1f95cb8a22ccebdd552605c4860fb61fbc38728eeac797d48f3", 0x50, 0x4048051, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce8c0000000000000000000000000000000000000000000100000000000000"], 0xb1) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000020101040000000000000000020000000208000200e00000010c00028005004100"/56], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0xc015) 7.525749872s ago: executing program 3 (id=3324): r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="2e9b5b0007e03dd65193dfb6c575963f88a8", 0x12}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000010000000000000000000a00000a2c000000060a0b040000000000000000020000001800048014000180090001007866726d0000000004000280140000001100010000000000002300000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000020000000000001302050000000061612e00"], 0x0, 0x2a}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x10, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x138, 0x180, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@iprange={{0x68}, {@ipv4=@dev={0xac, 0x14, 0x14, 0xa}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast2, @ipv6=@local, 0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x1, 0x8, 'pptp\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 7.169842134s ago: executing program 3 (id=3328): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001f40)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x98) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000000901010000000000000000010000010c0004800800015a00000005080006400000000108000340000000030800064000000001080005400000001a009d1ea2fc0ce7194bbaa4925af389d190793a7c67b3c397f0e6d12f19944b330a33be1d338cf460908ba277fc84de96961c53275c1a30398d80585a148082799e862a7a9b5ba3b8637ff425"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x2) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0xfc, 0x20, 0x7}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000010000100000000004c0000000000000a20004000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd58d26115453baa910be00000140000001000010000000000000000000000000a"], 0xd4}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 6.974625256s ago: executing program 3 (id=3331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 6.633027763s ago: executing program 3 (id=3334): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8c20010}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0xf0, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1000}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x44}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_USERDATA={0xab, 0xd, 0x1, 0x0, "a4511c421071d5cb0115b13c6653670038e2b4a1570277bb2d5abd55861ebf7384fa831131fd2d46ea3454eb79e154dfe082b2c78c3909a3a8e91c8bbe229adf3369ee9b24cff505ffe352113a0a3d695b0f1f3bd3c2c0f93418c149028125c617764d4c95d36492fabc5aacffc3ba43907719d54ff2c27e7cf0e9e1ed36f58e4954018bed5a9e8a395426002ac24c8063c950647de35b8aab2b53a216ae3fcd329b02fe54c26c"}]}], {0x14}}, 0x118}, 0x1, 0x0, 0x0, 0x100008c0}, 0x4) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0x1fffff) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x30) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) (rerun: 64) 6.4367197s ago: executing program 3 (id=3336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x13, 0x0, 0x1, [@generic=' \bho']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1.839974104s ago: executing program 1 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) 1.839584236s ago: executing program 4 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000858a751edf00000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) recvmsg(r3, &(0x7f0000001800)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/206, 0xce}, {&(0x7f00000014c0)=""/250, 0xfa}, {&(0x7f00000015c0)=""/164, 0xa4}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, &(0x7f0000001700)=""/248, 0xf8}, 0x10021) listen(r3, 0x6) 1.838891816s ago: executing program 2 (id=3395): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES16=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1.789078266s ago: executing program 0 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x3, 0x8, 0x7, 0x140}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r1}, 0x38) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r2}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$pppoe(0x18, 0x1, 0x0) tee(r5, r6, 0x1ff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1f, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0xa, 0xa, 0x6, 0x80, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r4, 0x2b9, '\x00', r9, r5, 0x5, 0x5, 0x2}, 0x50) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="000088b5ffffffff65b98dffffaaaaaaaaaaaa08004500001c929d2e0b002f90499d221ae1ac1414aaa00086dd00"], 0x2e) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0) 1.703703481s ago: executing program 4 (id=3397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410126bd7000ffdbdf250400000005002a000100000005002edba566c2469bda42002709000008000b000300000008003c0000000000050030000000000005002a000000000008003c000008000005002d0002000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x408d1) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x51b, 0x70bd2b}, 0x14}}, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 1.615669551s ago: executing program 2 (id=3398): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000025c0)="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", 0x4e5}], 0x1}, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x800, 0x8) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x5a, 0x5) syz_emit_ethernet(0x11d, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x10f, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, r2, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe6}, {"238e4a57c6f1e55a755fcf3dbc377bbd1267c9dc3089a101cdeb179655bc546dff395cd778eabb8abf26e8920d2131ff3995b8ed9d033f9b357bf192adb6e2598d8207ccf863bbf6705b180d1e29415cc47bbb4ee10af955e2b50ac1879a66a0934225edf24901ad3f117f31aae6b8cc48b981178fdf0c845e5a15cb0661e1867e26ca5df71d6b578c2267eb1b99a01e44cfa12ceff34bcc2980473e326f8fddbcbdcc6babdcaaedd7da6edd20a30d8ea00010be426546352a6495dcf45e78041655f88c4acfff16bdaf8a96716fd64b432795266175b2e658d8a4018c06c78943c4d22cc7a263"}}}}}}, 0x0) syz_emit_ethernet(0x10e2, &(0x7f0000000f80)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, '\b\x00', 0x10ac, 0x6, 0x2, @mcast1, @loopback, {[@srh={0x1, 0x4, 0x4, 0x2, 0x7, 0x48, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}, @dstopts={0x87, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @ra, @calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x5180, [0x1, 0x2, 0x1]}}, @ra={0x5, 0x2, 0x83}]}, @fragment={0x11, 0x0, 0x6, 0x1, 0x0, 0xa, 0x65}], {{0x4e24, 0x4e24, r1, r2, 0x1, 0x0, 0xf, 0x2, 0xec, 0x0, 0x8, {[@generic={0x2, 0xc, "2da4038979f3808ab756"}, @mss={0x2, 0x4, 0x9}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xe, "a91ef8386e5f455b6d8b483d"}, @sack_perm={0x4, 0x2}]}}, {"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"}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.610830024s ago: executing program 1 (id=3399): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r4, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000340)=0x8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 1.440294075s ago: executing program 1 (id=3400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x398, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @local, @loopback, @private1, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024e00180090001006d65746100000000140002800800014000000000080002400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) 1.316115647s ago: executing program 4 (id=3401): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 1.315191896s ago: executing program 0 (id=3402): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 1.221498792s ago: executing program 4 (id=3403): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/226, 0x140, 0xe2, 0x1, 0x9, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x800003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 1.208537162s ago: executing program 0 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) close(0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x425400, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x0, 0x6, 0x8, 0x7, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x0, 0x9, 0x4, 0x20, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @random="87fdfdd6ed9e", @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}, 0x4a) 1.075786715s ago: executing program 4 (id=3405): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000005780)=ANY=[@ANYBLOB="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"], 0x3d44}, 0x1, 0x0, 0x0, 0x20000021}, 0xef396c7e164633a0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:462'], 0xa) openat$cgroup_type(r2, &(0x7f0000000340), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff, r4, r4], 0x0, 0x10, 0xc}, 0x94) recvfrom(r1, &(0x7f0000000000)=""/70, 0x46, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r8, r7, 0x4, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'pimreg0\x00', 0x0}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000004780)="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", 0x1000}], 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000d100000035000000000000008500001407000000a300000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) socket$kcm(0x29, 0x2, 0x0) 1.039513538s ago: executing program 0 (id=3406): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x87) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) 736.447306ms ago: executing program 2 (id=3407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x20040845) 644.011099ms ago: executing program 0 (id=3408): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 527.685252ms ago: executing program 2 (id=3409): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x6a, "7c120903de739adfc3fcb892420c58051acb163da1f4152beeac61707d6d83510e70de773eb8578e3eaac9239ad9666e0607af903686acb792270b7bd8b495ab8183724ca7181f13a14a54c5e1a884e01c1840ac99a74145693aae7049b970739ee889b7bd0da7e36244"}, &(0x7f00000000c0)=0x72) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x3d}, 0x8) (async, rerun: 64) r3 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x200}, 0xc) 479.684064ms ago: executing program 0 (id=3410): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x4000000) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000000280)=""/87, 0x57}], 0x3, &(0x7f0000000340)=""/124, 0x7c}}], 0x1, 0x2000, &(0x7f0000000400)={0x0, 0x989680}) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000440)=[{}, {}], 0x2, 0xfff, &(0x7f0000000480)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 479.083997ms ago: executing program 1 (id=3411): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c00990000000000000000003c005e80080005000000000008000300000000000800090000000000100001000000000000000000000000000800070000000000080001"], 0x5c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x438, 0x110, 0x0, 0x240, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000180), {[{{@arp={@local, @multicast1, 0xff, 0xff, 0x0, 0x9, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x7f, 0xff, 0xff, 0x0, 0x0, 0x7f]}}, 0x9, 0x8, 0x1, 0x9, 0x4d9, 0x8a8, 'xfrm0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@multicast, @remote, @local, 0x4}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x401, 0x8000, 0xffff, 0x1, 0x0, "a64f42a2ccef0bb6b5102b0fa9dc527b0bd89ef8574b6d028e774bb658a15c5911c2eda8de87b2637bfd0f45cdc484bd3fa1ff1f66d65b7f7e7a528aa6e8e5a9"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x33}}}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80000) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) 255.771728ms ago: executing program 2 (id=3412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x50, 0x30, 0x20, 0x70bd2b, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="a90500000000000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab000000000038", 0x25}], 0x1}}], 0x1, 0x44800) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000180)=@ethtool_cmd={0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0x8}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 254.086015ms ago: executing program 1 (id=3413): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept$alg(r0, 0x0, 0x0) (async) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f00000002c0)=""/50, 0x32}], 0x1}, 0x40010002) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x20048815) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb81279", 0x32}], 0x1}}], 0x1, 0x8058) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x200, 0x0) (async) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r5) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r5) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="000127bd70000afe6f0211c07a2c7cfddbdf2503000000050005f7176df0000800020001040000050005000500000014000100fc01000000000000000000000000000108000200040000000500060001000000050005000300000014000100fc020000000000000000000000000000000002000001000008000300fbffffff00000500050000"], 0xa4}, 0x1, 0x0, 0x0, 0x44}, 0x81) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) close(r1) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000000)={r10, 0xb00, 0xca, 0xff}) sendmsg$nl_route(r11, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0002000ebd7000fcdbdf250214e605fd00ff0a00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000004) 174.4825ms ago: executing program 4 (id=3414): r0 = socket(0x9, 0x3, 0x0) r1 = socket(0x9, 0x5, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="043d400000000000410000000000000000001d0ca54bf13e8e1b5319a279337caca773a1fce3a32f0229f60928364d6bcc5343b59077496f430ab78262d2c4d359972025e70d62baf5e5ebf849872a14eefab9ca2f3894c1c0cebb82d6e353518569ea298b52c23d9063c44f5875ff0a09a4f08e86e92e70e02716f53a5d2757c78d7103132a4a345eebf6b379c92ad673e818b68fee", @ANYRES32=r5, @ANYBLOB="00000000003f0000240012800b000f00677265746170000014000280080007006401010105001b000a0000020c0031d4", @ANYBLOB="acbfd06d26d8332c725678922e6cd4bde0b73b01b6092b0838ba93346f631b8e1df6b4a52a30b423b48d4b4cb63f85cebf7d701c22eed4dc22f7e8701913dc14f6ef3fe0", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x4024014) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES64=r5, @ANYBLOB="f8588e1a12cc96fe8f55eaf04ec28e7ff29218f17df7cc5de97aa83a838be2a1f7d7420116b0d6a35555b775ddeb06482c59099c889510e55dbc4847b6b1fc4f036adadab4349a42d160774784adfba2462bd309a8d889d205f7c3646b012d115f507e551d8c92f2fc0b216b483b8d15012672994968331f5f4a8982fc2e55eb3de6e11354ffc55ed2fb5993bd302e842049cddecc6532230eb5c6c223847c1b0aacda26ac54c0a1ce3086a5afa315db1781d4404116d0ae1f19d09422f8de55da5c320c54f4b4e7ace9dcdb736e80d72b2c7558d03a85f48cb0431dececac16cfd99407e4171337a373040fab95c1cf44", @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC=r8, @ANYRES16=r3], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x30}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x98}}, 0x81) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) sendmsg$alg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x560b}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x40000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) 100.336734ms ago: executing program 2 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x4048014) 0s ago: executing program 1 (id=3416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xdb38}, [@call={0x85, 0x0, 0x0, 0x11}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x54, &(0x7f0000000500)=""/84, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0x3, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=[r2, r2, r1, r1, r0, r2, r0], &(0x7f0000000380)=[{0x0, 0x2, 0xe}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x8348}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r3, 0x0, 0x39, 0x1000, &(0x7f0000000680)="8d1af4672d4b57404771ca9ef82e50a03be13bcdd8456ba62da3a5fdd86bfa16b42d122839068f97cd13bbefc5bfb66a1cd25b3cee62b7efd1", &(0x7f00000006c0)=""/4096, 0x2, 0x0, 0xb8, 0x83, &(0x7f00000016c0)="75e931f9eeee09a5902c3dfc5c0e63e83905c9a81723eb8c8b4f88fce20af4347bcc3da1d966bb8d4914c4fde4d65e48996e8f3f829b28555e0cd43d7dcfc6efd2344d523179bd0a9ee263b049264bfbc6fd0f5679d16e64a8dbf127f5dd94f874782741489e695be5796100db0d7f2d216b0cd124c78ff2f56cf1446a7e94b6a648039772f783207d7165eba24163df60f6a503b40fbc6e58a620016c610cbd0de4d8d2f4ee1535ecdae219d16d317c38d52c65baad9c60", &(0x7f0000001780)="bc53cb46d789c3ffa865a0a8c97d3b175920ef691915449cea7cff14e88e992223b99d1bf15dd353e6ac6b2e864fade3940944f0706f010f9762356da1f7733056513bb0c10faae81f31ec20ffda58dd78efc73e14aff1f367d519e06f357ce120f00ad6a974961d1e5ca414a750ee02e4b8ffb8e1aacc07f49540bd1d872116023820", 