last executing test programs: 2.672230223s ago: executing program 0 (id=7076): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x4000) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@phonet={0x23, 0x7, 0xaf, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="97595ed4bd7fc22cb45a07d0f58b46867b03f8a1c68a0b9774b10990f441c359a2053cee3407615c46ce96dedecfe7bf1d117a93d7cfd4cc47a155e8a0d197a2ef88f23127d2e61317a8fb3f55df2121d9117c51", 0x54}], 0x1, &(0x7f0000000340)=[{0xe0, 0x116, 0x1, "a5ec717146ec4559651a50becffaea0b9861435fdc126a47e3ee3ab42043fceae698032d28cb65b38611816d21ccf2473c07518cfc05e9d9b5c82df6435ac074ef89567c5cd2a69b5a6147f6e2570d6e75f454fbe8f8858e030339ffc116b66aa53b8cd677dd30939cdff98229c3df5a7c7a0281533f246f7bc1c99d20827f92831525ea112332c3acfef1f1610f451779bced153402e3f21dc73b39f554fad5e3ff5ae6ea73cbc8ff873fcd8d3ff36dee7a3b4ce53091acd3a1ea71bce14ba57087ec1bc8c2012791b6"}], 0xe0}, 0x94) 2.28314078s ago: executing program 0 (id=7080): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x18, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0xf) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r5, @ANYBLOB="000627bd7000ffdbdf2517000000200001800800030001040000130001006574683a69703665727370616e300000"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12a13, 0x8005}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x3c}}, 0x20004000) 2.047909712s ago: executing program 1 (id=7084): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 1.930047781s ago: executing program 1 (id=7085): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRESHEX, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x22, &(0x7f0000000100), 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r5, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "8d5d9ff3505ea2fc", "56767ae2e89e2e627065ea1bc35b0614", "aaa9e01f", "e493fc43e5727f37"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, 0x0}}], 0x1, 0x40) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000200)={0xa, 0x4e21, 0x10004, @loopback, 0x2000002}, 0x1c) 1.712199775s ago: executing program 0 (id=7089): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980ea", 0x90}, {&(0x7f0000000140)="3acd4ed09baaf9b137", 0x9}, {&(0x7f0000000040)="e7b4d4786cb96c49aeaf98", 0xb}], 0x3, 0x0, 0x0, 0x48015}, 0x240048c9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0xf983e000) close(r1) 1.400051465s ago: executing program 0 (id=7093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) 1.189685509s ago: executing program 4 (id=7095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000180)={0x2, 0x2, 0x1757efcd, 0x1b353850, 0x2, 0x63423bef}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000240)=""/191, 0x4f, 0xbf, 0x0, 0xf5ee, 0x10000}, 0x28) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f0000000340)=""/129, 0x4}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000180)={0x2, 0x2, 0x1757efcd, 0x1b353850, 0x2, 0x63423bef}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000240)=""/191, 0x4f, 0xbf, 0x0, 0xf5ee, 0x10000}, 0x28) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000400)=@get={0x1, &(0x7f0000000340)=""/129, 0x4}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async) 1.1120908s ago: executing program 2 (id=7096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="1802000009000000000000000d0000008500000030008000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000012000085004276602c00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) unshare(0xa020480) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback}, &(0x7f0000000340)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x31, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}, [@generic={0x81, 0x1, 0x1, 0x8a, 0x400}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0xa, 0x3, 0xff) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="c1", 0x1}], 0x1}}], 0x1, 0x200400c0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000040)=0xc15c, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(r4, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) recvfrom$x25(r4, &(0x7f00000001c0)=""/174, 0xae, 0x40, &(0x7f0000000280), 0x12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5ac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.053463248s ago: executing program 4 (id=7097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @sk_skb}, 0x6b) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="020afc000700000028bd7000fe9bdf2505001a00"], 0x38}}, 0x40408c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x24000040) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd0d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="8f076e4f7c38970bbec66187399ca76a41d3ece17fd241d9193b1bd96909cd5f326d02fe68f3c7edc8904702416aa037056a1c461d85fe37d1d75cf36a89fb3f59733bfd177693414eb7715e06deff3bf373aaef38b760838f08e761735bf2cde2363b07a28ac5542c7576bbed42ba06d5132a90b6fceaa7c849c73529755d3ce51033eed65803598b6c9da25e402770f8519096c3ae24570415c702748543fa1ada0d9b68fc40a0df1ed24012280ec386d3bfa77a0ce60cf4c294c2d80ec669de62f8d13c9df50060fdca3d5bb9fbccd1696eea5330fbcf66b719294a7f691089282fdc8a67f4230f2f5a6971d3127b45e62ba339448085c6add6a661bfa8", 0xff}], 0x1, &(0x7f0000000940)=[@op={0x18}, @iv={0x58, 0x117, 0x2, 0x3d, "62ba18412f9d47a1f1ad25a1fd9a3f16fe2d86fe2455bf55bb007a4b619d1f2ec68081775bd5da62459c7d846b3ef86848d6caa32ece4b29309a79eff9"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x16, "18c4299f04f596b501f60a6806b6547a0012ffdbe6b5"}], 0xb8, 0x20000001}], 0x1, 0x4000040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e20, 0xa5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}, {0xa, 0x4e21, 0x773, @mcast1, 0x6}, 0x1, {[0xfffffffe, 0x0, 0x3, 0x1fc, 0x65f4, 0x8, 0x6, 0x1ff]}}, 0x5c) setsockopt$inet6_tcp_int(r7, 0x6, 0x18, &(0x7f0000000180)=0xa, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000010027bd910402d4df2500000000", @ANYRES32, @ANYBLOB="984e0600c16a010054001280110001006272696467655f736c617665000000003c00058005001c0000000000050020000000000005000500000000000500190002000000050006000000000005000100010000000500080001000000"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRES64=r2], 0x16c}, 0x1, 0x0, 0x0, 0x4044804}, 0x4004) close(r8) 1.048551579s ago: executing program 0 (id=7098): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000780)='%pI4 \x00'}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x40, 0x4, 0x5, 0x40, r0, 0x588, '\x00', 0x0, r2, 0x5, 0x3, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.02475228s ago: executing program 2 (id=7099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911046000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000040)=""/3, &(0x7f0000000100)=0x3) accept4$alg(r1, 0x0, 0x0, 0x180800) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x16}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x100000000000}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xa3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4], 0x78}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) 931.902049ms ago: executing program 3 (id=7100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x8001, 0xb0, 0xe1e8, 0x435a, 0x8, 0x6, 0x7, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x4, 0x6, 0x1, 0x1, 0x2}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x7}, &(0x7f0000000140)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x2cc, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffff, @empty, 0xded}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x12e}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x529f}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa1f}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x324}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4840}, 0x2000000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x8010, r3, 0xf0bd2000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @multicast1}, &(0x7f0000000940)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000980)={@remote, @local, 0x0}, &(0x7f00000009c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0xb78, 0x9, {{0x15, 0x4, 0x2, 0x30, 0x54, 0x67, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_prespec={0x44, 0x3c, 0xca, 0x3, 0x9, [{@multicast1, 0x5}, {@empty, 0x1}, {@private=0xa010100, 0x7}, {@loopback, 0x10}, {@broadcast, 0x56}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x4}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x8, 0x0, {{0x8, 0x4, 0x1, 0x1f, 0x20, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0xb, 0x4a, [@empty, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl1\x00', 0x0, 0x29, 0xff, 0xa, 0x9, 0x2, @private0, @loopback, 0x7800, 0x0, 0x8, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000d00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001140)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f40)={0x18c, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001180), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) pselect6(0x40, &(0x7f00000011c0)={0x9, 0x100000000, 0x1, 0x571a, 0x100, 0xffffffffffffffff, 0x5, 0x1}, &(0x7f0000001200)={0x2, 0xf3b, 0xe, 0x10000, 0x9, 0x8000, 0x7, 0x2}, &(0x7f0000001240)={0x6, 0x100000000, 0x8001, 0x5, 0x5, 0x1, 0x5, 0x2}, &(0x7f0000001280)={0x77359400}, &(0x7f0000001300)={&(0x7f00000012c0)={[0x9]}, 0x8}) r13 = accept4$llc(0xffffffffffffffff, &(0x7f0000001340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001380)=0x10, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000013c0)=0x0) sendmsg$sock(r13, &(0x7f0000001680)={&(0x7f0000001400)=@nfc={0x27, r14, 0x1, 0x4}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)="080c993d9b5247dd5cb63ffa2bd3b135ba4f711178cdc1fb07d3b2cec39f4778151355ee319eaf3ee43d2ca0ccec3dad9c2cab6a6d0219c671f7009da8b3b74bbd59e2a64fc30e1f92e2f8", 0x4b}, {&(0x7f0000001500)="c07c8165cb8c975819c386df4b42f40bd36c407133f37926d11513", 0x1b}, {&(0x7f0000001540)}, {&(0x7f0000001580)="945267a14c2f59b16bfd5a76f6c732b2ab06ce53b0ba6e65f9a014189b134608f845fd0b6c172590c697d4c1d39437a55650be8cd58064b64853ba8e7da9624fcf64f6ad164bbda738bcaba2a7b6f4ac7e4402a65bc67d3ecb64a19f714d97a690cc0936f9da36f68b493ff0e2a80f858cb9bb37d0401cf37edade81c01d4c458c", 0x81}], 0x4}, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000016c0)={r2, 0x1}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001740)={r15, 0x5, 0x40}, 0x8) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r16 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0)=0x10, 0x80800) setsockopt$PNPIPE_INITSTATE(r16, 0x113, 0x4, &(0x7f0000001900), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x48, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x8010) 929.02505ms ago: executing program 1 (id=7101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x53}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 819.64356ms ago: executing program 3 (id=7102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 799.153787ms ago: executing program 4 (id=7103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44df25000000000000200000000000820000000000", @ANYRES32=0x0, @ANYBLOB="3f00000092000000240012800b00010062726964676500001400028005002600000000000500250001000000"], 0x44}}, 0x0) 782.373854ms ago: executing program 1 (id=7104): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0xf}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0x28}}, 0x0) 705.105568ms ago: executing program 2 (id=7105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 704.958394ms ago: executing program 0 (id=7106): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) unshare(0x22020400) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080) (rerun: 32) 661.363295ms ago: executing program 4 (id=7107): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000000}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25}, @initr0, @exit]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}}, 0x8a, 0x80}, &(0x7f00000004c0)=0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r7, @ANYBLOB="00000000000000006300a0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000780)={r2, &(0x7f0000000680)='\x00', 0x101080, &(0x7f00000006c0)={@align=0x2ea, {0x1, 0x5, 0x9, 0x4}}, 0x6467, &(0x7f0000000700), &(0x7f0000000740)=0x64f}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r10, @ANYBLOB="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"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="feff3cbaf7257adeffffff0100000000000000001baa6844a81dc3c5812f50633ac38ebaf19742b5405bc1aaaf64dff04708f5c7c51c616a50a139e03606f92af64bcf21e54a5ebcf4729b660ed4d76b888bdd538e4503c38d2afc8f3d5cc2dbf28ce2cff59c768b1fd91d6c5c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000980)={r2, &(0x7f0000000880)='\x00', 0x418000, &(0x7f00000008c0)={@align=0x8, {0x8001, 0x40, 0x6, 0x1e1}}, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x7}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8000, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x11, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x8d}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @alu={0x4, 0x1, 0x5, 0x3, 0x0, 0x8}], &(0x7f00000003c0)='syzkaller\x00', 0xb, 0x92, &(0x7f0000000500)=""/146, 0x40f00, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x5, 0x355c, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[r9, r10, r11, r12, r13], &(0x7f0000000a80)=[{0x2, 0x4, 0xd, 0x8}], 0x10, 0xf106}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1fb, 0x4, 0x0, 0x3, 0x8001, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x800, 0x6, 0xfffffffb}}]}]}}}]}, 0x6c}}, 0x0) socket(0x18, 0x2, 0x3) sendto$packet(r0, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 637.841709ms ago: executing program 1 (id=7108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297"}}, 0x24) 573.080098ms ago: executing program 3 (id=7109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 563.367676ms ago: executing program 2 (id=7110): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x20000890) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007a000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 466.724947ms ago: executing program 3 (id=7111): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @private=0xa010102, r4}, 0xc) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff2a14}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x80000000, 0xe8, &(0x7f00000005c0)=""/232, 0x41000, 0x26, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xd, 0x7, 0x80000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x4, 0x4, 0x3}, {0x5, 0x4, 0x6, 0x2}, {0x5, 0x1, 0xc, 0xb}, {0x0, 0x3, 0xa}, {0x0, 0x5, 0x8, 0x5}, {0x2, 0x5, 0xc, 0x2}], 0x10, 0xfffffffd}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c00010062"], 0x3c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000008c0)={@remote, @dev}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xffff000, @private0, 0x2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xa4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @private=0xa010102, r4}, 0xc) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff2a14}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x80000000, 0xe8, &(0x7f00000005c0)=""/232, 0x41000, 0x26, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xd, 0x7, 0x80000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740), &(0x7f0000000780)=[{0x3, 0x4, 0x4, 0x3}, {0x5, 0x4, 0x6, 0x2}, {0x5, 0x1, 0xc, 0xb}, {0x0, 0x3, 0xa}, {0x0, 0x5, 0x8, 0x5}, {0x2, 0x5, 0xc, 0x2}], 0x10, 0xfffffffd}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c00010062"], 0x3c}}, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000008c0)={@remote, @dev}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0xffff000, @private0, 0x2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xa4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040), 0x4) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) (async) 264.654774ms ago: executing program 2 (id=7112): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) (async, rerun: 32) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x84c15ccc9c098298) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000100)=0x7fff, 0x12) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) (async) r4 = socket(0x1e, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0) (rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x54, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, @in6={0xa, 0x4e24, 0x1ff, @local, 0x3}, @in6={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}]}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r8, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x22c9, 0x5, 0x3}, 0x14) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x80) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 262.343701ms ago: executing program 1 (id=7113): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x8c28, 0x10, 0x5, 0x7f, 0x2, 0x93, 0x9, 0xb4d, 0xfffffff7, 0x1, 0x1, 0x4, 0xfffffffa, 0x0, 0x6, 0x3, 0x40, 0x4, 0x5, 0x5, 0x0, 0x6, 0x1, 0x1, 0x8001, 0x7, 0xb, 0x0, 0x2, 0x7, 0xfe7, 0x1, 0x1808d6ff, 0x2, 0x9fa, 0x80, 0x8001, 0x80, 0xfffff5d1, 0xb61e, 0xd, 0x1ff, 0xb0, 0x84, 0x6, 0x1, 0x7, 0x2, 0x4, 0xa8, 0xfffffffd, 0x7, 0x6fb, 0x8, 0xfffffffb, 0x2, 0x0, 0xff, 0x4, 0xd9, 0x4, 0xf0e, 0xfffff001, 0x5, 0x7, 0x7, 0x1, 0x8, 0xd, 0x8, 0x8001, 0x10, 0x3, 0x80000000, 0x0, 0x100, 0xf0c4, 0x4, 0x2, 0x8, 0x9, 0x4, 0xb, 0x5, 0x20, 0x5, 0xffffffff, 0x1ff, 0x3, 0x0, 0x1, 0xe5, 0x0, 0x1, 0x1, 0x4, 0x4, 0x7fffffff, 0x101, 0xf, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x9, 0xed19, 0x4, 0xc22d, 0x2, 0x1, 0x1, 0x3ff, 0x1, 0x4, 0xc, 0x9, 0xfffff699, 0x3, 0x80000000, 0xb6, 0x800000, 0x0, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7ff, 0x2, 0x7, 0x0, 0x9, 0x8, 0x0, 0x8, 0xd699, 0x8, 0xed, 0x5, 0x7, 0xffffeffb, 0x7, 0x5, 0x6, 0x0, 0xd6, 0x23, 0x1, 0x9, 0xe, 0x100, 0xb2, 0x3, 0x2, 0x4, 0x5, 0x7527, 0x7f, 0x0, 0x9a6b, 0x9, 0xfff, 0x7, 0x8faa, 0xf, 0x4, 0x8, 0xfb5, 0x4, 0x9, 0xc350, 0x10, 0x3, 0xcd6, 0x1, 0xf, 0x8b, 0xfc, 0x0, 0x7, 0x3, 0x4a1, 0x10000008, 0x1, 0x6, 0x9, 0x1000, 0x85aa, 0x3f61, 0x280, 0x3d0e, 0x8000, 0x7, 0x1, 0x4, 0xffffffff, 0xfbee, 0xf, 0x8, 0x4, 0x1, 0x7f, 0x40, 0x3, 0x40, 0x7, 0x1, 0x3, 0x401, 0xfffffffe, 0xfffffff7, 0x80000001, 0x2, 0x8d, 0x8, 0xaefd, 0x3, 0x1, 0x3, 0x463, 0x0, 0x8, 0x7, 0x9b, 0x6, 0x2, 0x7, 0x8c000000, 0x7, 0x7, 0xfff, 0xc0b2, 0x1, 0x8, 0x3, 0x7, 0x8, 0x8, 0x7fff, 0x8, 0x3, 0xa6, 0x6, 0x4, 0x3, 0x267, 0x1ff, 0x7, 0x2, 0x10, 0x2, 0x5, 0x3, 0x6b0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0xd, 0xfffa, 0x9, 0x7}, {0xc, 0x2, 0xd, 0x6, 0x7f, 0xffff}, 0x5, 0x7, 0x97}}]}}]}, 0x45c}}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61f0, 0x0) 200.063217ms ago: executing program 4 (id=7114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x53}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 199.146729ms ago: executing program 3 (id=7115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) 89.544876ms ago: executing program 2 (id=7116): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x62040400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket(0x8, 0x80000, 0x1) shutdown(r1, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0x7}, &(0x7f0000000280)=0x90) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r2, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 53.338017ms ago: executing program 4 (id=7117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000180)=""/177}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18, 0x1411, 0x800, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x500c2}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x43, 0x107, 0xfffffffe, 0x4, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4044855}, 0x8001) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="0a0001"], 0x48}}, 0x0) (async) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 3 (id=7118): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000003200)={0x1, &(0x7f0000003180)=[{0x5, 0x80, 0x38, 0xf}]}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): yz.3.5819'. [ 753.228466][T29686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5818'. [ 753.347886][T29696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5818'. [ 753.478761][T29686] bond9: (slave bridge7): making interface the new active one [ 753.504359][T29686] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 753.541723][ T5288] veth1_macvtap: entered promiscuous mode [ 753.569634][T29706] IPv6: NLM_F_CREATE should be specified when creating new route [ 753.569700][T29704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5823'. [ 754.038443][T29724] tipc: Enabling of bearer rejected, failed to enable media [ 754.176911][T29738] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 754.577697][T29760] netlink: 'syz.3.5837': attribute type 4 has an invalid length. [ 754.625195][T29760] netlink: 'syz.3.5837': attribute type 1 has an invalid length. [ 755.352269][T29791] syzkaller1: entered promiscuous mode [ 755.368253][T29791] syzkaller1: entered allmulticast mode [ 755.493425][T29797] netlink: 'syz.3.5845': attribute type 2 has an invalid length. [ 755.646579][T29804] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 755.811991][T29796] team_slave_0: left promiscuous mode [ 755.830245][T29796] team_slave_1: left promiscuous mode [ 