0x2, 0x0, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): est stack depth: 17992 bytes left [ 292.369499][T12789] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 292.394452][T12786] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 292.501662][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.929763][T12809] SET target dimension over the limit! [ 293.125826][T12816] netlink: 'syz.3.1952': attribute type 4 has an invalid length. [ 293.724470][ T5937] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 293.772985][ T5937] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 294.087770][ T12] syzkaller0: tun_net_xmit 76 [ 294.096318][ T12] syzkaller0: tun_net_xmit 48 [ 294.111138][T12872] macvlan0: entered promiscuous mode [ 294.118124][T12872] macvlan0: entered allmulticast mode [ 294.125020][T10330] syzkaller0: tun_net_xmit 76 [ 294.205517][ T5937] syzkaller0: tun_net_xmit 76 [ 294.321921][T12881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.326233][ T5944] syzkaller0: tun_net_xmit 76 [ 294.386183][ T5944] syzkaller0: tun_net_xmit 76 [ 294.414618][T12874] syzkaller1: entered promiscuous mode [ 294.424280][T12874] syzkaller1: entered allmulticast mode [ 296.401775][T12905] veth0_virt_wifi: renamed from veth0_vlan [ 296.652310][T12927] validate_nla: 2 callbacks suppressed [ 296.652327][T12927] netlink: 'syz.0.1980': attribute type 83 has an invalid length. [ 296.848383][T12937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.877523][T12940] __nla_validate_parse: 10 callbacks suppressed [ 296.877543][T12940] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1983'. [ 296.915723][T12937] delete_channel: no stack [ 297.027960][T12940] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 297.436458][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 297.815490][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 297.952632][T12991] macvtap1: entered promiscuous mode [ 297.966901][T12991] vlan0: entered promiscuous mode [ 297.977319][T12991] macvtap1: entered allmulticast mode [ 297.999087][T12991] vlan0: entered allmulticast mode [ 298.012672][T12991] veth0_vlan: entered allmulticast mode [ 298.055151][T12990] macvtap2: entered promiscuous mode [ 298.064594][T12990] macvtap2: entered allmulticast mode [ 298.091707][T12998] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2001'. [ 298.107915][T12999] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2001'. [ 298.475817][T13014] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2006'. [ 298.535656][T13018] bond9: entered promiscuous mode [ 298.541143][T13018] bond9: entered allmulticast mode [ 298.548167][T13018] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.606480][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 298.636271][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 298.654081][T13019] pim6reg1: entered promiscuous mode [ 298.664855][T13019] pim6reg1: entered allmulticast mode [ 298.818672][T13036] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2013'. [ 298.850879][T13036] gretap0: entered promiscuous mode [ 299.489059][T13071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2021'. [ 299.723756][T13080] netlink: 'syz.4.2026': attribute type 83 has an invalid length. [ 299.778380][T13082] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.000560][T13084] bond0 (unregistering): Released all slaves [ 300.121192][T13091] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 300.137053][T13091] batadv0: entered promiscuous mode [ 300.144634][T13091] bridge0: port 4(batadv0) entered blocking state [ 300.153800][T13091] bridge0: port 4(batadv0) entered disabled state [ 300.269514][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 300.278865][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 300.341851][T13098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.779725][T13126] IPVS: set_ctl: invalid protocol: 204 100.1.1.2:20004 [ 301.012424][T13133] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 301.141941][T13143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.159071][T13136] bond6 (unregistering): Released all slaves [ 301.322734][T13143] ip6tnl2: entered promiscuous mode [ 301.374928][T13143] ip6tnl2: entered allmulticast mode [ 301.955560][T13187] __nla_validate_parse: 16 callbacks suppressed [ 301.955576][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 302.633290][T13229] openvswitch: netlink: Duplicate or invalid key (type 0). [ 302.646070][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 302.655595][ T55] block nbd0: Possible stuck request ffff888025550000: control (read@0,4096B). Runtime 90 seconds [ 302.675042][T13229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.771420][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 302.787298][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 302.987139][T13248] pimreg: entered allmulticast mode [ 303.024116][T13251] Cannot find del_set index 17 as target [ 303.033928][T13251] Cannot find del_set index 17 as target [ 303.120233][T13257] netlink: zone id is out of range [ 303.134289][T13257] netlink: zone id is out of range [ 303.156278][T13250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.158403][T13257] netlink: zone id is out of range [ 303.173173][T13257] netlink: zone id is out of range [ 303.184469][T13257] netlink: zone id is out of range [ 303.191445][T13257] netlink: zone id is out of range [ 303.200010][T13257] netlink: zone id is out of range [ 303.228806][T13257] netlink: zone id is out of range [ 303.331879][T13250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.343239][T13268] syz.0.2082: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.361027][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.0.2082 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 303.361064][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.361087][T13268] Call Trace: [ 303.361094][T13268] [ 303.361103][T13268] dump_stack_lvl+0x189/0x250 [ 303.361132][T13268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.361150][T13268] ? __pfx__printk+0x10/0x10 [ 303.361172][T13268] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.361194][T13268] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.361217][T13268] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 303.361240][T13268] warn_alloc+0x214/0x310 [ 303.361254][T13268] ? stack_depot_save_flags+0x40/0x900 [ 303.361278][T13268] ? __pfx_warn_alloc+0x10/0x10 [ 303.361296][T13268] ? kasan_save_track+0x4f/0x80 [ 303.361317][T13268] ? xskq_create+0x56/0x170 [ 303.361333][T13268] ? xsk_init_queue+0xb0/0x110 [ 303.361344][T13268] ? xsk_setsockopt+0x43f/0x710 [ 303.361355][T13268] ? do_sock_setsockopt+0x17c/0x1b0 [ 303.361376][T13268] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 303.361395][T13268] ? do_syscall_64+0xfa/0x3b0 [ 303.361411][T13268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.361437][T13268] __vmalloc_node_range_noprof+0x125/0x12f0 [ 303.361489][T13268] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.361518][T13268] ? __kasan_kmalloc+0x93/0xb0 [ 303.361543][T13268] vmalloc_user_noprof+0xad/0xf0 [ 303.361565][T13268] ? xskq_create+0xbf/0x170 [ 303.361582][T13268] xskq_create+0xbf/0x170 [ 303.361602][T13268] xsk_init_queue+0xb0/0x110 [ 303.361622][T13268] xsk_setsockopt+0x43f/0x710 [ 303.361640][T13268] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.361661][T13268] ? __fget_files+0x2a/0x420 [ 303.361677][T13268] ? aa_sock_opt_perm+0x74/0x110 [ 303.361696][T13268] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 303.361711][T13268] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.361729][T13268] do_sock_setsockopt+0x17c/0x1b0 [ 303.361757][T13268] __x64_sys_setsockopt+0x13f/0x1b0 [ 303.361786][T13268] do_syscall_64+0xfa/0x3b0 [ 303.361802][T13268] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.361821][T13268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.361836][T13268] ? clear_bhb_loop+0x60/0xb0 [ 303.361854][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.361868][T13268] RIP: 0033:0x7f2cbc98e9a9 [ 303.361883][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.361896][T13268] RSP: 002b:00007f2cbd76e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.361912][T13268] RAX: ffffffffffffffda RBX: 00007f2cbcbb5fa0 RCX: 00007f2cbc98e9a9 [ 303.361924][T13268] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 303.361933][T13268] RBP: 00007f2cbca10d69 R08: 0000000000000004 R09: 0000000000000000 [ 303.361944][T13268] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.361954][T13268] R13: 0000000000000000 R14: 00007f2cbcbb5fa0 R15: 00007ffc764048c8 [ 303.361984][T13268] [ 303.362146][T13268] Mem-Info: [ 303.697564][T13268] active_anon:4647 inactive_anon:0 isolated_anon:0 [ 303.697564][T13268] active_file:1317 inactive_file:39894 isolated_file:0 [ 303.697564][T13268] unevictable:768 dirty:27 writeback:0 [ 303.697564][T13268] slab_reclaimable:10832 slab_unreclaimable:124384 [ 303.697564][T13268] mapped:29173 shmem:1375 pagetables:1118 [ 303.697564][T13268] sec_pagetables:0 bounce:0 [ 303.697564][T13268] kernel_misc_reclaimable:0 [ 303.697564][T13268] free:1301346 free_pcp:13612 free_cma:0 [ 303.745042][T13268] Node 0 active_anon:18588kB inactive_anon:0kB active_file:5268kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116692kB dirty:104kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12612kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.817902][T13268] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.884069][T13268] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.920179][T13268] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 303.927497][T13268] Node 0 DMA32 free:1286008kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18444kB inactive_anon:0kB active_file:5268kB inactive_file:157796kB unevictable:1536kB writepending:104kB present:3129332kB managed:2558488kB mlocked:0kB bounce:0kB free_pcp:39244kB local_pcp:17600kB free_cma:0kB [ 303.928242][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 303.974154][T13268] lowmem_reserve[]: 0 0 1 1 1 [ 303.979509][T13268] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 304.010582][T13268] lowmem_reserve[]: 0 0 0 0 0 [ 304.016048][T13268] Node 1 Normal free:3904004kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16612kB local_pcp:6880kB free_cma:0kB [ 304.070635][T13268] lowmem_reserve[]: 0 0 0 0 0 [ 304.091335][T13268] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.107749][T13268] Node 0 DMA32: 758*4kB (UM) 216*8kB (UME) 179*16kB (UM) 772*32kB (UME) 295*64kB (UME) 89*128kB (UM) 36*256kB (UME) 23*512kB (UME) 16*1024kB (UME) 3*2048kB (ME) 288*4096kB (M) = 1285768kB [ 304.132931][T13250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.209598][T13268] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 304.265591][T13268] Node 1 Normal: 163*4kB (UM) 49*8kB (UME) 39*16kB (UME) 86*32kB (UME) 23*64kB (UME) 8*128kB (UME) 7*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3904004kB [ 304.345985][T13268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.358768][T13268] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.394508][T13268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.397860][T13250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.456832][T13268] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.486352][T13268] 42585 total pagecache pages [ 304.495807][T13268] 0 pages in swap cache [ 304.500059][T13268] Free swap = 124996kB [ 304.517537][T13268] Total swap = 124996kB [ 304.519651][T13293] C: renamed from team_slave_0 [ 304.523597][T13268] 2097051 pages RAM [ 304.536185][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 304.537022][T13293] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 304.553395][T13268] 0 pages HighMem/MovableOnly [ 304.559378][T13268] 425387 pages reserved [ 304.583930][T13268] 0 pages cma reserved [ 304.684012][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 306.472613][T13295] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 306.503729][T13250] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.633969][T13250] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.688237][T13250] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.770561][T13250] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.052510][T13341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2105'. [ 307.064376][T13341] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2105'. [ 307.293206][T13350] netlink: 'syz.4.2107': attribute type 11 has an invalid length. [ 307.306845][T13354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2109'. [ 307.328090][T13350] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2107'. [ 307.569207][T13361] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 307.588447][T13361] netlink: 'syz.0.2111': attribute type 1 has an invalid length. [ 308.854804][T13336] vlan3: entered allmulticast mode [ 308.859978][T13336] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 308.868522][T13344] C: renamed from lo [ 309.073771][T13379] geneve2: entered promiscuous mode [ 309.081696][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2114'. [ 309.116357][T13379] geneve2: entered allmulticast mode [ 309.232063][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 309.393855][T13390] netlink: 'syz.1.2119': attribute type 11 has an invalid length. [ 309.423597][T13390] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2119'. [ 309.485515][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 309.612431][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 309.660741][T13406] veth13: entered allmulticast mode [ 309.739393][T13415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2127'. [ 309.785315][T13420] net_ratelimit: 8 callbacks suppressed [ 309.785336][T13420] openvswitch: netlink: Key type 11777 is out of range max 32 [ 310.411043][T13453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.464197][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2144'. [ 312.511880][T13477] netlink: 'syz.1.2144': attribute type 7 has an invalid length. [ 312.526234][T13477] netlink: 'syz.1.2144': attribute type 8 has an invalid length. [ 312.593803][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 312.796091][T13488] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2149'. [ 312.807409][T13492] netlink: 'syz.4.2149': attribute type 33 has an invalid length. [ 312.818621][T13495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2151'. [ 313.168154][T13519] netlink: 'syz.2.2157': attribute type 12 has an invalid length. [ 313.247412][T13521] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2159'. [ 313.296999][T13527] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2161'. [ 313.942270][T13558] netlink: 'syz.3.2170': attribute type 2 has an invalid length. [ 314.083333][T13567] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 314.106119][T13567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2171'. [ 314.251641][T13578] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 314.430454][T13583] netlink: 'syz.1.2175': attribute type 21 has an invalid length. [ 314.488998][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 314.520201][T13583] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2175'. [ 315.020613][T13606] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2184'. [ 315.264158][T13619] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 315.310773][T13619] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 315.334082][T13625] dummy0: left promiscuous mode [ 315.353173][T13625] bridge0: port 3(dummy0) entered disabled state [ 315.458848][T13632] netlink: 'syz.2.2192': attribute type 11 has an invalid length. [ 315.509017][T13625] bridge0: port 4(batadv0) entered disabled state [ 315.554419][T13625] : left promiscuous mode [ 315.561570][T13625] bridge0: port 1() entered disabled state [ 315.613536][T13625] bridge_slave_1: left promiscuous mode [ 315.627691][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.651846][T13625] bond0: (slave bond_slave_0): Releasing backup interface [ 315.662280][T13625] bond0: (slave bond_slave_1): Releasing backup interface [ 315.676498][T13625] team0: Port device team_slave_0 removed [ 