755.844330][T29796] team0: entered promiscuous mode [ 755.849435][T29796] team_slave_0: entered promiscuous mode [ 755.856170][T29796] team_slave_1: entered promiscuous mode [ 755.865140][T29796] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 756.062729][T29806] veth13: entered allmulticast mode [ 756.094769][T29806] bond8: (slave veth13): Enslaving as an active interface with an up link [ 756.112900][T29823] netlink: 'syz.0.5850': attribute type 1 has an invalid length. [ 756.133091][T29807] bond8 (unregistering): (slave veth13): Releasing backup interface [ 756.139493][T29823] netlink: 'syz.0.5850': attribute type 2 has an invalid length. [ 756.152835][T29823] __nla_validate_parse: 7 callbacks suppressed [ 756.152855][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5850'. [ 756.153594][T29825] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5849'. [ 756.185102][T29807] bond8 (unregistering): Released all slaves [ 756.252513][T29819] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5849'. [ 756.537688][T29844] FAULT_INJECTION: forcing a failure. [ 756.537688][T29844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.558619][T29844] CPU: 1 UID: 0 PID: 29844 Comm: syz.2.5855 Not tainted syzkaller #0 PREEMPT(full) [ 756.558651][T29844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.558665][T29844] Call Trace: [ 756.558674][T29844] [ 756.558683][T29844] dump_stack_lvl+0xe8/0x150 [ 756.558714][T29844] should_fail_ex+0x412/0x560 [ 756.558746][T29844] _copy_to_iter+0x1e4/0x17d0 [ 756.558777][T29844] ? do_raw_spin_lock+0x12b/0x2f0 [ 756.558816][T29844] ? __pfx__copy_to_iter+0x10/0x10 [ 756.558842][T29844] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 756.558865][T29844] ? lockdep_hardirqs_on+0x7a/0x110 [ 756.558888][T29844] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 756.558908][T29844] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 756.558941][T29844] __skb_datagram_iter+0xf8/0x980 [ 756.558971][T29844] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 756.559009][T29844] skb_copy_datagram_iter+0xb5/0x240 [ 756.559041][T29844] netlink_recvmsg+0x2c3/0xa50 [ 756.559077][T29844] ? __pfx_netlink_recvmsg+0x10/0x10 [ 756.559109][T29844] ? aa_sock_msg_perm+0xf1/0x1b0 [ 756.559138][T29844] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 756.559165][T29844] ? security_socket_recvmsg+0x7e/0x2c0 [ 756.559195][T29844] ? __pfx_netlink_recvmsg+0x10/0x10 [ 756.559221][T29844] sock_recvmsg+0x172/0x1b0 [ 756.559256][T29844] __sys_recvfrom+0x240/0x3c0 [ 756.559287][T29844] ? __pfx___sys_recvfrom+0x10/0x10 [ 756.559309][T29844] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 756.559346][T29844] ? __fget_files+0x3a0/0x420 [ 756.559382][T29844] ? ksys_write+0x242/0x270 [ 756.559415][T29844] ? __pfx_ksys_write+0x10/0x10 [ 756.559449][T29844] __x64_sys_recvfrom+0xde/0x100 [ 756.559475][T29844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.559498][T29844] do_syscall_64+0x15f/0xf80 [ 756.559519][T29844] ? trace_irq_disable+0x3b/0x140 [ 756.559548][T29844] ? clear_bhb_loop+0x40/0x90 [ 756.559574][T29844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.559602][T29844] RIP: 0033:0x7fde5ff5d60e [ 756.559623][T29844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 756.559640][T29844] RSP: 002b:00007fde60da2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 756.559663][T29844] RAX: ffffffffffffffda RBX: 00007fde60da46c0 RCX: 00007fde5ff5d60e [ 756.559678][T29844] RDX: 0000000000001000 RSI: 00007fde60da3000 RDI: 0000000000000004 [ 756.559691][T29844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.559703][T29844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 756.559714][T29844] R13: 00007fde60da2f58 R14: 00007fde60da3000 R15: 0000000000000000 [ 756.559747][T29844] [ 756.945715][T29851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5858'. [ 757.143777][T29862] 5Ò: entered promiscuous mode [ 757.415791][T29879] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 757.588752][T29878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5866'. [ 757.619297][T29889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5869'. [ 757.631507][ T48] bond8: (slave ip6gretap2): link status up again after 0 ms [ 757.646924][T15462] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 757.660908][ T48] bond8: (slave ip6gretap2): link status up again after 0 ms [ 757.692099][T24018] bond8: (slave ip6gretap2): link status up again after 0 ms [ 757.720524][T24018] bond8: (slave ip6gretap2): link status up again after 0 ms [ 757.749264][T24018] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 757.977861][T29893] syzkaller0: entered promiscuous mode [ 757.997671][T29893] syzkaller0: entered allmulticast mode [ 758.022972][ T7005] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 758.050933][T29906] netlink: 'syz.4.5874': attribute type 62 has an invalid length. [ 758.464266][T29926] xt_recent: Unsupported userspace flags (000000b1) [ 758.536416][T29931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5883'. [ 758.672562][T29937] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5883'. [ 758.751142][T15462] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 758.951872][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 762.281165][T29929] nr0: tun_chr_ioctl cmd 1074025677 [ 762.286681][T29929] nr0: linktype set to 774 [ 762.334722][T24017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.481126][T24017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.534611][T29961] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.5887'. [ 762.573832][T29961] openvswitch: netlink: Flow key attr not present in new flow. [ 762.622458][ T48] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.700107][T29971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5892'. [ 762.753720][T24017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.765449][T29971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5892'. [ 762.784876][T29977] tipc: Enabled bearer , priority 10 [ 762.793720][T29975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5892'. [ 762.880502][ T7007] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.976572][T29982] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5895'. [ 763.001134][T24018] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 763.031481][T29979] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5895'. [ 763.039943][T29963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5890'. [ 763.113227][T29990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5897'. [ 763.130160][T29966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5890'. [ 763.234074][ T48] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 763.537712][T30008] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 763.569938][T30008] bond0 (unregistering): Released all slaves [ 763.607354][T30013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.700723][T24017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 763.983726][T30026] netlink: 'syz.2.5905': attribute type 1 has an invalid length. [ 764.044310][T30026] bond10: entered promiscuous mode [ 764.050324][T30026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 764.087917][T30026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5905'. [ 764.259951][T30032] pim6reg: entered allmulticast mode [ 764.293808][T30046] IPVS: set_ctl: invalid protocol: 0 10.1.33.2:20001 [ 764.302036][T30026] bond10: entered allmulticast mode [ 764.318565][T30035] pim6reg: left allmulticast mode [ 764.457167][T18932] block nbd5: Receive control failed (result -32) [ 764.501300][T30044] bond10: (slave bridge8): making interface the new active one [ 764.509189][T30044] bridge8: entered promiscuous mode [ 764.515280][T30044] bridge8: entered allmulticast mode [ 764.523422][T30044] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 764.686898][T30063] netlink: 'syz.4.5915': attribute type 3 has an invalid length. [ 764.995414][T30083] netlink: 'syz.4.5922': attribute type 64 has an invalid length. [ 765.747448][T30104] veth7: entered promiscuous mode [ 766.232287][T30134] netlink: 'syz.2.5939': attribute type 1 has an invalid length. [ 766.267007][T30134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 766.544655][T30144] netlink: 'syz.3.5942': attribute type 1 has an invalid length. [ 766.566972][T30145] netlink: 'syz.3.5942': attribute type 1 has an invalid length. [ 766.733973][T30156] netlink: 'syz.4.5944': attribute type 13 has an invalid length. [ 766.744187][T30157] netlink: 'syz.0.5945': attribute type 21 has an invalid length. [ 766.755289][T30156] tipc: Resetting bearer [ 766.861573][T30157] netlink: 'syz.0.5945': attribute type 5 has an invalid length. [ 767.353633][ T48] net_ratelimit: 23 callbacks suppressed [ 767.353657][ T48] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.500814][ T7007] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.622397][T24019] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.761142][T24017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.856683][T30169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.901338][ T7005] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.971886][T30211] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 768.261437][ T7005] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 768.308390][T30231] __nla_validate_parse: 12 callbacks suppressed [ 768.308425][T30231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5954'. [ 768.520983][ T7007] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 768.637991][T30251] netlink: 'syz.2.5960': attribute type 13 has an invalid length. [ 768.654317][ T7007] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 768.757314][T30251] bridge0: left promiscuous mode [ 768.772147][T30251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.848439][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5960'. [ 768.876917][T30265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5962'. [ 768.909850][T30266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5963'. [ 768.937770][T30266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5963'. [ 768.952217][T30251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.965436][T30251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.980086][T30251] veth1_macvtap: left promiscuous mode [ 768.989087][T30251] veth0_macvtap: left promiscuous mode [ 768.998663][T30251] veth0_macvtap: entered promiscuous mode [ 769.009425][T30251] veth1_macvtap: entered promiscuous mode [ 769.061881][T30251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.071134][T30251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 