315.687182][T13625] team0: Port device team_slave_1 removed [ 315.693755][T13625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.704580][T13625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.716392][T13625] bond3: (slave macvlan2): Removing an active aggregator [ 315.725786][T13625] bond3: (slave macvlan2): Releasing backup interface [ 316.008145][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.092294][T13654] tipc: Enabled bearer , priority 0 [ 316.136356][T13657] tipc: Enabled bearer , priority 0 [ 316.166262][T13661] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 316.232344][T13665] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 316.263776][T13667] syzkaller0: entered promiscuous mode [ 316.281227][T13667] syzkaller0: entered allmulticast mode [ 316.573409][T13657] tipc: Resetting bearer [ 316.651787][T13655] tipc: Resetting bearer [ 316.696623][T13655] tipc: Disabling bearer [ 316.736425][T13653] tipc: Disabling bearer [ 317.004118][T13695] 8021q: VLANs not supported on sit0 [ 317.021228][T13688] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 317.033229][T13697] 8021q: VLANs not supported on sit0 [ 317.621069][T13731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.686905][T13735] __nla_validate_parse: 12 callbacks suppressed [ 317.686923][T13735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2224'. [ 318.026098][T13746] can: request_module (can-proto-0) failed. [ 318.203310][T13760] sit0: entered promiscuous mode [ 318.229753][T13760] validate_nla: 2 callbacks suppressed [ 318.229773][T13760] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 318.297462][T13760] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2232'. [ 318.314212][T13762] netlink: 'syz.2.2233': attribute type 2 has an invalid length. [ 318.346940][T13762] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2233'. [ 318.363571][T13764] netlink: 'syz.0.2234': attribute type 23 has an invalid length. [ 318.409200][T13766] netlink: 'syz.2.2233': attribute type 2 has an invalid length. [ 318.423060][T13766] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2233'. [ 318.733305][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2238'. [ 318.954126][T13795] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 318.990769][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 319.011571][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2243'. [ 319.078390][T13800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'. [ 319.293902][T13818] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2248'. [ 319.409300][T13819] geneve3: entered promiscuous mode [ 319.414652][T13819] geneve3: entered allmulticast mode [ 319.712705][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 319.834356][T13836] hsr_slave_0 (unregistering): left promiscuous mode [ 320.188280][T13859] netlink: 'syz.1.2262': attribute type 3 has an invalid length. [ 320.288567][T13864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.295899][T13864] IPv6: NLM_F_CREATE should be set when creating new route [ 320.303273][T13864] IPv6: NLM_F_CREATE should be set when creating new route [ 320.310565][T13864] IPv6: NLM_F_CREATE should be set when creating new route [ 320.321610][T13864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.678176][T13882] netlink: 'syz.0.2268': attribute type 4 has an invalid length. [ 320.703312][T13885] netlink: 'syz.0.2268': attribute type 4 has an invalid length. [ 320.711295][T13882] : renamed from bond0 [ 320.897409][T13894] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 321.503294][T13925] xfrm1: entered promiscuous mode [ 321.512775][T13925] xfrm1: entered allmulticast mode [ 321.796603][T13941] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 322.062915][T13959] xt_TCPMSS: Only works on TCP SYN packets [ 322.081316][T13962] netlink: 'syz.1.2292': attribute type 1 has an invalid length. [ 322.235933][T13959] x_tables: duplicate underflow at hook 3 [ 322.247175][T13959] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 322.607360][T13990] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 322.953987][T14009] __nla_validate_parse: 15 callbacks suppressed [ 322.954006][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2307'. [ 323.111745][T14014] tipc: Enabled bearer , priority 0 [ 323.128672][T14014] syzkaller0: entered promiscuous mode [ 323.134230][T14014] syzkaller0: entered allmulticast mode [ 323.191115][T14014] tipc: Resetting bearer [ 323.249394][T14023] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2312'. [ 323.263275][T14013] tipc: Resetting bearer [ 323.266244][T14022] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2312'. [ 323.296380][T14013] tipc: Disabling bearer [ 323.341693][T14032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.503438][T14038] validate_nla: 4 callbacks suppressed [ 323.503451][T14038] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 323.578770][T14041] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2317'. [ 324.220556][T14052] tipc: Enabled bearer , priority 0 [ 324.250231][T14052] syzkaller0: entered promiscuous mode [ 324.266555][T14052] syzkaller0: entered allmulticast mode [ 324.356182][T14068] tipc: Resetting bearer [ 324.393114][T14050] tipc: Resetting bearer [ 324.509008][T14050] tipc: Disabling bearer [ 324.800692][T14091] tipc: Enabling of bearer rejected, already enabled [ 324.948105][T14102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2332'. [ 326.439373][T14149] syzkaller0: entered promiscuous mode [ 326.458879][T14149] syzkaller0: entered allmulticast mode [ 326.558709][T14154] syzkaller0: entered promiscuous mode [ 326.564520][T14154] syzkaller0: entered allmulticast mode [ 326.572629][T14153] tipc: Enabled bearer , priority 0 [ 326.749548][T14156] tipc: Resetting bearer [ 326.824016][T14156] tipc: Disabling bearer [ 326.949647][T14174] veth0: entered promiscuous mode [ 326.964669][T14174] veth0: left promiscuous mode [ 327.033103][T14178] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 327.202590][T14194] nbd: nbd0 already in use [ 327.204163][T14178] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.207779][T14194] block nbd0: NBD_DISCONNECT [ 327.207823][T14194] block nbd0: Send disconnect failed -32 [ 327.207851][T14194] block nbd0: shutting down sockets [ 327.214933][ C0] blk_print_req_error: 138 callbacks suppressed [ 327.214953][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.247276][ C0] buffer_io_error: 138 callbacks suppressed [ 327.247293][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.250206][T14196] xt_hashlimit: invalid rate [ 327.253684][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.302340][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.334997][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.344099][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.380882][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.407616][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.421475][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.431093][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.448192][T14189] bond10: (slave veth11): Enslaving as an active interface with a down link [ 327.470130][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.473225][T14192] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 327.480782][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.480991][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.514780][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.516053][T14197] gtp1: entered promiscuous mode [ 327.522986][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.548910][T14197] gtp1: entered allmulticast mode [ 327.569787][T14178] vlan2: entered allmulticast mode [ 327.575862][T14178] veth1: entered allmulticast mode [ 327.581872][T14178] veth1: entered promiscuous mode [ 327.591070][T14178] veth1: left promiscuous mode [ 327.599088][T14178] bond10: (slave vlan2): making interface the new active one [ 327.609851][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.628548][ T7790] ldm_validate_partition_table(): Disk read failed. [ 327.636466][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.646839][T14178] veth1: entered promiscuous mode [ 327.652847][T14178] vlan2: entered promiscuous mode [ 327.658866][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.667096][ T7790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 327.677768][T14178] bond10: (slave vlan2): Enslaving as an active interface with an up link [ 327.686487][ T7790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 327.696498][ T7790] Dev nbd0: unable to read RDB block 0 [ 327.702738][ T7790] nbd0: unable to read partition table [ 327.728241][ T7790] ldm_validate_partition_table(): Disk read failed. [ 327.737362][ T7790] Dev nbd0: unable to read RDB block 0 [ 327.743545][ T7790] nbd0: unable to read partition table [ 327.768539][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2365'. [ 328.379557][T14233] bridge_slave_0: left allmulticast mode [ 328.433406][T14233] bridge_slave_0: left promiscuous mode [ 328.440611][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.453562][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 328.470450][T14233] bond1: (slave veth0_to_bond): Releasing active interface [ 328.478180][T14233] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 328.510396][T14233] bond1: (slave vlan3): making interface the new active one [ 328.525857][T14233] veth1: entered promiscuous mode [ 328.536008][T14233] bond0: (slave bond_slave_0): Releasing backup interface [ 328.545849][T14233] bond_slave_0: left allmulticast mode [ 328.568412][T14233] team0: Port device team_slave_0 removed [ 328.579223][T14233] team0: Port device team_slave_1 removed [ 328.592424][T14233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.601349][T14233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.618403][T14233] team0: Port device geneve0 removed [ 328.633245][T14233] bond0: (slave wlan1): Releasing backup interface [ 328.651178][T14233] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 328.679072][T14233] bond1: (slave vlan3): Releasing active interface [ 328.690668][T14233] veth1: left promiscuous mode [ 328.700487][T14233] bond2: (slave bond3): Releasing backup interface [ 328.710307][T14233] bond3: left promiscuous mode [ 328.720976][T14233] bond5: (slave wireguard0): Releasing backup interface [ 328.729683][T14233] wireguard0: left promiscuous mode [ 328.870135][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 328.926686][T14246] vlan0 (unregistering): left allmulticast mode [ 328.933339][T14246] veth0_vlan (unregistering): left allmulticast mode [ 328.941062][T14246] vlan0 (unregistering): left promiscuous mode [ 329.237529][T14261] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2383'. [ 329.280136][T14262] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2383'. [ 329.408179][T14277] netlink: 'syz.0.2384': attribute type 10 has an invalid length. [ 329.422377][T14277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2384'. [ 329.436197][T14277] geneve0: left allmulticast mode [ 329.447967][T14277] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.494915][T14277] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.515040][T14277] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.549728][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2387'. [ 329.553948][T14277] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.626815][T14277] geneve0: entered allmulticast mode [ 329.634633][T14288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2388'. [ 329.650216][T14277] team0: Port device geneve0 added [ 329.683910][T14284] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 329.864431][T14293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2391'. [ 329.880009][T14297] macvlan0: entered allmulticast mode [ 329.927472][T14297] macvlan0 (unregistering): left allmulticast mode [ 330.028384][T14300] dvmrp0: entered allmulticast mode [ 330.036476][T14303] tipc: Enabling of bearer rejected, media not registered [ 330.077841][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 330.436956][T14323] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 330.445170][T14323] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 330.453043][T14323] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2400'. [ 330.749959][T14339] netlink: 'syz.0.2406': attribute type 1 has an invalid length. [ 331.784427][T14395] netlink: 'syz.4.2420': attribute type 3 has an invalid length. [ 331.832692][T14395] tipc: Invalid UDP bearer configuration [ 331.832751][T14395] tipc: Enabling of bearer rejected, failed to enable media [ 331.873879][T14395] Cannot find del_set index 17 as target [ 332.432249][T14437] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 333.354467][T14489] vlan3: entered promiscuous mode [ 333.404806][T14489] bridge0: entered promiscuous mode [ 333.892311][T14506] __nla_validate_parse: 11 callbacks suppressed [ 333.892330][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 334.213592][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 334.294463][T14520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.295341][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2457'. [ 334.312237][T14526] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 334.331786][T14520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2455'. [ 334.336801][T14526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.475482][T14530] macvlan0: entered promiscuous mode [ 334.491515][T14530] macvlan0: entered allmulticast mode [ 334.510145][T14530] bond6: (slave macvlan0): Opening slave failed [ 334.644083][T14548] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 335.108883][T14575] x_tables: duplicate underflow at hook 1 [ 335.122742][T14577] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000 [ 335.401493][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2479'. [ 335.444006][T14597] tipc: Enabled bearer , priority 0 [ 335.535291][T14597] syzkaller0: entered promiscuous mode [ 335.541246][T14597] syzkaller0: entered allmulticast mode [ 335.551149][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'. [ 335.551664][T14597] tipc: Resetting bearer [ 335.816709][ T3444] tipc: Resetting bearer [ 335.836022][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2482'. [ 336.059420][T14617] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 336.113981][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'. [ 336.160141][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2488'. [ 336.201122][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2488'. [ 336.347424][T14595] tipc: Resetting bearer [ 338.269258][T14595] tipc: Disabling bearer [ 338.282247][T14624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.532714][T14668] netlink: 'syz.3.2500': attribute type 4 has an invalid length. [ 338.661224][ T139] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 338.905384][T14695] __nla_validate_parse: 3 callbacks suppressed [ 338.905402][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'. [ 338.951228][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2509'. [ 339.006217][ T12] vlan2: left promiscuous mode [ 339.018133][T14695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2505'. [ 339.935488][T14742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2519'. [ 339.944491][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 340.461684][T14764] macvtap1: entered allmulticast mode [ 340.475507][T14764] veth0_macvtap: entered allmulticast mode [ 340.722009][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2535'. [ 340.773479][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2535'. [ 340.884653][T14797] ip6gre2: entered allmulticast mode [ 341.019476][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 341.041396][T14810] gtp1: entered promiscuous mode [ 341.064348][T14810] gtp1: entered allmulticast mode [ 341.167999][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'. [ 341.353482][T14825] netlink: 'syz.4.2543': attribute type 27 has an invalid length. [ 341.412920][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2545'. [ 341.585126][T14837] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 341.598152][T14837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.609968][T14839] netlink: 'syz.3.2549': attribute type 7 has an invalid length. [ 341.668105][T14839] : entered promiscuous mode [ 342.121561][T14863] tipc: Enabled bearer , priority 0 [ 342.146981][T14863] syzkaller0: entered promiscuous mode [ 342.153051][T14863] syzkaller0: entered allmulticast mode [ 342.369471][T14867] tipc: Resetting bearer [ 342.443875][T14867] tipc: Disabling bearer [ 342.476599][T14886] batadv0: entered allmulticast mode [ 342.596504][T14892] netlink: 'syz.3.2565': attribute type 20 has an invalid length. [ 342.818261][T14898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.832970][T14898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.972699][T14898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.023629][T14898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.140409][T14898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.176271][T14898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.362414][T14898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.393551][T14926] netlink: 'syz.4.2573': attribute type 11 has an invalid length. [ 343.416197][T14898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.432353][T14926] netlink: 'syz.4.2573': attribute type 11 has an invalid length. [ 343.544767][T14935] netlink: 'syz.0.2575': attribute type 1 has an invalid length. [ 343.699176][T14898] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.746238][T14898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.792401][T14898] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.823623][T14898] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.907161][T14898] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.926626][T14898] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.938990][T14952] __nla_validate_parse: 10 callbacks suppressed [ 343.939008][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 344.002664][T14898] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.012270][T14898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.058505][T14952] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.068518][T14952] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.077951][T14952] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.087300][T14952] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.142733][T14955] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 344.248009][T14964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2585'. [ 344.378385][T14967] netlink: 'syz.4.2586': attribute type 1 has an invalid length. [ 344.426001][T14967] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2586'. [ 344.682747][T14981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2590'. [ 344.835276][T14985] netlink: 'syz.4.2592': attribute type 1 has an invalid length. [ 344.956616][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 345.011967][T15001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2596'. [ 345.035449][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 345.068104][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2592'. [ 345.100240][T14985] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.144470][T15006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2598'. [ 345.148717][T14985] veth13: entered promiscuous mode [ 345.182037][T14985] bond11: (slave veth13): Enslaving as a backup interface with a down link [ 345.195542][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 345.387057][T15016] pimreg: entered allmulticast mode [ 345.408717][T15020] xt_l2tp: missing protocol rule (udp|l2tpip) [ 345.887617][T15051] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 345.906739][T15051] gretap2: entered promiscuous mode [ 345.912877][T15051] gretap2: entered allmulticast mode [ 346.010197][T15057] No such timeout policy "syz0" [ 347.450082][T15092] IPv6: sit1: Disabled Multicast RS [ 347.460600][T15095] RDS: rds_bind could not find a transport for ::ffff:69.220.1.205, load rds_tcp or rds_rdma? [ 347.479219][T15092] sit1: entered allmulticast mode [ 347.956811][T15123] netlink: 'syz.0.2636': attribute type 2 has an invalid length. [ 348.243510][T15139] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 348.432014][T15159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.200394][T15208] __nla_validate_parse: 12 callbacks suppressed [ 349.200412][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 349.244841][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2655'. [ 349.281742][T15208] netlink: 'syz.0.2655': attribute type 14 has an invalid length. [ 349.319008][T15208] netlink: 'syz.0.2655': attribute type 13 has an invalid length. [ 349.462419][T15232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2657'. [ 349.613134][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 366.521005][T15247] netlink: 'syz.4.2665': attribute type 33 has an invalid length. [ 366.531582][T15247] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2665'. [ 366.547513][T15247] netlink: 'syz.4.2665': attribute type 33 has an invalid length. [ 366.571980][T15247] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2665'. [ 366.618284][T15256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2663'. [ 366.683599][T15261] team0: Device vti0 is up. Set it down before adding it as a team port [ 366.903748][T15276] vlan5: entered promiscuous mode [ 366.919501][T15276] vlan5: entered allmulticast mode [ 366.925549][T15276] bridge0: entered allmulticast mode [ 367.039050][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 367.051557][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 367.069363][T15283] netlink: 'syz.1.2671': attribute type 3 has an invalid length. [ 367.104564][T15284] syzkaller0: entered promiscuous mode [ 367.126218][T15284] syzkaller0: entered allmulticast mode [ 367.157930][T15284] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 367.317688][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 367.583802][ T5923] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 367.639354][ T5923] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 367.828436][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 367.836473][T15315] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2681'. [ 367.860413][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 367.893698][T15315] netlink: 'syz.4.2681': attribute type 4 has an invalid length. [ 367.901610][T15315] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2681'. [ 368.027771][T15327] veth1_to_bond: entered allmulticast mode [ 368.243675][T15327] veth1_to_bond (unregistering): left allmulticast mode [ 368.289162][T15337] gre3: entered promiscuous mode [ 368.308935][T15337] gre3: entered allmulticast mode [ 368.568100][T15350] netlink: 'syz.0.2697': attribute type 11 has an invalid length. [ 368.781180][T15362] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 368.827049][T15366] netlink: 'syz.3.2702': attribute type 2 has an invalid length. [ 369.058812][T15373] netlink: 'syz.1.2704': attribute type 4 has an invalid length. [ 369.122768][T15377] geneve0: left allmulticast mode [ 369.171012][T15377] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.184633][T15377] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.198232][T15377] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.209200][T15377] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.240021][T15377] team0: Port device geneve0 removed [ 369.687192][T15411] netlink: 'syz.4.2716': attribute type 2 has an invalid length. [ 369.969501][T15423] netlink: 'syz.2.2720': attribute type 10 has an invalid length. [ 370.009487][T15423] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 370.018560][T15429] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 370.028100][T15423] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 370.043067][T15430] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 371.030728][T15479] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.187120][T15479] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.274038][T15479] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.589677][T15499] bridge6: entered promiscuous mode [ 371.595105][T15499] bridge6: entered allmulticast mode [ 371.661680][T15509] __nla_validate_parse: 34 callbacks suppressed [ 371.661699][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2747'. [ 371.687070][T15479] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.032504][T15479] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.144611][T15479] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.182512][T15532] validate_nla: 2 callbacks suppressed [ 372.182529][T15532] netlink: 'syz.4.2754': attribute type 2 has an invalid length. [ 372.231884][T15479] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.300074][T15479] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.337628][T15548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2756'. [ 372.403786][T15544] bond0: (slave wlan1): Releasing backup interface [ 372.479965][T15544] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 372.734120][T15566] netlink: 'syz.4.2763': attribute type 4 has an invalid length. [ 372.790722][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'. [ 372.821644][T15573] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 372.847352][T15578] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2767'. [ 372.978214][T15583] 8021q: adding VLAN 0 to HW filter on device bond8 [ 372.989854][T15583] bond7: (slave bond8): making interface the new active one [ 372.999097][T15583] bond7: (slave bond8): Enslaving as an active interface with an up link [ 373.058172][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2766'. [ 373.112604][T15573] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 373.132435][T15591] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 373.160435][T15596] netlink: 'syz.0.2770': attribute type 39 has an invalid length. [ 373.173596][T15583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.197529][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.227349][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.249169][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.279419][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.297183][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.309992][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.328564][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.339533][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.380726][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.406888][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.436822][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.453601][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.519081][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.537984][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.544570][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.570746][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.581727][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.592902][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.652545][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.706943][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.740588][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.761341][T15616] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 373.765102][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.778174][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.786015][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.792628][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.795473][T15616] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 373.800717][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.816039][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.823103][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.837678][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.856712][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.877890][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.907139][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 373.933472][T15593] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 374.183030][T15638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2783'. [ 374.309326][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2786'. [ 374.327649][T15643] netlink: 'syz.3.2786': attribute type 7 has an invalid length. [ 374.370717][T15643] netlink: 'syz.3.2786': attribute type 8 has an invalid length. [ 374.388753][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2786'. [ 374.411719][T15648] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 374.427848][T15649] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 374.449867][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'. [ 374.460730][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'. [ 375.214856][ T5867] Bluetooth: hci0: command tx timeout [ 375.669118][ T5944] hid (null): global environment stack underflow [ 375.686103][ T5944] hid (null): unknown global tag 0xe [ 375.711804][ T5944] hid-generic 0005:0B57:000F.0003: reserved main item tag 0xe [ 375.732615][ T5944] hid-generic 0005:0B57:000F.0003: global environment stack underflow [ 375.748697][ T5944] hid-generic 0005:0B57:000F.0003: item 0 1 1 11 parsing failed [ 375.763512][ T5944] hid-generic 0005:0B57:000F.0003: probe with driver hid-generic failed with error -22 [ 376.092873][T15738] chnl_net:caif_netlink_parms(): no params data found [ 376.101467][T15742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 376.267778][T15750] netlink: 'syz.2.2818': attribute type 11 has an invalid length. [ 376.348811][T15745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 376.368908][T15750] netlink: 'syz.2.2818': attribute type 11 has an invalid length. [ 376.411305][T15745] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 376.532599][T15763] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 376.715628][T15770] __nla_validate_parse: 68 callbacks suppressed [ 376.715642][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 376.750587][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 376.838071][T15773] syzkaller0: entered promiscuous mode [ 376.843611][T15773] syzkaller0: entered allmulticast mode [ 376.862763][T15769] vlan3: entered allmulticast mode [ 377.171013][T15790] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2829'. [ 377.189684][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'. [ 377.348513][T15789] gretap0: left promiscuous mode [ 377.360697][T15789] sit0: left promiscuous mode [ 377.407909][T15789] v: left promiscuous mode [ 377.426386][T15789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.443449][T15792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 377.612817][T15805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2835'. [ 379.488908][T15815] tipc: Enabled bearer , priority 0 [ 379.501757][T15825] netlink: 'syz.1.2838': attribute type 2 has an invalid length. [ 379.582126][T15828] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 379.605503][T15817] syzkaller0: entered promiscuous mode [ 379.621381][T15817] syzkaller0: entered allmulticast mode [ 379.641272][T15817] tipc: Resetting bearer [ 379.809500][ T3444] tipc: Resetting bearer [ 379.818511][T15806] tipc: Resetting bearer [ 381.408751][T15806] tipc: Disabling bearer [ 381.610133][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 381.620822][T15853] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2844'. [ 381.641424][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 381.984345][T15879] netlink: 'syz.3.2851': attribute type 21 has an invalid length. [ 382.019551][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 382.116559][T15885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.165755][T15882] netlink: 'syz.0.2852': attribute type 1 has an invalid length. [ 382.173637][T15882] netlink: 'syz.0.2852': attribute type 3 has an invalid length. [ 382.186173][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 382.199604][T15882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2852'. [ 382.481931][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 382.514269][T15902] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.544675][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 382.559120][T15906] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 382.572367][T15902] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.762891][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'. [ 383.052871][T15929] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2864'. [ 383.062142][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 383.270293][T15947] xt_policy: output policy not valid in PREROUTING and INPUT [ 