769.088694][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5962'. [ 769.101087][T30251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 769.107997][T30270] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5962'. [ 769.128447][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5962'. [ 769.140145][T30270] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5962'. [ 769.153483][T30251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 769.162938][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5962'. [ 769.176907][T30251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 769.195083][T30251] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.208292][T30251] 8021q: adding VLAN 0 to HW filter on device eth0 [ 769.222900][T30251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 769.236397][T30251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 769.244983][T30251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 769.255562][T30251] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.283848][T30251] 8021q: adding VLAN 0 to HW filter on device bond9 [ 769.296834][T30251] bond10: left promiscuous mode [ 769.302812][T30251] bridge8: left promiscuous mode [ 769.308162][T30251] bond10: left allmulticast mode [ 769.321642][T30251] bridge8: left allmulticast mode [ 769.332725][T30251] veth7: left promiscuous mode [ 769.344464][T15462] bridge0: entered promiscuous mode [ 769.432905][T30263] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 769.572020][ T7005] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.586444][ T7005] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.667394][ T7005] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.678750][ T7005] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.727044][ T7007] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 769.954176][ T7005] ip6_tunnel:  xmit: Local address not yet configured! [ 770.078568][T30297] macvtap1: entered promiscuous mode [ 770.093499][T30297] syz_tun: entered promiscuous mode [ 770.144338][T30297] syz_tun: left promiscuous mode [ 770.345826][T30310] vlan2: entered allmulticast mode [ 770.374548][T30310] vlan0: entered allmulticast mode [ 770.390105][T30310] veth0_vlan: entered allmulticast mode [ 770.531275][T30301] lo speed is unknown, defaulting to 1000 [ 770.548623][T30301] lo speed is unknown, defaulting to 1000 [ 770.797606][T30323] lo speed is unknown, defaulting to 1000 [ 771.211716][T30323] lo speed is unknown, defaulting to 1000 [ 771.266676][T30352] validate_nla: 1 callbacks suppressed [ 771.266698][T30352] netlink: 'syz.4.5980': attribute type 1 has an invalid length. [ 771.301514][T30352] IPVS: length: 528 != 632 [ 771.789130][T30373] netlink: 'syz.4.5986': attribute type 309 has an invalid length. [ 772.279654][T30391] netlink: 'syz.0.5988': attribute type 30 has an invalid length. [ 772.409399][T30391] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 772.424497][T30391] bond6 (unregistering): Released all slaves [ 772.560594][ T7005] net_ratelimit: 15 callbacks suppressed [ 772.560620][ T7005] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 772.692164][ T13] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 772.694756][T30408] netlink: ct family unspecified [ 772.723406][T30408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.882355][ T7017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.003357][ T13] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.141964][ T7017] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.282975][ T13] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.311795][T30428] team0: entered promiscuous mode [ 773.334117][T30428] team_slave_0: entered promiscuous mode [ 773.350324][T30428] team_slave_1: entered promiscuous mode [ 773.412667][ T13] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.570725][ T13] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 773.711735][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 773.993728][T30450] __nla_validate_parse: 8 callbacks suppressed [ 773.993764][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6006'. [ 773.995136][T30442] netlink: 'syz.4.6005': attribute type 2 has an invalid length. [ 774.110783][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 774.219217][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6009'. [ 774.239888][T30460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6009'. [ 774.317709][ T7005] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.327823][ T7005] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.343624][T30460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6009'. [ 774.356058][ T7005] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.365939][T30460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6009'. [ 774.408766][ T7005] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.582646][T30475] bond0: (slave vlan0): Opening slave failed [ 774.766305][T30487] FAULT_INJECTION: forcing a failure. [ 774.766305][T30487] name failslab, interval 1, probability 0, space 0, times 0 [ 774.814528][T30487] CPU: 1 UID: 0 PID: 30487 Comm: syz.4.6018 Not tainted syzkaller #0 PREEMPT(full) [ 774.814560][T30487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.814572][T30487] Call Trace: [ 774.814582][T30487] [ 774.814591][T30487] dump_stack_lvl+0xe8/0x150 [ 774.814622][T30487] should_fail_ex+0x412/0x560 [ 774.814655][T30487] should_failslab+0xa8/0x100 [ 774.814690][T30487] __kmalloc_cache_noprof+0x88/0x660 [ 774.814721][T30487] ? sctp_stream_init_ext+0x57/0x180 [ 774.814750][T30487] sctp_stream_init_ext+0x57/0x180 [ 774.814777][T30487] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 774.814804][T30487] ? __asan_memcpy+0x40/0x70 [ 774.814838][T30487] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 774.814882][T30487] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 774.814912][T30487] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 774.814946][T30487] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 774.814984][T30487] ? __local_bh_enable_ip+0xd0/0x130 [ 774.815005][T30487] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 774.815034][T30487] ? security_sctp_bind_connect+0x7e/0x2c0 [ 774.815061][T30487] sctp_sendmsg+0x1b3d/0x2c10 [ 774.815107][T30487] ? __pfx_sctp_sendmsg+0x10/0x10 [ 774.815140][T30487] ? aa_sk_perm+0x6d5/0x900 [ 774.815175][T30487] ? __pfx_aa_sk_perm+0x10/0x10 [ 774.815214][T30487] ? sock_rps_record_flow+0x19/0x350 [ 774.815246][T30487] ? inet_sendmsg+0x2f4/0x370 [ 774.815278][T30487] ____sys_sendmsg+0x80a/0x9f0 [ 774.815316][T30487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.815354][T30487] ? import_iovec+0x73/0xa0 [ 774.815388][T30487] ___sys_sendmsg+0x2a5/0x360 [ 774.815413][T30487] ? __lock_acquire+0x6b5/0x2cf0 [ 774.815442][T30487] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.815474][T30487] ? kstrtouint+0x6e/0xe0 [ 774.815528][T30487] ? __fget_files+0x2a/0x420 [ 774.815552][T30487] ? __fget_files+0x3a0/0x420 [ 774.815588][T30487] __sys_sendmmsg+0x27c/0x4e0 [ 774.815621][T30487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 774.815646][T30487] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 774.815700][T30487] ? ksys_write+0x242/0x270 [ 774.815733][T30487] ? __pfx_ksys_write+0x10/0x10 [ 774.815769][T30487] __x64_sys_sendmmsg+0xa0/0xc0 [ 774.815797][T30487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815819][T30487] do_syscall_64+0x15f/0xf80 [ 774.815842][T30487] ? trace_irq_disable+0x3b/0x140 [ 774.815873][T30487] ? clear_bhb_loop+0x40/0x90 [ 774.815900][T30487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.815921][T30487] RIP: 0033:0x7fe06039cdd9 [ 774.815941][T30487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.815959][T30487] RSP: 002b:00007fe0612c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 774.815982][T30487] RAX: ffffffffffffffda RBX: 00007fe060615fa0 RCX: 00007fe06039cdd9 [ 774.815998][T30487] RDX: 0000000000000002 RSI: 0000200000003980 RDI: 0000000000000003 [ 774.816012][T30487] RBP: 00007fe0612c5090 R08: 0000000000000000 R09: 0000000000000000 [ 774.816025][T30487] R10: 00000000200448e0 R11: 0000000000000246 R12: 0000000000000002 [ 774.816039][T30487] R13: 00007fe060616038 R14: 00007fe060615fa0 R15: 00007ffcea0fddd8 [ 774.816075][T30487] [ 775.241345][T18282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.268660][T18282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.278169][T18282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.289882][T18282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.300203][T18282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.341607][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6021'. [ 775.493043][T30493] ipvlan2: entered promiscuous mode [ 775.771907][T30516] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 775.785150][T30518] netlink: 'syz.4.6024': attribute type 1 has an invalid length. [ 775.821622][T30516] netlink: 'syz.2.6026': attribute type 8 has an invalid length. [ 775.854282][T30516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6026'. [ 775.892004][T30518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.944788][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6028'. [ 775.968766][T30524] bond0: (slave veth7): Enslaving as an active interface with a down link [ 776.007839][T30516] veth1_to_team: entered promiscuous mode [ 776.015465][T30516] gretap0: entered promiscuous mode [ 776.023318][T30516] debugfs: 'hsr1' already exists in 'hsr' [ 776.029281][T30516] Cannot create hsr debugfs directory [ 776.040172][T30516] hsr1: entered promiscuous mode [ 776.046302][T30513] lo speed is unknown, defaulting to 1000 [ 776.097746][T30527] hsr_slave_0: left promiscuous mode [ 776.104988][T30527] hsr_slave_1: left promiscuous mode [ 776.126414][T30513] lo speed is unknown, defaulting to 1000 [ 776.358048][T30497] lo speed is unknown, defaulting to 1000 [ 776.823806][T30497] lo speed is unknown, defaulting to 1000 [ 777.189609][T30562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6036'. [ 777.346361][T30567] xt_hashlimit: size too large, truncated to 1048576 [ 777.391609][T18282] Bluetooth: hci0: command tx timeout [ 777.397287][T30564] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 777.628529][T30572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'. [ 777.891294][T30568] lo speed is unknown, defaulting to 1000 [ 777.953471][T30568] lo speed is unknown, defaulting to 1000 [ 778.180253][T30587] netlink: 'syz.4.6042': attribute type 1 has an invalid length. [ 778.364862][T30590] bond15: (slave bridge10): making interface the new active one [ 778.384771][T30590] bond15: (slave bridge10): Enslaving as an active interface with an up link [ 778.404152][T30587] 8021q: adding VLAN 0 to HW filter on device bond15 [ 778.493538][T25254] hsr0: entered promiscuous mode [ 779.000285][T30620] netlink: 'syz.0.6049': attribute type 61 has an invalid length. [ 779.008909][T30620] netlink: 'syz.0.6049': attribute type 64 has an invalid length. [ 779.024238][T30622] Bluetooth: MGMT ver 1.23 [ 779.031644][T30622] netlink: 'syz.1.6046': attribute type 3 has an invalid length. [ 779.470826][T18282] Bluetooth: hci0: command tx timeout [ 779.508375][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.546581][T30606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.213680][ T807] lo speed is unknown, defaulting to 1000 [ 780.223528][ T807] sqz0: Port: 1 Link DOWN [ 780.228570][ T807] lo speed is unknown, defaulting to 1000 [ 780.231055][T30623] __nla_validate_parse: 4 callbacks suppressed [ 780.231074][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6049'. [ 780.260171][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6049'. [ 780.310756][T30624] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 780.314836][ T7017] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.357322][ T7017] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 780.384173][ T7017] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.393994][ T7017] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 780.403077][T30497] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.413777][T30497] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.431937][T30497] bridge_slave_0: entered allmulticast mode [ 780.463076][T30497] bridge_slave_0: entered promiscuous mode [ 780.508284][ T7017] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.550839][ T7017] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 780.599291][ T7017] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 780.620700][ T7017] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 780.637340][T30497] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.655753][T30497] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.673177][T30497] bridge_slave_1: entered allmulticast mode [ 780.692079][T30497] bridge_slave_1: entered promiscuous mode [ 780.927957][T30629] lo speed is unknown, defaulting to 1000 [ 780.947553][T30497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.972428][T30629] lo speed is unknown, defaulting to 1000 [ 780.992113][T30497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.155865][T30497] team0: Port device team_slave_0 added [ 781.192700][T30497] team0: Port device team_slave_1 added [ 781.387767][T30497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.430928][T30497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.529810][T30497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.544080][T30497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.552613][T30497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.562945][T18282] Bluetooth: hci0: command tx timeout [ 781.579959][T30497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.876131][T30497] hsr_slave_0: entered promiscuous mode [ 781.884077][T30497] hsr_slave_1: entered promiscuous mode [ 781.891543][T30497] debugfs: 'hsr0' already exists in 'hsr' [ 781.897576][T30497] Cannot create hsr debugfs directory [ 782.017242][T30680] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6058'. [ 782.111938][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 782.186518][T30694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6060'. [ 782.198316][T30680] 0ªî{X¹¦: renamed from gretap0 [ 782.203631][T30696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6060'. [ 782.235235][T30680] 0ªî{X¹¦: entered allmulticast mode [ 782.248639][T30680] net_ratelimit: 20 callbacks suppressed [ 782.248661][T30680] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 782.712597][T30715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6066'. [ 782.752188][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 783.633120][T18282] Bluetooth: hci0: command tx timeout [ 784.130180][T24018] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 784.363309][T24018] bond8 (unregistering): (slave geneve4): Releasing active interface [ 784.736215][T24018] bond0 (unregistering): Released all slaves [ 784.748766][T24018] bond1 (unregistering): (slave veth3): Releasing active interface [ 784.762004][T24018] batadv1: entered promiscuous mode [ 784.769184][T24018] bond1 (unregistering): (slave batadv1): Releasing active interface [ 784.779534][T24018] bond1 (unregistering): Released all slaves [ 784.796002][T24018] bond2 (unregistering): Released all slaves [ 784.813552][T24018] bond3 (unregistering): Released all slaves [ 784.836008][T24018] bond4 (unregistering): Released all slaves [ 784.854674][T24018] bond5 (unregistering): Released all slaves [ 784.870107][T24018] bond6 (unregistering): Released all slaves [ 784.888657][T24018] bond7 (unregistering): Released all slaves [ 784.917050][T24018] bond8 (unregistering): Released all slaves [ 784.933123][T24018] bond9 (unregistering): Released all slaves [ 784.948328][T24018] bond10 (unregistering): Released all slaves [ 785.502471][T24018] 5Ò: left promiscuous mode [ 785.632802][T24018] : left promiscuous mode [ 785.721577][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6082'. [ 785.733625][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6082'. [ 785.823014][T24018] tipc: Disabling bearer [ 785.833373][T24018] tipc: Left network mode [ 785.890275][T30801] xfrm0: entered promiscuous mode [ 785.895661][T30801] xfrm0: entered allmulticast mode [ 785.910728][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6082'. [ 786.246281][T30813] 5nè‹Ò: entered promiscuous mode [ 786.475936][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6088'. [ 786.507901][T30497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 786.523891][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 786.557593][T30497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 786.574911][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 786.608856][T30497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 786.628443][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 786.644272][T30497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 786.681392][T30497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 786.705177][T30822] netlink: 'syz.4.6091': attribute type 1 has an invalid length. [ 786.962800][T24018] batman_adv: batadv0: Removing interface: macvtap1 [ 787.193120][T30852] FAULT_INJECTION: forcing a failure. [ 787.193120][T30852] name failslab, interval 1, probability 0, space 0, times 0 [ 787.206949][T30852] CPU: 0 UID: 0 PID: 30852 Comm: syz.0.6098 Not tainted syzkaller #0 PREEMPT(full) [ 787.206979][T30852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.206992][T30852] Call Trace: [ 787.207000][T30852] [ 787.207009][T30852] dump_stack_lvl+0xe8/0x150 [ 787.207039][T30852] should_fail_ex+0x412/0x560 [ 787.207069][T30852] should_failslab+0xa8/0x100 [ 787.207097][T30852] ? sctp_chunkify+0x5a/0x260 [ 787.207121][T30852] kmem_cache_alloc_noprof+0x87/0x650 [ 787.207157][T30852] sctp_chunkify+0x5a/0x260 [ 787.207184][T30852] _sctp_make_chunk+0x122/0x290 [ 787.207211][T30852] sctp_make_datafrag_empty+0x12a/0x240 [ 787.207238][T30852] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 787.207264][T30852] ? sctp_datamsg_from_user+0x88/0xef0 [ 787.207283][T30852] ? sctp_auth_send_cid+0x69/0x250 [ 787.207310][T30852] sctp_datamsg_from_user+0x729/0xef0 [ 787.207353][T30852] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 787.207389][T30852] ? __asan_memcpy+0x40/0x70 [ 787.207420][T30852] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 787.207469][T30852] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 787.207495][T30852] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 787.207530][T30852] ? __local_bh_enable_ip+0xd0/0x130 [ 787.207549][T30852] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 787.207575][T30852] ? security_sctp_bind_connect+0x7e/0x2c0 [ 787.207599][T30852] sctp_sendmsg+0x1b3d/0x2c10 [ 787.207642][T30852] ? __pfx_sctp_sendmsg+0x10/0x10 [ 787.207671][T30852] ? aa_sk_perm+0x6d5/0x900 [ 787.207703][T30852] ? __pfx_aa_sk_perm+0x10/0x10 [ 787.207730][T30852] ? sock_rps_record_flow+0x19/0x350 [ 787.207759][T30852] ? inet_sendmsg+0x2f4/0x370 [ 787.207789][T30852] ____sys_sendmsg+0x80a/0x9f0 [ 787.207824][T30852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.207858][T30852] ? import_iovec+0x73/0xa0 [ 787.207889][T30852] ___sys_sendmsg+0x2a5/0x360 [ 787.207911][T30852] ? __lock_acquire+0x6b5/0x2cf0 [ 787.207937][T30852] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.207967][T30852] ? kstrtouint+0x6e/0xe0 [ 787.208018][T30852] ? __fget_files+0x2a/0x420 [ 787.208041][T30852] ? __fget_files+0x3a0/0x420 [ 787.208074][T30852] __sys_sendmmsg+0x27c/0x4e0 [ 787.208105][T30852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 787.208127][T30852] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 787.208180][T30852] ? ksys_write+0x242/0x270 [ 787.208208][T30852] ? __pfx_ksys_write+0x10/0x10 [ 787.208243][T30852] __x64_sys_sendmmsg+0xa0/0xc0 [ 787.208267][T30852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.208287][T30852] do_syscall_64+0x15f/0xf80 [ 787.208308][T30852] ? trace_irq_disable+0x3b/0x140 [ 787.208336][T30852] ? clear_bhb_loop+0x40/0x90 [ 787.208370][T30852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.208389][T30852] RIP: 0033:0x7f2d9d99cdd9 [ 787.208409][T30852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.208425][T30852] RSP: 002b:00007f2d9e77a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 787.208449][T30852] RAX: ffffffffffffffda RBX: 00007f2d9dc15fa0 RCX: 00007f2d9d99cdd9 [ 787.208463][T30852] RDX: 0000000000000002 RSI: 0000200000003980 RDI: 0000000000000003 [ 787.208475][T30852] RBP: 00007f2d9e77a090 R08: 0000000000000000 R09: 0000000000000000 [ 787.208487][T30852] R10: 00000000200448e0 R11: 0000000000000246 R12: 0000000000000002 [ 787.208499][T30852] R13: 00007f2d9dc16038 R14: 00007f2d9dc15fa0 R15: 00007fff71218268 [ 787.208533][T30852] [ 787.741626][T30864] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6101'. [ 787.827965][T30864] syzkaller0: entered promiscuous mode [ 787.859123][T30864] syzkaller0: entered allmulticast mode [ 787.870050][T30864] tipc: Resetting bearer [ 788.053122][T30497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.131783][T30880] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6104'. [ 