383.324220][T15944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2869'. [ 383.650340][T15964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2879'. [ 383.717048][T15967] netlink: 'syz.3.2880': attribute type 18 has an invalid length. [ 384.539014][T16023] netlink: 'syz.1.2897': attribute type 32 has an invalid length. [ 384.569493][T16023] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 384.920175][T16045] tipc: Enabled bearer , priority 0 [ 384.937295][T16045] syzkaller0: entered promiscuous mode [ 384.959621][T16045] syzkaller0: entered allmulticast mode [ 385.143130][T16044] tipc: Resetting bearer [ 385.198017][T16044] tipc: Disabling bearer [ 385.410469][T16060] syzkaller0: entered promiscuous mode [ 385.419822][T16060] syzkaller0: entered allmulticast mode [ 386.180905][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.204107][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.213790][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.252486][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.262807][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.024416][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.060782][T16107] __nla_validate_parse: 10 callbacks suppressed [ 388.060804][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 388.124397][T16107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2920'. [ 388.167282][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.170315][T16122] netlink: 'syz.4.2924': attribute type 8 has an invalid length. [ 388.321019][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.342561][ T5867] Bluetooth: hci1: command tx timeout [ 388.385678][T16125] netlink: 'syz.4.2924': attribute type 21 has an invalid length. [ 388.404182][T16125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2924'. [ 388.510946][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.639417][T16141] syzkaller0: entered promiscuous mode [ 388.648237][T16141] syzkaller0: entered allmulticast mode [ 388.666895][T16140] tipc: Enabled bearer , priority 0 [ 388.739253][T16144] tipc: Resetting bearer [ 388.782397][T16144] tipc: Disabling bearer [ 388.826743][T16154] syzkaller0: entered promiscuous mode [ 388.834459][T16154] syzkaller0: entered allmulticast mode [ 389.071707][T16085] chnl_net:caif_netlink_parms(): no params data found [ 389.088744][T16164] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2935'. [ 389.102811][T16164] openvswitch: netlink: Actions may not be safe on all matching packets [ 389.336959][T16175] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2938'. [ 390.049948][ T59]  (unregistering): Released all slaves [ 390.170341][ T59] bond1 (unregistering): Released all slaves [ 390.289034][ T59] bond2 (unregistering): Released all slaves [ 390.397220][ T59] bond3 (unregistering): Released all slaves [ 390.410169][ T59] bond0 (unregistering): Released all slaves [ 390.415791][ T5867] Bluetooth: hci1: command tx timeout [ 390.454967][T16174] netlink: 'syz.2.2938': attribute type 4 has an invalid length. [ 390.580998][ T59] : left promiscuous mode [ 390.712602][ T59] tipc: Disabling bearer [ 390.753324][ T59] tipc: Left network mode [ 390.842747][T16204] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 390.937841][T16211] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 390.980654][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 391.078890][T16204] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.099361][T16207] bond12: (slave geneve2): making interface the new active one [ 391.108941][T16207] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 391.191464][T16216] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 391.201134][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 391.241586][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 391.301799][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.317704][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.328922][T16085] bridge_slave_0: entered allmulticast mode [ 391.351580][T16085] bridge_slave_0: entered promiscuous mode [ 391.357338][T16225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2950'. [ 391.386466][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2952'. [ 391.425016][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.437420][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.456120][T16085] bridge_slave_1: entered allmulticast mode [ 391.463925][T16085] bridge_slave_1: entered promiscuous mode [ 391.483787][T16226] delete_channel: no stack [ 391.800291][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.815783][T16247] IPv6: sit1: Disabled Multicast RS [ 391.822088][T16247] sit1: entered allmulticast mode [ 391.858806][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.500038][ T5867] Bluetooth: hci1: command tx timeout [ 392.857068][T16085] team0: Port device team_slave_0 added [ 392.941705][T16085] team0: Port device team_slave_1 added [ 393.093576][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.120285][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.151291][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.174473][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.182466][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.227158][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.289597][T16290] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 393.420296][T16290] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.446084][T16085] hsr_slave_0: entered promiscuous mode [ 393.453337][T16085] hsr_slave_1: entered promiscuous mode [ 393.760766][ T59] IPVS: stop unused estimator thread 0... [ 393.904534][T16325] netlink: 'syz.1.2978': attribute type 11 has an invalid length. [ 393.975538][T16329] netlink: 'syz.1.2978': attribute type 11 has an invalid length. [ 394.030746][T16334] __nla_validate_parse: 2 callbacks suppressed [ 394.030765][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'. [ 394.165025][T16341] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 394.205273][T16341] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 394.359105][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 394.383142][T16343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2985'. [ 394.508258][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2988'. [ 394.575632][ T5867] Bluetooth: hci1: command tx timeout [ 394.641946][T16361] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 394.643152][T16360] IPVS: stopping master sync thread 16361 ... [ 394.820133][T16085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.852687][T16085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.915782][T16085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.970571][T16085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.052114][T16383] netlink: 'syz.4.2993': attribute type 11 has an invalid length. [ 395.189507][T16394] netlink: 'syz.2.2995': attribute type 2 has an invalid length. [ 395.237488][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'. [ 395.341579][T16085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.354922][T16403] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 395.387562][T16402] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 395.407789][T16404] netlink: 'syz.3.2997': attribute type 1 has an invalid length. [ 395.440889][T16085] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.456891][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.464173][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.548642][T16408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3000'. [ 395.572707][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.580169][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.594399][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 395.656410][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'. [ 395.668287][T16420] validate_nla: 2 callbacks suppressed [ 395.668305][T16420] netlink: 'syz.3.3001': attribute type 10 has an invalid length. [ 395.677016][T16411] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 395.711102][T16411] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3002'. [ 395.755930][T16411] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 396.329923][T16452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3010'. [ 396.349181][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.446849][T16085] veth0_vlan: entered promiscuous mode [ 396.491351][T16085] veth1_vlan: entered promiscuous mode [ 396.603545][T16085] veth0_macvtap: entered promiscuous mode [ 396.616529][T16085] veth1_macvtap: entered promiscuous mode [ 396.639701][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.679361][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.699048][T16085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.711685][T16085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.736445][T16085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.750869][T16085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.946235][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.966628][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.032448][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.064999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.353326][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.364562][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.373497][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.383540][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.393362][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.411529][T16526] tc_dump_action: action bad kind [ 398.685673][T16546] netlink: 'syz.4.3034': attribute type 75 has an invalid length. [ 398.897076][ T3516] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.912372][ T3516] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.100271][ T3516] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.121316][ T3516] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.158461][T16570] __nla_validate_parse: 37 callbacks suppressed [ 399.158480][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3042'. [ 399.204057][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3043'. [ 399.204230][T16575] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3044'. [ 399.223985][T16575] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 399.227947][ T3516] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.260705][T16576] netlink: 'syz.4.3043': attribute type 10 has an invalid length. [ 399.275422][ T3516] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.305150][T16577] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3044'. [ 399.326335][T16577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 399.349721][T16576] veth0_vlan: entered allmulticast mode [ 399.414010][T16576] veth0_vlan: left promiscuous mode [ 399.422822][T16576] veth0_vlan: entered promiscuous mode [ 399.448347][T16576] team0: Device veth0_vlan failed to register rx_handler [ 399.491688][T16579] : entered promiscuous mode [ 399.519291][ T3516] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.549837][ T3516] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.612209][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 399.613947][T16533] chnl_net:caif_netlink_parms(): no params data found [ 399.952226][T16606] bond0: entered allmulticast mode [ 399.969225][T16606] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 400.099839][ T5937] hid-generic 0005:0458:0009.0004: item fetching failed at offset 0/1 [ 400.119110][T16533] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.125760][ T5937] hid-generic 0005:0458:0009.0004: probe with driver hid-generic failed with error -22 [ 400.150247][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.157799][T16533] bridge_slave_0: entered allmulticast mode [ 400.166014][T16533] bridge_slave_0: entered promiscuous mode [ 400.177787][T16533] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.188490][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.195993][T16533] bridge_slave_1: entered allmulticast mode [ 400.204578][T16533] bridge_slave_1: entered promiscuous mode [ 400.421512][ T5858] Bluetooth: hci4: command tx timeout [ 400.458257][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3057'. [ 400.544674][T16533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.599676][T16533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.666757][ T3516] tipc: Resetting bearer [ 400.902080][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 401.202305][ T5923] IPVS: starting estimator thread 0... [ 401.241467][ T3516] tipc: Disabling bearer [ 401.253033][T16663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3067'. [ 401.306430][T16661] IPVS: using max 49 ests per chain, 117600 per kthread [ 401.341197][T16664] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3067'. [ 401.932506][ T3516] bond0 (unregistering): Released all slaves [ 402.057178][ T3516] bond1 (unregistering): Released all slaves [ 402.177359][ T3516] bond2 (unregistering): Released all slaves [ 402.297935][ T3516] bond3 (unregistering): Released all slaves [ 402.312619][ T3516] bond4 (unregistering): Released all slaves [ 402.438743][ T3516] bond5 (unregistering): Released all slaves [ 402.504751][ T5858] Bluetooth: hci4: command tx timeout [ 402.574059][ T3516] bond6 (unregistering): Released all slaves [ 402.819311][T16533] team0: Port device team_slave_0 added [ 402.850175][ T3516] tipc: Left network mode [ 402.855425][T16533] team0: Port device team_slave_1 added [ 402.933245][ T3516] IPVS: stopping backup sync thread 7277 ... [ 403.048373][T16533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.107427][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.144193][T16533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.182681][T16533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.199549][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.227981][T16533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.248214][T16682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.364333][T16691] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3077'. [ 403.490360][T16533] hsr_slave_0: entered promiscuous mode [ 403.499482][T16533] hsr_slave_1: entered promiscuous mode [ 403.511277][T16533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.521603][T16533] Cannot create hsr debugfs directory [ 403.596000][T16699] netlink: 'syz.4.3079': attribute type 21 has an invalid length. [ 404.251590][ T3516] veth1_macvtap: left promiscuous mode [ 404.295649][ T30] audit: type=1800 audit(1753897653.153:2): pid=16730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3089" name="memory.events" dev="tmpfs" ino=3089 res=0 errno=0 [ 404.330440][ T30] audit: type=1804 audit(1753897653.193:3): pid=16730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3089" name="/newroot/604/memory.events" dev="tmpfs" ino=3089 res=1 errno=0 [ 404.410495][T16733] __nla_validate_parse: 2 callbacks suppressed [ 404.410513][T16733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3090'. [ 404.582431][ T5858] Bluetooth: hci4: command tx timeout [ 405.303922][T16759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3093'. [ 405.442709][T16764] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3097'. [ 405.479190][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'. [ 405.493425][T16764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.509387][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'. [ 405.547099][T16766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3098'. [ 405.628710][T16764] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 405.760291][T16775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.767738][T16775] IPv6: NLM_F_CREATE should be set when creating new route [ 405.796479][T16775] C: entered allmulticast mode [ 405.825446][T16775] tunl0: entered allmulticast mode [ 405.843633][T16775] gre0: entered allmulticast mode [ 405.908010][T16775] erspan0: entered allmulticast mode [ 405.949547][T16775] ip_vti0: entered allmulticast mode [ 405.957266][T16775] ip6_vti0: entered allmulticast mode [ 405.970201][T16775] sit0: entered allmulticast mode [ 405.998170][T16775] ip6tnl0: entered allmulticast mode [ 406.007440][T16775] ip6gre0: entered allmulticast mode [ 406.016649][T16775] syz_tun: entered allmulticast mode [ 406.028555][T16775] ip6gretap0: entered allmulticast mode [ 406.039807][T16775] bridge0: entered allmulticast mode [ 406.050323][T16775] v: entered allmulticast mode [ 406.059773][T16775] nlmon0: entered allmulticast mode [ 406.067202][T16775] caif0: entered allmulticast mode [ 406.073020][T16775] batadv0: entered allmulticast mode [ 406.081845][T16775] vxcan0: entered allmulticast mode [ 406.089756][T16775] vxcan1: entered allmulticast mode [ 406.097589][T16775] veth0: entered allmulticast mode [ 406.111008][T16775] wg0: entered allmulticast mode [ 406.119612][T16775] wg1: entered allmulticast mode [ 406.128702][T16775] wg2: entered allmulticast mode [ 406.138287][T16775] veth0_to_bridge: entered allmulticast mode [ 406.149576][T16775] bridge_slave_0: entered allmulticast mode [ 406.157972][T16775] veth1_to_bridge: entered allmulticast mode [ 406.169681][T16775] bridge_slave_1: entered allmulticast mode [ 406.178355][T16775] veth0_to_bond: entered allmulticast mode [ 406.188196][T16775] bond_slave_0: entered allmulticast mode [ 406.194549][T16775] veth0_to_team: entered allmulticast mode [ 406.203041][T16775] team_slave_0: entered allmulticast mode [ 406.209905][T16775] veth1_to_team: entered allmulticast mode [ 406.220324][T16775] team_slave_1: entered allmulticast mode [ 406.228121][T16775] veth0_to_batadv: entered allmulticast mode [ 406.240550][T16775] batadv_slave_0: entered allmulticast mode [ 406.249544][T16775] veth1_to_batadv: entered allmulticast mode [ 406.260571][T16775] batadv_slave_1: entered allmulticast mode [ 406.269819][T16775] xfrm0: entered allmulticast mode [ 406.281681][T16775] veth0_to_hsr: entered allmulticast mode [ 406.290765][T16775] hsr_slave_0: entered allmulticast mode [ 406.300456][T16775] veth1_to_hsr: entered allmulticast mode [ 406.308649][T16775] hsr_slave_1: entered allmulticast mode [ 406.320232][T16775] hsr0: entered allmulticast mode [ 406.328619][T16775] veth1_virt_wifi: entered allmulticast mode [ 406.340568][T16775] veth0_virt_wifi: entered allmulticast mode [ 406.350696][T16775] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 406.359886][T16775] veth1_vlan: entered allmulticast mode [ 406.368630][T16775] veth0_vlan: entered allmulticast mode [ 406.378545][T16775] vlan0: left promiscuous mode [ 406.383582][T16775] vlan0: entered allmulticast mode [ 406.390053][T16775] vlan1: entered allmulticast mode [ 406.399523][T16775] macvlan0: entered allmulticast mode [ 406.407792][T16775] macvlan1: entered allmulticast mode [ 406.417145][T16775] ipvlan0: entered allmulticast mode [ 406.423137][T16775] ipvlan1: entered allmulticast mode [ 406.428928][T16775] veth1_macvtap: entered allmulticast mode [ 406.437248][T16775] veth0_macvtap: entered allmulticast mode [ 406.446379][T16775] macvtap0: entered allmulticast mode [ 406.454432][T16775] macsec0: entered allmulticast mode [ 406.464305][T16775] geneve0: entered allmulticast mode [ 406.470414][T16775] geneve1: entered allmulticast mode [ 406.483579][T16775] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 406.491285][T16775] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 406.500097][T16775] erspan1: entered allmulticast mode [ 406.506133][T16775] gretap1: entered allmulticast mode [ 406.511637][T16775] veth2: entered allmulticast mode [ 406.519236][T16775] veth3: entered allmulticast mode [ 406.527180][T16775] syztnl0: entered allmulticast mode [ 406.532711][T16775] ip6gretap1: entered allmulticast mode [ 406.540120][T16775] bond1: entered allmulticast mode [ 406.547263][T16775] mac80211_hwsim hwsim18 wlan4: entered allmulticast mode [ 406.556544][T16775] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.566096][T16775] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.574549][T16775] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.583667][T16775] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.592534][T16775] geneve2: entered allmulticast mode [ 406.601695][T16775] bond2: entered allmulticast mode [ 406.607649][T16775] veth4: entered allmulticast mode [ 406.613185][T16775] veth6: entered allmulticast mode [ 406.618696][T16775] veth7: entered allmulticast mode [ 406.624623][T16775] bridge1: entered allmulticast mode [ 406.638855][T16775] ip6tnl1: entered allmulticast mode [ 406.646300][T16775] bridge2: entered allmulticast mode [ 406.653868][T16775] macsec1: entered allmulticast mode [ 406.655625][ T5858] Bluetooth: hci4: command tx timeout [ 406.666785][T16775] mac80211_hwsim hwsim23 wlan5: entered allmulticast mode [ 406.674291][T16775] mac80211_hwsim hwsim24 wlan6: entered allmulticast mode [ 406.682189][T16775] gtp0: entered allmulticast mode [ 406.687901][T16775] bridge3: entered allmulticast mode [ 406.693475][T16775] veth8: entered allmulticast mode [ 406.699607][T16775] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 406.708010][T16775] macvlan2: entered allmulticast mode [ 406.715561][T16775] bridge4: entered allmulticast mode [ 406.721580][T16775] bridge5: entered allmulticast mode [ 406.730292][T16775] veth10: entered allmulticast mode [ 406.736746][T16775] veth11: entered allmulticast mode [ 406.742188][T16775] macvlan3: entered allmulticast mode [ 406.747972][T16775] vxlan0: entered allmulticast mode [ 406.753496][T16775] ip6tnl2: entered allmulticast mode [ 406.759573][T16775] netdevsim netdevsim1 eth0: entered allmulticast mode [ 406.766905][T16775] netdevsim netdevsim1 eth1: entered allmulticast mode [ 406.773923][T16775] netdevsim netdevsim1 eth2: entered allmulticast mode [ 406.781135][T16775] netdevsim netdevsim1 eth3: entered allmulticast mode [ 406.789972][T16775] gre1: entered allmulticast mode [ 406.795863][T16775] veth12: entered allmulticast mode [ 406.801462][T16775] ipip0: entered allmulticast mode [ 406.806955][T16775] xfrm1: left promiscuous mode [ 406.812456][T16775] bond3: entered allmulticast mode [ 406.819396][T16775] bond4: entered allmulticast mode [ 406.825139][T16775] bond5: entered allmulticast mode [ 406.830867][T16775] gtp1: left promiscuous mode [ 406.838012][T16775] sit1: entered allmulticast mode [ 406.858415][T16775] vlan4: entered allmulticast mode [ 406.864391][T16775] bridge6: entered allmulticast mode [ 406.871509][T16775] ip6tnl3: entered allmulticast mode [ 406.878240][T16775] bridge7: entered allmulticast mode [ 406.883666][T16775] gre2: entered allmulticast mode [ 406.890755][T16775] ipvlan2: entered allmulticast mode [ 406.899129][T16775] bridge8: entered allmulticast mode [ 406.904876][T16775] bridge9: entered allmulticast mode [ 406.910403][T16775] : entered allmulticast mode [ 406.920304][ T3516] IPVS: stop unused estimator thread 0... [ 406.956751][T16785] bridge_slave_0: left allmulticast mode [ 406.963728][T16785] bridge_slave_0: left promiscuous mode [ 406.973729][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.020147][T16785] bridge_slave_1: left allmulticast mode [ 407.040169][T16785] bridge_slave_1: left promiscuous mode [ 407.060419][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.086636][T16785] bond0: (slave bond_slave_0): Releasing backup interface [ 407.101390][T16785] bond0: (slave bond_slave_1): Releasing backup interface [ 407.131530][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'. [ 407.166833][T16785] team0: Port device team_slave_0 removed [ 407.181356][T16785] team0: Port device team_slave_1 removed [ 407.188313][T16785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.196201][T16785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.205787][T16785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.213345][T16785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.236334][T16786] team0: Mode changed to "activebackup" [ 407.251130][T16787] vlan0: entered promiscuous mode [ 407.270371][T16787] team0: Port device vlan0 added [ 407.402863][T16804] netlink: 'syz.3.3106': attribute type 10 has an invalid length. [ 407.536002][T16804] bridge0: entered allmulticast mode [ 407.579430][T16533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.670120][T16533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.719717][T16816] netlink: 'syz.1.3110': attribute type 3 has an invalid length. [ 407.733208][T16816] netlink: 'syz.1.3110': attribute type 3 has an invalid length. [ 407.748618][T16533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.763112][T16533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.763603][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3112'. [ 407.847844][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3112'. [ 407.930978][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 408.113928][T16533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.133322][T16845] syz.1.3118: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.163400][T16533] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.204110][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.211312][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.213603][T16845] CPU: 0 UID: 0 PID: 16845 Comm: syz.1.3118 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 408.213631][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.213647][T16845] Call Trace: [ 408.213657][T16845] [ 408.213668][T16845] dump_stack_lvl+0x189/0x250 [ 408.213697][T16845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.213718][T16845] ? __pfx__printk+0x10/0x10 [ 408.213739][T16845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.213763][T16845] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.213786][T16845] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 408.213810][T16845] warn_alloc+0x214/0x310 [ 408.213826][T16845] ? stack_depot_save_flags+0x40/0x900 [ 408.213850][T16845] ? __pfx_warn_alloc+0x10/0x10 [ 408.213869][T16845] ? kasan_save_track+0x4f/0x80 [ 408.213891][T16845] ? xskq_create+0x56/0x170 [ 408.213908][T16845] ? xsk_init_queue+0xb0/0x110 [ 408.213923][T16845] ? xsk_setsockopt+0x43f/0x710 [ 408.213937][T16845] ? do_sock_setsockopt+0x17c/0x1b0 [ 408.213960][T16845] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 408.213981][T16845] ? do_syscall_64+0xfa/0x3b0 [ 408.213998][T16845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.214023][T16845] __vmalloc_node_range_noprof+0x125/0x12f0 [ 408.214078][T16845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.214107][T16845] ? __kasan_kmalloc+0x93/0xb0 [ 408.214131][T16845] vmalloc_user_noprof+0xad/0xf0 [ 408.214155][T16845] ? xskq_create+0xbf/0x170 [ 408.214173][T16845] xskq_create+0xbf/0x170 [ 408.214201][T16845] xsk_init_queue+0xb0/0x110 [ 408.214222][T16845] xsk_setsockopt+0x43f/0x710 [ 408.214242][T16845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.214262][T16845] ? __fget_files+0x2a/0x420 [ 408.214278][T16845] ? aa_sock_opt_perm+0x74/0x110 [ 408.214300][T16845] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.214318][T16845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.214337][T16845] do_sock_setsockopt+0x17c/0x1b0 [ 408.214367][T16845] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.214395][T16845] do_syscall_64+0xfa/0x3b0 [ 408.214413][T16845] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.214431][T16845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.214447][T16845] ? clear_bhb_loop+0x60/0xb0 [ 408.214468][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.214488][T16845] RIP: 0033:0x7f847a38e9a9 [ 408.214505][T16845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.214519][T16845] RSP: 002b:00007f847b1eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.214539][T16845] RAX: ffffffffffffffda RBX: 00007f847a5b5fa0 RCX: 00007f847a38e9a9 [ 408.214551][T16845] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 408.214562][T16845] RBP: 00007f847a410d69 R08: 0000000000000004 R09: 0000000000000000 [ 408.214574][T16845] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.214585][T16845] R13: 0000000000000000 R14: 00007f847a5b5fa0 R15: 00007ffde3529d58 [ 408.214616][T16845] [ 408.214626][T16845] Mem-Info: [ 408.274163][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.361443][T16845] active_anon:4480 inactive_anon:0 isolated_anon:0 [ 408.361443][T16845] active_file:1381 inactive_file:39961 isolated_file:0 [ 408.361443][T16845] unevictable:768 dirty:76 writeback:0 [ 408.361443][T16845] slab_reclaimable:11335 slab_unreclaimable:122656 [ 408.361443][T16845] mapped:29070 shmem:1374 pagetables:976 [ 408.361443][T16845] sec_pagetables:0 bounce:0 [ 408.361443][T16845] kernel_misc_reclaimable:0 [ 408.361443][T16845] free:1305097 free_pcp:12176 free_cma:0 [ 408.361683][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.374995][T16845] Node 0 active_anon:17920kB inactive_anon:0kB active_file:5524kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116280kB dirty:300kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12376kB pagetables:3764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.629139][T16859] bridge_slave_1: left allmulticast mode [ 408.660346][T16859] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 408.715094][T16845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 408.794458][T16845] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.913693][T16845] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 408.949277][T16845] Node 0 DMA32 free:1299180kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17876kB inactive_anon:0kB active_file:5524kB inactive_file:158064kB unevictable:1536kB writepending:296kB present:3129332kB managed:2558488kB mlocked:0kB bounce:0kB free_pcp:34360kB local_pcp:20924kB free_cma:0kB [ 409.035077][T16845] lowmem_reserve[]: 0 0 1 1 1 [ 409.074784][T16845] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 409.158377][T16845] lowmem_reserve[]: 0 0 0 0 0 [ 409.163189][T16845] Node 1 Normal free:3906348kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14336kB local_pcp:6400kB free_cma:0kB [ 409.285715][T16845] lowmem_reserve[]: 0 0 0 0 0 [ 409.291446][T16845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.307909][T16845] Node 0 DMA32: 661*4kB (ME) 299*8kB (UM) 176*16kB (UM) 132*32kB (UME) 60*64kB (UM) 16*128kB (UM) 99*256kB (UME) 61*512kB (UM) 28*1024kB (U) 6*2048kB (UME) 289*4096kB (UM) = 1299244kB [ 409.353974][T16845] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 409.408867][T16845] Node 1 Normal: 165*4kB (UM) 49*8kB (UME) 39*16kB (UME) 135*32kB (UME) 31*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3906348kB [ 409.494901][T16845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.524512][T16845] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.534479][T16845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.546742][T16845] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.556589][T16845] 42713 total pagecache pages [ 409.562541][T16845] 0 pages in swap cache [ 409.574580][T16845] Free swap = 124996kB [ 409.587129][T16845] Total swap = 124996kB [ 409.591346][T16845] 2097051 pages RAM [ 409.598234][T16533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.612517][T16845] 0 pages HighMem/MovableOnly [ 409.627032][T16845] 425387 pages reserved [ 409.631343][T16845] 0 pages cma reserved [ 409.890896][T16912] netlink: 'syz.4.3134': attribute type 3 has an invalid length. [ 409.902331][T16912] __nla_validate_parse: 1 callbacks suppressed [ 409.902348][T16912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3134'. [ 409.943088][T16533] veth0_vlan: entered promiscuous mode [ 409.996565][T16533] veth1_vlan: entered promiscuous mode [ 410.131731][T16533] veth0_macvtap: entered promiscuous mode [ 410.156756][T16533] veth1_macvtap: entered promiscuous mode [ 410.250387][T16533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.268819][T16930] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3138'. [ 410.285961][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 410.294241][T16533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.329961][T16533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.344107][T16929] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3138'. [ 410.363728][T16533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.373320][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 410.382480][T16533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.393038][T16533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.589967][T16941] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3143'. [ 410.594539][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.608852][T16941] nbd: illegal input index -8454144 [ 410.617383][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.683655][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.714752][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.811314][T16950] ipt_ECN: cannot use operation on non-tcp rule [ 411.169275][T16970] team0: Device vti0 is of different type [ 