788.292304][T24018] veth1_macvtap: left promiscuous mode [ 788.319065][T24018] veth0_macvtap: left promiscuous mode [ 788.327466][T24018] veth1_vlan: left promiscuous mode [ 788.342946][T24018] veth0_vlan: left promiscuous mode [ 788.538755][T30892] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6109'. [ 789.311629][T30915] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6114'. [ 789.347434][T24018] team0 (unregistering): Port device dummy0 removed [ 789.416171][T30916] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6114'. [ 789.433634][T30497] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.479914][T24017] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.487311][T24017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.534450][T24017] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.541832][T24017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.645305][T30922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6116'. [ 789.695798][T30923] netlink: zone id is out of range [ 789.772423][T30923] netlink: zone id is out of range [ 789.809777][T30923] netlink: zone id is out of range [ 789.866675][T30923] netlink: zone id is out of range [ 789.896503][T30923] netlink: zone id is out of range [ 789.945089][T30923] netlink: zone id is out of range [ 789.976770][T30923] netlink: zone id is out of range [ 789.984540][T30923] netlink: zone id is out of range [ 789.994259][T30923] netlink: zone id is out of range [ 790.022029][T30923] netlink: zone id is out of range [ 790.201348][T30935] bond14: option arp_validate: invalid value (18446744072484223519) [ 790.258746][T30935] bond14 (unregistering): Released all slaves [ 790.379714][T30950] FAULT_INJECTION: forcing a failure. [ 790.379714][T30950] name failslab, interval 1, probability 0, space 0, times 0 [ 790.388597][T30944] bond16: option resend_igmp: invalid value (2878) [ 790.433029][T30950] CPU: 0 UID: 0 PID: 30950 Comm: syz.0.6122 Not tainted syzkaller #0 PREEMPT(full) [ 790.433060][T30950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.433071][T30950] Call Trace: [ 790.433079][T30950] [ 790.433089][T30950] dump_stack_lvl+0xe8/0x150 [ 790.433118][T30950] should_fail_ex+0x412/0x560 [ 790.433149][T30950] should_failslab+0xa8/0x100 [ 790.433179][T30950] __kmalloc_cache_noprof+0x88/0x660 [ 790.433207][T30950] ? sctp_datamsg_from_user+0x88/0xef0 [ 790.433236][T30950] sctp_datamsg_from_user+0x88/0xef0 [ 790.433257][T30950] ? __sk_mem_raise_allocated+0x290/0x1290 [ 790.433285][T30950] ? __genradix_ptr+0x1e1/0x220 [ 790.433331][T30950] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 790.433362][T30950] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 790.433387][T30950] ? __asan_memcpy+0x40/0x70 [ 790.433418][T30950] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 790.433460][T30950] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 790.433486][T30950] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 790.433514][T30950] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 790.433540][T30950] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 790.433563][T30950] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 790.433589][T30950] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 790.433615][T30950] ? security_sctp_bind_connect+0x7e/0x2c0 [ 790.433639][T30950] sctp_sendmsg+0x1b3d/0x2c10 [ 790.433682][T30950] ? __pfx_sctp_sendmsg+0x10/0x10 [ 790.433711][T30950] ? aa_sk_perm+0x6d5/0x900 [ 790.433732][T30950] ? __might_fault+0xaf/0x130 [ 790.433768][T30950] ? __pfx_aa_sk_perm+0x10/0x10 [ 790.433795][T30950] ? sock_rps_record_flow+0x19/0x350 [ 790.433824][T30950] ? inet_sendmsg+0x2f4/0x370 [ 790.433846][T30950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 790.433875][T30950] ____sys_sendmsg+0x80a/0x9f0 [ 790.433910][T30950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.433944][T30950] ? import_iovec+0x73/0xa0 [ 790.433975][T30950] ___sys_sendmsg+0x2a5/0x360 [ 790.433997][T30950] ? __lock_acquire+0x6b5/0x2cf0 [ 790.434022][T30950] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.434051][T30950] ? kstrtouint+0x6e/0xe0 [ 790.434102][T30950] ? __fget_files+0x2a/0x420 [ 790.434124][T30950] ? __fget_files+0x3a0/0x420 [ 790.434156][T30950] __sys_sendmmsg+0x27c/0x4e0 [ 790.434187][T30950] ? __pfx___sys_sendmmsg+0x10/0x10 [ 790.434207][T30950] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 790.434260][T30950] ? ksys_write+0x242/0x270 [ 790.434289][T30950] ? __pfx_ksys_write+0x10/0x10 [ 790.434332][T30950] __x64_sys_sendmmsg+0xa0/0xc0 [ 790.434355][T30950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.434376][T30950] do_syscall_64+0x15f/0xf80 [ 790.434396][T30950] ? trace_irq_disable+0x3b/0x140 [ 790.434423][T30950] ? clear_bhb_loop+0x40/0x90 [ 790.434446][T30950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.434465][T30950] RIP: 0033:0x7f2d9d99cdd9 [ 790.434486][T30950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.434503][T30950] RSP: 002b:00007f2d9e77a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 790.434525][T30950] RAX: ffffffffffffffda RBX: 00007f2d9dc15fa0 RCX: 00007f2d9d99cdd9 [ 790.434539][T30950] RDX: 0000000000000001 RSI: 00002000000089c0 RDI: 0000000000000003 [ 790.434551][T30950] RBP: 00007f2d9e77a090 R08: 0000000000000000 R09: 0000000000000000 [ 790.434564][T30950] R10: 00000000240448d1 R11: 0000000000000246 R12: 0000000000000002 [ 790.434576][T30950] R13: 00007f2d9dc16038 R14: 00007f2d9dc15fa0 R15: 00007fff71218268 [ 790.434610][T30950] [ 790.447429][T30944] bond16: option resend_igmp: allowed values 0 - 255 [ 790.850037][T30944] bond16 (unregistering): Released all slaves [ 790.993795][T30955] __nla_validate_parse: 3 callbacks suppressed [ 790.993819][T30955] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6123'. [ 791.088415][T15471] lo speed is unknown, defaulting to 1000 [ 791.105064][T15471] sqz0: Port: 1 Link ACTIVE [ 791.188681][T15471] lo speed is unknown, defaulting to 1000 [ 791.229483][T24018] IPVS: stop unused estimator thread 0... [ 791.329637][T30979] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6126'. [ 791.405026][T30971] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6126'. [ 791.478425][T30985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6127'. [ 791.603424][T30990] nft_compat: unsupported protocol 5 [ 791.825014][T30497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.924603][T30497] veth0_vlan: entered promiscuous mode [ 791.961114][T30497] veth1_vlan: entered promiscuous mode [ 792.037638][T30497] veth0_macvtap: entered promiscuous mode [ 792.063562][T30497] veth1_macvtap: entered promiscuous mode [ 792.071227][T31013] netlink: 'syz.1.6135': attribute type 1 has an invalid length. [ 792.114083][T30497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.181843][T30497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.313884][T24018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.339013][T24018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.384050][T24018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.414467][T24018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.460113][T24018] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.539445][T24018] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.567153][T24018] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.614310][T24018] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.623755][T31038] tipc: Started in network mode [ 792.628837][T31038] tipc: Node identity 0a66c5f042cf, cluster identity 4711 [ 792.638025][T31038] tipc: Enabled bearer , priority 0 [ 792.655821][T31036] netlink: 'syz.2.6143': attribute type 4 has an invalid length. [ 792.710254][T31043] netlink: 'syz.2.6143': attribute type 4 has an invalid length. [ 792.764659][T31031] syzkaller0: entered promiscuous mode [ 792.770217][T31031] syzkaller0: entered allmulticast mode [ 792.776680][T31031] tipc: Resetting bearer [ 792.873132][T31030] tipc: Resetting bearer [ 796.551022][T31030] tipc: Disabling bearer [ 796.593533][ T5817] tipc: Node number set to 1219085808 [ 796.676354][T24017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.698296][T24017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.804825][T24017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.818974][T24017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.997936][T31076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6153'. [ 797.048171][T31076] net_ratelimit: 2 callbacks suppressed [ 797.048274][T31076] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 797.105988][T31078] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.161324][T31078] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.382717][T31078] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.439524][T31078] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.470585][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.634086][T31078] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.665548][T31078] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.725058][T18932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 797.737515][T18932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 797.748802][T18932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 797.764219][T18932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 797.772282][T18932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 797.867241][T31107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6161'. [ 797.928305][T31107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6161'. [ 797.968887][T31078] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.983585][T31114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma? [ 797.989723][T31078] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.023502][T31107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6161'. [ 798.033477][T31107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6161'. [ 798.357382][ T7007] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.395055][ T7007] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.472943][T24020] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.501721][T24020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.576546][T24020] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.586559][T24020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.593954][T31135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6168'. [ 798.634706][T24020] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.663269][T24020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.687450][T31098] lo speed is unknown, defaulting to 