411.262858][T16976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3154'. [ 411.345617][T16975] delete_channel: no stack [ 411.580698][T16984] netlink: 'syz.2.3157': attribute type 13 has an invalid length. [ 411.626565][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 411.801526][T16984] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.811543][T16984] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.820799][T16984] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.830177][T16984] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.871372][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 411.882667][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 411.893288][T16997] xt_TCPMSS: Only works on TCP SYN packets [ 411.908598][T16984] netlink: 'syz.2.3157': attribute type 13 has an invalid length. [ 411.912386][T16995] netlink: 'syz.4.3160': attribute type 1 has an invalid length. [ 411.917480][T17000] netlink: 'syz.0.3162': attribute type 11 has an invalid length. [ 411.988971][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.005564][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.016054][T17002] delete_channel: no stack [ 412.016319][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.045529][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.057142][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.213482][T17012] netlink: 'syz.3.3164': attribute type 21 has an invalid length. [ 412.335771][ T5858] Bluetooth: hci4: command tx timeout [ 412.409990][T10330] IPVS: starting estimator thread 0... [ 412.436192][T17004] chnl_net:caif_netlink_parms(): no params data found [ 412.438340][T17027] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20004 [ 412.545136][T17024] IPVS: using max 27 ests per chain, 64800 per kthread [ 412.558229][T17032] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 412.642611][T17033] gretap1: entered promiscuous mode [ 412.687286][T17043] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 412.942458][T17060] gtp0: entered promiscuous mode [ 412.952828][T17060] gtp0: entered allmulticast mode [ 412.980498][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.990102][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.999065][T17004] bridge_slave_0: entered allmulticast mode [ 413.008438][T17004] bridge_slave_0: entered promiscuous mode [ 413.017869][T17004] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.027132][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.034482][T17004] bridge_slave_1: entered allmulticast mode [ 413.042837][T17004] bridge_slave_1: entered promiscuous mode [ 413.064901][T17067] tipc: Enabling of bearer rejected, failed to enable media [ 413.314968][T17004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.353907][T17004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.403596][T17082] sctp: [Deprecated]: syz.3.3181 (pid 17082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.403596][T17082] Use struct sctp_sack_info instead [ 413.511868][T17004] team0: Port device team_slave_0 added [ 413.589126][T17004] team0: Port device team_slave_1 added [ 413.816306][T17004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.824954][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.854396][T17004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.083450][T17004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.095250][ T5858] Bluetooth: hci3: command tx timeout [ 414.124836][T17004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.141632][T17109] Bluetooth: MGMT ver 1.23 [ 414.190229][T17004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.329654][T17004] hsr_slave_0: entered promiscuous mode [ 414.351959][T17004] hsr_slave_1: entered promiscuous mode [ 414.366438][T17004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.383579][T17004] Cannot create hsr debugfs directory [ 414.729395][T17131] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 415.687191][T17171] syzkaller0: entered promiscuous mode [ 415.692771][T17171] syzkaller0: entered allmulticast mode [ 416.176500][ T5858] Bluetooth: hci3: command tx timeout [ 416.282858][T17004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.328529][T17004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.432068][T17004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.444230][T17178] netlink: 'syz.4.3211': attribute type 22 has an invalid length. [ 416.454642][T17004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.479804][T17178] __nla_validate_parse: 11 callbacks suppressed [ 416.479825][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 416.637215][T17178] netlink: 'syz.4.3211': attribute type 22 has an invalid length. [ 416.665383][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3211'. [ 416.920742][T17205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3218'. [ 416.941609][T17004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.987428][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 416.996085][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 417.011320][T17004] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.039638][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.046885][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.137475][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.144686][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.208982][T17213] tipc: Enabled bearer , priority 0 [ 417.222173][T17214] syzkaller0: entered promiscuous mode [ 417.237293][T17214] syzkaller0: entered allmulticast mode [ 417.375755][T17214] tipc: Resetting bearer [ 417.423660][T17214] tipc: Disabling bearer [ 418.160283][T17004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.258198][ T5858] Bluetooth: hci3: command tx timeout [ 418.324432][T17004] veth0_vlan: entered promiscuous mode [ 418.354261][T17004] veth1_vlan: entered promiscuous mode [ 418.369935][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 418.435013][T17004] veth0_macvtap: entered promiscuous mode [ 418.435822][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 418.458711][T17004] veth1_macvtap: entered promiscuous mode [ 418.503776][T17274] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3238'. [ 418.523293][T17274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3238'. [ 418.568213][T17004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.627448][T17004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.648563][T17284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 418.657600][T17004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.657635][T17004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.657659][T17004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.657681][T17004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.677609][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 418.946454][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.970496][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.091593][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.111032][T17296] netlink: 'syz.4.3244': attribute type 4 has an invalid length. [ 419.169178][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.422607][T17314] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 419.451744][T17318] netem: change failed [ 419.820456][T17330] netlink: 'syz.2.3252': attribute type 10 has an invalid length. [ 419.906130][T17338] geneve2: entered promiscuous mode [ 419.933430][T17338] geneve2: entered allmulticast mode [ 420.008993][T17342] erspan0: entered allmulticast mode [ 420.260085][T17352] netlink: 'syz.3.3257': attribute type 6 has an invalid length. [ 420.344852][ T5858] Bluetooth: hci3: command tx timeout [ 420.739192][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.768068][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.778370][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.791907][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.804889][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.169598][ T3444] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.184172][ T3444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.432089][ T3444] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.465036][ T3444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.661350][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.669163][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.796280][T17412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.812760][T17412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.061627][T17412] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.071824][T17412] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.080861][T17412] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.092211][T17412] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.116879][ T3444] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.134931][ T3444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.183861][T17422] tipc: Started in network mode [ 422.194014][T17422] tipc: Node identity aeac29d3fe22, cluster identity 4711 [ 422.208033][T17422] tipc: Enabled bearer , priority 0 [ 422.217020][T17423] syzkaller0: entered promiscuous mode [ 422.222629][T17423] syzkaller0: entered allmulticast mode [ 422.289956][ T3444] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.312170][ T3444] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.399722][T17427] tipc: Resetting bearer [ 422.461050][T17427] tipc: Disabling bearer [ 422.734185][T17458] tipc: Started in network mode [ 422.756390][T17458] tipc: Node identity a2f0720aefcf, cluster identity 4711 [ 422.777154][T17464] netlink: 'syz.3.3278': attribute type 2 has an invalid length. [ 422.801167][T17464] __nla_validate_parse: 9 callbacks suppressed [ 422.801185][T17464] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3278'. [ 422.818736][T17458] tipc: Enabled bearer , priority 0 [ 422.835909][T17461] netlink: 'syz.2.3280': attribute type 4 has an invalid length. [ 422.901225][T17451] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 422.910962][ T5858] Bluetooth: hci2: command tx timeout [ 422.932433][T17375] chnl_net:caif_netlink_parms(): no params data found [ 422.959600][T17455] tipc: Disabling bearer [ 423.861942][ T3444] dvmrp0 (unregistering): left allmulticast mode [ 423.894360][ T3444] bond12 (unregistering): (slave geneve2): Releasing active interface [ 424.550973][ T3444] bond1 (unregistering): Released all slaves [ 424.664274][ T3444] bond2 (unregistering): Released all slaves [ 424.678805][ T3444] bond3 (unregistering): Released all slaves [ 424.793419][ T3444] bond4 (unregistering): Released all slaves [ 424.808934][ T3444] bond5 (unregistering): Released all slaves [ 424.942127][ T3444] bond6 (unregistering): Released all slaves [ 424.982837][ T5858] Bluetooth: hci2: command tx timeout [ 425.068841][ T3444] bond7 (unregistering): Released all slaves [ 425.198755][ T3444] bond8 (unregistering): (slave veth9): Releasing backup interface [ 425.209181][ T3444] bond8 (unregistering): Released all slaves [ 425.341697][ T3444] bond9 (unregistering): Released all slaves [ 425.354863][ T3444] bond0 (unregistering): Released all slaves [ 425.481381][ T3444] bond10 (unregistering): (slave veth11): Releasing active interface [ 425.489938][ T3444] vlan2: entered promiscuous mode [ 425.499610][ T3444] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 425.512718][ T3444] bond10 (unregistering): (slave vlan2): Releasing active interface [ 425.523479][ T3444] bond10 (unregistering): Released all slaves [ 425.650653][ T3444] bond11 (unregistering): (slave veth13): Releasing backup interface [ 425.660581][ T3444] bond11 (unregistering): Released all slaves [ 425.798362][ T3444] bond12 (unregistering): Released all slaves [ 425.917228][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.941042][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.960057][T17375] bridge_slave_0: entered allmulticast mode [ 425.969402][T17375] bridge_slave_0: entered promiscuous mode [ 425.979324][T17494] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 426.008767][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.028471][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.037944][T17375] bridge_slave_1: entered allmulticast mode [ 426.046156][T17375] bridge_slave_1: entered promiscuous mode [ 426.172285][T17375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.193459][ T3444] tipc: Left network mode [ 426.201244][T17375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.369940][T17375] team0: Port device team_slave_0 added [ 426.444670][T17375] team0: Port device team_slave_1 added [ 426.454047][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'. [ 426.506546][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 426.545547][T17375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.555538][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.583669][T17375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.619661][T17375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.627134][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.653683][T17375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.805054][T17521] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 426.865861][T17375] hsr_slave_0: entered promiscuous mode [ 426.875936][T17375] hsr_slave_1: entered promiscuous mode [ 426.893369][T17375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.916931][T17375] Cannot create hsr debugfs directory [ 426.972017][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3298'. [ 427.054932][ T5858] Bluetooth: hci2: command tx timeout [ 427.363616][ T3444] hsr_slave_0: left promiscuous mode [ 427.388569][ T3444] hsr_slave_1: left promiscuous mode [ 427.446317][ T3444] veth0_macvtap: left allmulticast mode [ 427.458914][ T3444] veth1_macvtap: left promiscuous mode [ 427.465005][ T3444] veth0_macvtap: left promiscuous mode [ 427.472238][ T3444] veth1_vlan: left promiscuous mode [ 427.600707][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 427.645245][T17567] netlink: 'syz.0.3304': attribute type 26 has an invalid length. [ 427.705839][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 428.069724][ T3444] pim6reg527 (unregistering): left allmulticast mode [ 429.035919][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 429.065668][T17567] netlink: 'syz.0.3304': attribute type 26 has an invalid length. [ 429.085211][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 429.136823][ T5858] Bluetooth: hci2: command tx timeout [ 429.278939][T17583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3310'. [ 429.443062][T17590] netlink: 'syz.0.3312': attribute type 5 has an invalid length. [ 429.457482][T17590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3312'. [ 429.611327][ T3444] IPVS: stop unused estimator thread 0... [ 429.737994][T17598] netlink: zone id is out of range [ 429.743423][T17598] netlink: zone id is out of range [ 429.752852][T17598] netlink: zone id is out of range [ 429.758439][T17598] netlink: zone id is out of range [ 429.769944][T17598] netlink: zone id is out of range [ 429.779790][T17598] netlink: zone id is out of range [ 429.785332][T17598] netlink: zone id is out of range [ 429.791833][T17598] netlink: zone id is out of range [ 429.798456][T17599] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3315'. [ 429.811986][T17598] netlink: zone id is out of range [ 429.817563][T17598] netlink: zone id is out of range [ 429.876592][T17375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.889953][T17375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.902155][T17375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.913897][T17375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 430.032655][T17375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.072883][T17375] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.112865][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.120116][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.170740][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.178073][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.719445][T17627] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 430.727864][T17375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.808676][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 430.824502][T17627] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 430.871699][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3320'. [ 431.340930][T17375] veth0_vlan: entered