1000 [ 798.696321][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6168'. [ 798.747521][T31098] lo speed is unknown, defaulting to 1000 [ 798.750991][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 799.484675][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 799.515630][T31162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 799.864074][T31178] netlink: 'syz.3.6178': attribute type 1 has an invalid length. [ 799.872046][T18282] Bluetooth: hci5: command tx timeout [ 799.945458][T31177] gretap1: entered allmulticast mode [ 800.190142][T31098] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.233087][T31098] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.284559][T31098] bridge_slave_0: entered allmulticast mode [ 800.322896][T31098] bridge_slave_0: entered promiscuous mode [ 800.335378][T31098] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.346900][T31098] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.355954][T31098] bridge_slave_1: entered allmulticast mode [ 800.368301][T31098] bridge_slave_1: entered promiscuous mode [ 800.424291][T31200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6183'. [ 800.447722][T31098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.604554][T31195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.641999][T31098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.852406][T31195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.929530][T31098] team0: Port device team_slave_0 added [ 800.948392][T31098] team0: Port device team_slave_1 added [ 801.085061][T31195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.296386][T31098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.338911][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.410750][T31098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.532394][T31231] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:0 [ 801.953801][T18282] Bluetooth: hci5: command tx timeout [ 803.671552][T31236] openvswitch: netlink: IP tunnel dst address not specified [ 804.051196][T18282] Bluetooth: hci5: command tx timeout [ 805.354825][T31195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.371708][T31098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.378862][T31098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.406117][T31098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.564840][T31098] hsr_slave_0: entered promiscuous mode [ 805.588591][T31098] hsr_slave_1: entered promiscuous mode [ 805.597056][T31098] debugfs: 'hsr0' already exists in 'hsr' [ 805.607633][T31098] Cannot create hsr debugfs directory [ 805.613981][T31240] tipc: Enabling of bearer rejected, already enabled [ 805.805314][T31254] __nla_validate_parse: 2 callbacks suppressed [ 805.805339][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'. [ 805.830269][ T7007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.846706][T31254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6197'. [ 805.862356][T31254] bond0: ARP target 170.170.170.170 is already present [ 805.875913][T31254] bond0: option arp_ip_target: invalid value (2863311530) [ 805.902999][T24020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.049406][T24020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.111104][T18282] Bluetooth: hci5: command tx timeout [ 806.119776][T24020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.132968][T31258] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 806.221843][T31262] lo speed is unknown, defaulting to 1000 [ 806.247973][T31262] lo speed is unknown, defaulting to 1000 [ 806.519520][T31098] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.546386][T31098] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.730941][T31098] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.741292][T31098] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.801286][T31271] lo speed is unknown, defaulting to 1000 [ 806.837694][T31271] lo speed is unknown, defaulting to 1000 [ 806.912711][T31098] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.932492][T31098] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.093955][T31283] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6205'. [ 807.114675][T31283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6205'. [ 807.190020][T31287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6207'. [ 807.203071][T31098] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.213832][T31098] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.256300][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6207'. [ 807.691377][T31301] netlink: 'syz.4.6212': attribute type 1 has an invalid length. [ 807.928025][T31301] bond16: entered promiscuous mode [ 807.935740][T31301] 8021q: adding VLAN 0 to HW filter on device bond16 [ 807.948813][T31304] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 808.194739][T31321] netlink: 'syz.4.6214': attribute type 1 has an invalid length. [ 808.204811][T31321] netlink: 'syz.4.6214': attribute type 4 has an invalid length. [ 808.213857][T31315] syzkaller1: entered promiscuous mode [ 808.219798][T31321] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6214'. [ 808.231138][T31315] syzkaller1: entered allmulticast mode [ 808.237643][T31321] netlink: 'syz.4.6214': attribute type 1 has an invalid length. [ 808.255927][T31321] netlink: 'syz.4.6214': attribute type 4 has an invalid length. [ 808.264481][T31321] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6214'. [ 808.434075][T31098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 808.462138][T31098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.491771][T31098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 808.510211][T31098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.519163][T31098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 808.538505][T31098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.553188][T31098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 808.565748][T31098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 808.738763][T31098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.837977][T31098] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.885987][T24017] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.893272][T24017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.962590][T24017] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.969909][T24017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.538387][T31369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 809.582314][T31369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 809.623922][T31371] veth0_virt_wifi: entered promiscuous mode [ 809.662282][T31371] veth0_virt_wifi: entered allmulticast mode [ 809.726170][T31373] netlink: 'syz.3.6225': attribute type 1 has an invalid length. [ 809.735336][T31367] openvswitch: netlink: IP tunnel TTL not specified. [ 810.385411][T31396] netlink: 'syz.1.6231': attribute type 1 has an invalid length. [ 810.395986][T31098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.464854][T31396] bond14: entered promiscuous mode [ 810.471962][T31396] 8021q: adding VLAN 0 to HW filter on device bond14 [ 810.642651][T31098] veth0_vlan: entered promiscuous mode [ 810.689339][T31098] veth1_vlan: entered promiscuous mode [ 810.817611][T31098] veth0_macvtap: entered promiscuous mode [ 810.867428][T31098] veth1_macvtap: entered promiscuous mode [ 810.949385][T31098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.014602][T31098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.069968][ T7007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.103512][ T7007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.155952][ T7007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.179292][ T7007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.457896][T24020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.475211][T24020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.573689][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.600847][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.737943][T31438] __nla_validate_parse: 4 callbacks suppressed [ 811.737964][T31438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6156'. [ 827.552153][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.111193][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 860.223395][ T7007] tipc: Resetting bearer [ 860.460303][ T7007] gretap0 (unregistering): left promiscuous mode [ 860.470294][ T7007] tipc: Disabling bearer [ 860.876580][ T7007] bond9 (unregistering): (slave bridge7): Releasing active interface [ 860.934545][ T7007] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 860.985399][ T7007] bond0 (unregistering): Released all slaves [ 860.997232][ T7007] bond1 (unregistering): Released all slaves [ 861.012503][ T7007] bond2 (unregistering): Released all slaves [ 861.027409][ T7007] bond3 (unregistering): Released all slaves [ 861.044010][ T7007] bond4 (unregistering): (slave dummy0): Releasing active interface [ 861.055299][ T7007] bond4 (unregistering): Released all slaves [ 861.077109][ T7007] bond5 (unregistering): Released all slaves [ 861.095419][ T7007] bond6 (unregistering): Released all slaves [ 861.110063][ T7007] bond7 (unregistering): Released all slaves [ 861.136895][ T7007] bond8 (unregistering): Released all slaves [ 861.153884][ T7007] bond9 (unregistering): Released all slaves [ 861.168793][ T7007] bond10 (unregistering): Released all slaves [ 861.185803][ T7007] bond11 (unregistering): Released all slaves [ 861.436289][ T7007] : left promiscuous mode [ 861.549027][ T7007] tipc: Left network mode [ 861.594905][ T7007] IPVS: stopping backup sync thread 29188 ... [ 862.055276][ T7007] veth1_to_team: left promiscuous mode [ 862.063974][ T7007] hsr_slave_0: left promiscuous mode [ 862.070042][ T7007] hsr_slave_1: left promiscuous mode [ 862.080277][ T7007] veth1_macvtap: left promiscuous mode [ 862.086081][ T7007] veth0_macvtap: left promiscuous mode [ 862.711926][ T7007] IPVS: stop unused estimator thread 0... [ 898.110574][T18932] Bluetooth: hci0: command 0x0406 tx timeout [ 923.710794][T18282] Bluetooth: hci5: command 0x0406 tx timeout [ 931.054755][T18282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 931.078340][T18282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 931.088694][T18282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 931.107250][T18282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 931.118345][T18282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 931.299114][T31491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 931.478731][T31494] lo