promiscuous mode [ 431.361630][T17375] veth1_vlan: entered promiscuous mode [ 431.461162][T17663] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 431.563529][T17375] veth0_macvtap: entered promiscuous mode [ 431.597591][T17375] veth1_macvtap: entered promiscuous mode [ 431.668032][T17375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.689181][T17375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.723570][T17375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.743257][T17375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.753209][T17375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.762943][T17375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.939715][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.958866][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.993505][T17686] netlink: 'syz.2.3335': attribute type 4 has an invalid length. [ 432.002306][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.004407][T17686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3335'. [ 432.011143][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.024087][T17686] netlink: 'syz.2.3335': attribute type 7 has an invalid length. [ 432.335944][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 432.770315][T17717] tipc: Enabling of bearer rejected, failed to enable media [ 432.929928][T17717] netlink: 'syz.1.3346': attribute type 5 has an invalid length. [ 433.131565][T17730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3352'. [ 433.247835][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 433.261532][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 433.270928][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 433.304747][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 433.322128][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.680423][T17752] tipc: Enabled bearer , priority 0 [ 433.836632][T17752] tipc: Disabling bearer [ 434.012167][T17734] chnl_net:caif_netlink_parms(): no params data found [ 434.017684][ T5944] IPVS: starting estimator thread 0... [ 434.045487][T17774] netlink: 'syz.4.3365': attribute type 4 has an invalid length. [ 434.062194][T17774] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 434.082627][T17770] __nla_validate_parse: 1 callbacks suppressed [ 434.082645][T17770] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3364'. [ 434.118000][T17775] IPVS: using max 37 ests per chain, 88800 per kthread [ 434.195596][T17782] netlink: 'syz.0.3367': attribute type 21 has an invalid length. [ 434.258968][T17782] netlink: 'syz.0.3367': attribute type 6 has an invalid length. [ 434.277986][T17792] netlink: 'syz.2.3369': attribute type 1 has an invalid length. [ 434.280836][T17782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3367'. [ 434.461088][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.476071][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.485980][T17734] bridge_slave_0: entered allmulticast mode [ 434.493943][T17734] bridge_slave_0: entered promiscuous mode [ 434.513346][T17802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3370'. [ 434.531212][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.539055][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.551246][T17734] bridge_slave_1: entered allmulticast mode [ 434.564688][T17734] bridge_slave_1: entered promiscuous mode [ 434.617458][T17809] tipc: Enabled bearer , priority 0 [ 434.670708][T17809] syzkaller0: entered promiscuous mode [ 434.680627][T17809] syzkaller0: entered allmulticast mode [ 434.699276][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.745596][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.762569][T17809] net_ratelimit: 17 callbacks suppressed [ 434.762590][T17809] syzkaller0: mtu less than device minimum [ 434.852342][T17817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3375'. [ 434.900960][T17734] team0: Port device team_slave_0 added [ 434.912709][T17734] team0: Port device team_slave_1 added [ 435.033111][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.066740][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.099530][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.149135][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.164899][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.206088][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.272830][T17838] syz_tun: entered allmulticast mode [ 435.313974][T17801] tipc: Resetting bearer [ 435.359609][T17801] tipc: Disabling bearer [ 435.375104][ T5858] Bluetooth: hci0: command tx timeout [ 435.390174][T17837] syz_tun: left allmulticast mode [ 435.413216][T17734] hsr_slave_0: entered promiscuous mode [ 435.456878][T17734] hsr_slave_1: entered promiscuous mode [ 435.480964][T17734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.515140][T17734] Cannot create hsr debugfs directory [ 435.716155][T17856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3384'. [ 435.729968][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 435.764499][T17734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.784263][T17734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.061408][T17734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.086054][T17734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.234448][T17734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.253693][T17734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.293359][T17873] tipc: Started in network mode [ 436.298585][T17873] tipc: Node identity da00514b8ba3, cluster identity 4711 [ 436.306993][T17873] tipc: Enabled bearer , priority 0 [ 436.317919][T17873] syzkaller0: entered promiscuous mode [ 436.328690][T17873] syzkaller0: entered allmulticast mode [ 436.386306][T17873] tipc: Resetting bearer [ 436.476465][T17734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.497691][T17734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.528744][T17872] tipc: Resetting bearer [ 436.549546][T17872] tipc: Disabling bearer [ 436.742485][T17895] netlink: 'syz.1.3393': attribute type 178 has an invalid length. [ 436.863742][T17734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 436.874587][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'. [ 436.899579][T17734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 436.916198][T17899] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3396'. [ 436.932672][T17899] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3396'. [ 436.943688][T17899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3396'. [ 436.980259][T17734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 436.993730][T17734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 437.054124][T17902] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 437.241618][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.284214][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.316340][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.323775][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.360320][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.367641][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.455719][ T5858] Bluetooth: hci0: command tx timeout [ 437.473750][T17734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 437.485526][T17734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.857169][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.985041][T17734] veth0_vlan: entered promiscuous mode [ 438.011141][T17734] veth1_vlan: entered promiscuous mode [ 438.078829][T17734] veth0_macvtap: entered promiscuous mode [ 438.123934][T17734] veth1_macvtap: entered promiscuous mode [ 438.139125][T17955] NCSI netlink: No device for ifindex 0 [ 438.154191][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.199372][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.230414][T17734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.246921][T17734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.261029][T17734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.271962][T17734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.431652][T17964] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 438.431820][ T1159] [ 438.441778][ T1159] ====================================================== [ 438.448814][ T1159] WARNING: possible circular locking dependency detected [ 438.455907][ T1159] 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 Not tainted [ 438.463069][ T1159] ------------------------------------------------------ [ 438.470202][ T1159] kworker/u8:6/1159 is trying to acquire lock: [ 438.476478][ T1159] ffff888025449358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 438.485995][ T1159] [ 438.485995][ T1159] but task is already holding lock: [ 438.493358][ T1159] ffff8880254d8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 438.502958][ T1159] [ 438.502958][ T1159] which lock already depends on the new lock. [ 438.502958][ T1159] [ 438.513663][ T1159] [ 438.513663][ T1159] the existing dependency chain (in reverse order) is: [ 438.523152][ T1159] [ 438.523152][ T1159] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 438.531836][ T1159] lock_acquire+0x120/0x360 [ 438.537400][ T1159] down_write+0x96/0x1f0 [ 438.542291][ T1159] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 438.548648][ T1159] nbd_start_device+0x16c/0xac0 [ 438.554475][ T1159] nbd_genl_connect+0x135b/0x18f0 [ 438.560147][ T1159] genl_family_rcv_msg_doit+0x212/0x300 [ 438.566491][ T1159] genl_rcv_msg+0x60e/0x790 [ 438.571626][ T1159] netlink_rcv_skb+0x205/0x470 [ 438.576952][ T1159] genl_rcv+0x28/0x40 [ 438.581539][ T1159] netlink_unicast+0x759/0x8e0 [ 438.586908][ T1159] netlink_sendmsg+0x805/0xb30 [ 438.592191][ T1159] __sock_sendmsg+0x21c/0x270 [ 438.597391][ T1159] ____sys_sendmsg+0x505/0x830 [ 438.602856][ T1159] ___sys_sendmsg+0x21f/0x2a0 [ 438.608134][ T1159] __x64_sys_sendmsg+0x19b/0x260 [ 438.613583][ T1159] do_syscall_64+0xfa/0x3b0 [ 438.618702][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.625205][ T1159] [ 438.625205][ T1159] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 438.633062][ T1159] lock_acquire+0x120/0x360 [ 438.638101][ T1159] __mutex_lock+0x182/0xe80 [ 438.643305][ T1159] refcount_dec_and_mutex_lock+0x30/0xa0 [ 438.649458][ T1159] nbd_config_put+0x2c/0x790 [ 438.654650][ T1159] nbd_release+0xfe/0x140 [ 438.659765][ T1159] bdev_release+0x536/0x650 [ 438.664868][ T1159] blkdev_release+0x15/0x20 [ 438.669898][ T1159] __fput+0x449/0xa70 [ 438.674479][ T1159] fput_close_sync+0x119/0x200 [ 438.679880][ T1159] __x64_sys_close+0x7f/0x110 [ 438.685164][ T1159] do_syscall_64+0xfa/0x3b0 [ 438.690222][ T1159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.696665][ T1159] [ 438.696665][ T1159] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 438.704545][ T1159] validate_chain+0xb9b/0x2140 [ 438.709837][ T1159] __lock_acquire+0xab9/0xd20 [ 438.715038][ T1159] lock_acquire+0x120/0x360 [ 438.720092][ T1159] __mutex_lock+0x182/0xe80 [ 438.725104][ T1159] __del_gendisk+0x129/0x9e0 [ 438.730215][ T1159] del_gendisk+0xe8/0x160 [ 438.735071][ T1159] nbd_dev_remove_work+0x47/0xe0 [ 438.740537][ T1159] process_scheduled_works+0xae1/0x17b0 [ 438.746685][ T1159] worker_thread+0x8a0/0xda0 [ 438.751825][ T1159] kthread+0x70e/0x8a0 [ 438.756510][ T1159] ret_from_fork+0x3fc/0x770 [ 438.761613][ T1159] ret_from_fork_asm+0x1a/0x30 [ 438.766980][ T1159] [ 438.766980][ T1159] other info that might help us debug this: [ 438.766980][ T1159] [ 438.777548][ T1159] Chain exists of: [ 438.777548][ T1159] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 438.777548][ T1159] [ 438.792461][ T1159] Possible unsafe locking scenario: [ 438.792461][ T1159] [ 438.799946][ T1159] CPU0 CPU1 [ 438.805913][ T1159] ---- ---- [ 438.811377][ T1159] rlock(&set->update_nr_hwq_lock); [ 438.816749][ T1159] lock(&nbd->config_lock); [ 438.823857][ T1159] lock(&set->update_nr_hwq_lock); [ 438.831584][ T1159] lock(&disk->open_mutex); [ 438.836193][ T1159] [ 438.836193][ T1159] *** DEADLOCK *** [ 438.836193][ T1159] [ 438.844633][ T1159] 3 locks held by kworker/u8:6/1159: [ 438.850001][ T1159] #0: ffff8880254d8148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 438.861174][ T1159] #1: ffffc90003cbfbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 438.873466][ T1159] #2: ffff8880254d8988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 438.883511][ T1159] [ 438.883511][ T1159] stack backtrace: [ 438.889522][ T1159] CPU: 0 UID: 0 PID: 1159 Comm: kworker/u8:6 Not tainted 6.16.0-rc7-syzkaller-00100-gafd8c2c9e2e2 #0 PREEMPT(full) [ 438.889543][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.889554][ T1159] Workqueue: nbd-del nbd_dev_remove_work [ 438.889577][ T1159] Call Trace: [ 438.889583][ T1159] [ 438.889590][ T1159] dump_stack_lvl+0x189/0x250 [ 438.889609][ T1159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.889623][ T1159] ? __pfx__printk+0x10/0x10 [ 438.889641][ T1159] ? print_lock_name+0xde/0x100 [ 438.889657][ T1159] print_circular_bug+0x2ee/0x310 [ 438.889675][ T1159] check_noncircular+0x134/0x160 [ 438.889698][ T1159] validate_chain+0xb9b/0x2140 [ 438.889716][ T1159] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.889734][ T1159] ? arch_stack_walk+0x11c/0x150 [ 438.889752][ T1159] __lock_acquire+0xab9/0xd20 [ 438.889768][ T1159] ? __del_gendisk+0x129/0x9e0 [ 438.889783][ T1159] lock_acquire+0x120/0x360 [ 438.889795][ T1159] ? __del_gendisk+0x129/0x9e0 [ 438.889812][ T1159] ? check_path+0x21/0x40 [ 438.889828][ T1159] __mutex_lock+0x182/0xe80 [ 438.889843][ T1159] ? __del_gendisk+0x129/0x9e0 [ 438.889861][ T1159] ? __del_gendisk+0x129/0x9e0 [ 438.889877][ T1159] ? __pfx___mutex_lock+0x10/0x10 [ 438.889891][ T1159] ? __pfx___might_resched+0x10/0x10 [ 438.889908][ T1159] ? __lock_acquire+0xab9/0xd20 [ 438.889921][ T1159] ? disk_del_events+0xb5/0x210 [ 438.889938][ T1159] ? __del_gendisk+0xc1/0x9e0 [ 438.889953][ T1159] __del_gendisk+0x129/0x9e0 [ 438.889969][ T1159] ? del_gendisk+0xe0/0x160 [ 438.889985][ T1159] ? __pfx___del_gendisk+0x10/0x10 [ 438.890002][ T1159] ? down_read+0x1ad/0x2e0 [ 438.890017][ T1159] del_gendisk+0xe8/0x160 [ 438.890033][ T1159] nbd_dev_remove_work+0x47/0xe0 [ 438.890048][ T1159] ? process_scheduled_works+0x9ef/0x17b0 [ 438.890063][ T1159] process_scheduled_works+0xae1/0x17b0 [ 438.890087][ T1159] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.890106][ T1159] worker_thread+0x8a0/0xda0 [ 438.890121][ T1159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.890137][ T1159] ? __kthread_parkme+0x7b/0x200 [ 438.890154][ T1159] kthread+0x70e/0x8a0 [ 438.890171][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 438.890185][ T1159] ? __pfx_kthread+0x10/0x10 [ 438.890201][ T1159] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.890213][ T1159] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.890226][ T1159] ? __pfx_kthread+0x10/0x10 [ 438.890242][ T1159] ret_from_fork+0x3fc/0x770 [ 438.890256][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 438.890271][ T1159] ? __switch_to_asm+0x39/0x70 [ 438.890286][ T1159] ? __switch_to_asm+0x33/0x70 [ 438.890300][ T1159] ? __pfx_kthread+0x10/0x10 [ 438.890316][ T1159] ret_from_fork_asm+0x1a/0x30 [ 438.890337][ T1159] [ 438.977757][T17734] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 439.192294][T17734] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 439.200063][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.200083][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.243709][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.254836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.535005][ T5858] Bluetooth: hci0: command tx timeout [ 441.615003][ T5858] Bluetooth: hci0: command tx timeout [ 446.097794][ T3444] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 446.107119][ T3444] bond0 (unregistering): Released all slaves [ 446.208913][ T3444] bond1 (unregistering): Released all slaves [ 446.218043][ T3444] bond2 (unregistering): Released all slaves [ 446.323292][ T3444] bond3 (unregistering): Released all slaves [ 446.332339][ T3444] bond4 (unregistering): Released all slaves [ 446.341358][ T3444] bond5 (unregistering): Released all slaves [ 446.403907][ T3444] : left promiscuous mode [ 446.435833][ T3444] tipc: Disabling bearer [ 446.441501][ T3444] tipc: Left network mode [ 446.453168][ T3444] IPVS: stopping backup sync thread 11273 ... [ 447.266563][ T3444] hsr_slave_0: left promiscuous mode [ 447.272368][ T3444] hsr_slave_1: left promiscuous mode [ 448.140871][ T3444] IPVS: stop unused estimator thread 0...