speed is unknown, defaulting to 1000 [ 931.521935][T31494] lo speed is unknown, defaulting to 1000 [ 931.537414][T31496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6252'. [ 931.572468][T31496] netlink: 'syz.1.6252': attribute type 1 has an invalid length. [ 931.755515][T31499] 0ªî{X¹¦: entered promiscuous mode [ 931.831860][T31499] vlan1: entered promiscuous mode [ 931.981199][T31478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6246'. [ 932.278850][T31512] tipc: Started in network mode [ 932.290608][T31512] tipc: Node identity 86a35f5a8ddb, cluster identity 4711 [ 932.310198][T31512] tipc: Enabled bearer , priority 0 [ 932.324342][T31482] lo speed is unknown, defaulting to 1000 [ 932.339070][T31512] syzkaller0: entered promiscuous mode [ 932.350734][T31512] syzkaller0: entered allmulticast mode [ 932.426293][T31512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6254'. [ 932.466813][T31512] tipc: Resetting bearer [ 932.495466][T31511] tipc: Resetting bearer [ 932.537836][T31520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6255'. [ 932.569594][T31511] tipc: Disabling bearer [ 932.604484][T31521] netlink: 'syz.1.6256': attribute type 28 has an invalid length. [ 932.667547][T31520] veth1_macvtap: renamed from macvlan0 [ 932.706464][T31482] lo speed is unknown, defaulting to 1000 [ 933.205494][T31533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6259'. [ 933.231898][T18282] Bluetooth: hci2: command tx timeout [ 933.744217][T31542] lo speed is unknown, defaulting to 1000 [ 933.774211][T31542] lo speed is unknown, defaulting to 1000 [ 933.883105][T31560] bridge0: port 1(vlan3) entered blocking state [ 933.897384][T31560] bridge0: port 1(vlan3) entered disabled state [ 933.912112][T31560] vlan3: entered allmulticast mode [ 933.924756][T31560] geneve0: entered allmulticast mode [ 934.194619][T31568] xt_TCPMSS: Only works on TCP SYN packets [ 934.586362][T31482] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.602903][T31482] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.611437][T31482] bridge_slave_0: entered allmulticast mode [ 934.620943][T31482] bridge_slave_0: entered promiscuous mode [ 934.678327][T31482] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.687992][T31482] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.697146][T31482] bridge_slave_1: entered allmulticast mode [ 934.706106][T31482] bridge_slave_1: entered promiscuous mode [ 935.047563][T31482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.095011][T31482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.312383][T18282] Bluetooth: hci2: command tx timeout [ 935.335090][T31482] team0: Port device team_slave_0 added [ 935.358949][T31482] team0: Port device team_slave_1 added [ 935.526327][T31482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.541612][T31482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.596658][T31482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.693024][T31482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.705857][T31482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.731243][T31615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6272'. [ 935.765934][T31482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.998145][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6275'. [ 936.035880][T31482] hsr_slave_0: entered promiscuous mode [ 936.043398][T31482] hsr_slave_1: entered promiscuous mode [ 936.697964][T31482] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.735710][T31482] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.812251][T31655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6281'. [ 936.814669][T31648] lo speed is unknown, defaulting to 1000 [ 936.843929][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'. [ 936.886730][T31482] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 936.909833][T31482] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.950648][T31648] lo speed is unknown, defaulting to 1000 [ 936.960694][T31655] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6281'. [ 937.009636][T31482] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.035056][T31482] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.230140][T31482] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 937.262824][T31482] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.342920][T31669] netlink: 'syz.0.6283': attribute type 1 has an invalid length. [ 937.390439][T18282] Bluetooth: hci2: command tx timeout [ 937.438058][T31669] 8021q: adding VLAN 0 to HW filter on device bond6 [ 937.641880][T31663] bond6: (slave veth13): Enslaving as an active interface with an up link [ 937.671014][T31681] netlink: 'syz.0.6283': attribute type 1 has an invalid length. [ 937.688292][T31663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6283'. [ 937.965405][T31692] openvswitch: netlink: IP tunnel dst address not specified [ 937.965514][T31691] openvswitch: netlink: IP tunnel dst address not specified [ 938.015866][T31482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 938.049284][T31482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 938.069069][T31482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 938.084271][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 938.087217][T31482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 938.126808][T31482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 938.145901][T31482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 938.172299][T31482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 938.251244][T31482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 938.504703][T31710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6293'. [ 938.556873][T31482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.639880][T31482] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.678920][T24017] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.686224][T24017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.804782][T24020] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.812078][T24020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.858173][T31707] lo speed is unknown, defaulting to 1000 [ 938.895255][T31707] lo speed is unknown, defaulting to 1000 [ 939.356693][T31726] xt_socket: unknown flags 0x4 [ 939.470864][T18282] Bluetooth: hci2: command tx timeout [ 939.567575][T31730] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6297'. [ 939.927808][T31746] netlink: 364 bytes leftover after parsing attributes in process `syz.2.6301'. [ 940.207012][T31482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.218919][T31755] netlink: 'syz.0.6303': attribute type 13 has an invalid length. [ 941.061560][T31482] veth0_vlan: entered promiscuous mode [ 941.104321][T31482] veth1_vlan: entered promiscuous mode [ 941.147106][T31773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6307'. [ 941.219881][T31482] veth0_macvtap: entered promiscuous mode [ 941.250168][T31777] netlink: 'syz.1.6308': attribute type 13 has an invalid length. [ 941.263380][T31482] veth1_macvtap: entered promiscuous mode [ 941.457214][T31781] wireguard1: entered promiscuous mode [ 941.463180][T31781] wireguard1: entered allmulticast mode [ 941.469987][T31781] team0: Device wireguard1 is up. Set it down before adding it as a team port [ 941.506302][T31785] dvmrp0: entered allmulticast mode [ 941.564994][T31482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.599704][T31482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.695697][T24019] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.724923][T24019] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.745420][T24019] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.773716][T24019] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.823394][T31802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6315'. [ 941.836528][T31803] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 942.064043][T24019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.083111][T24019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.159784][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.185641][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.208570][T31816] netlink: 272 bytes leftover after parsing attributes in process `syz.2.6320'. [ 942.265606][T31819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6321'. [ 943.515497][T18932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 943.529832][T18932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 943.544029][T18932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 943.559583][T18932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 943.569575][T18932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 943.602451][T31856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6329'. [ 944.333896][T31875] syzkaller1: entered promiscuous mode [ 944.362210][T31875] syzkaller1: entered allmulticast mode [ 944.387487][T31879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6334'. [ 944.547927][T31888] netlink: 'syz.4.6336': attribute type 5 has an invalid length. [ 944.687949][T31893] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.6337'. [ 944.726920][T31853] lo speed is unknown, defaulting to 1000 [ 944.751086][T31853] lo speed is unknown, defaulting to 1000 [ 944.766313][T31895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6338'. [ 944.966907][T31901] lo speed is unknown, defaulting to 1000 [ 945.259406][T31901] lo speed is unknown, defaulting to 1000 [ 945.630951][T18282] Bluetooth: hci1: command tx timeout [ 945.664396][T31918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6345'. [ 945.822756][T15471] hsr0: entered promiscuous mode [ 945.830090][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 945.991839][T31939] netlink: 'syz.4.6349': attribute type 21 has an invalid length. [ 946.022458][T31939] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6349'. [ 946.181803][T31853] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.230108][T31853] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.258648][T31853] bridge_slave_0: entered allmulticast mode [ 946.279842][T31853] bridge_slave_0: entered promiscuous mode [ 946.388986][T31853] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.405001][T31853] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.426519][T31853] bridge_slave_1: entered allmulticast mode [ 946.448587][T31853] bridge_slave_1: entered promiscuous mode [ 946.662615][T31853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.015522][T31955] bond1: option all_slaves_active: invalid value (5) [ 947.067349][T31955] bond1 (unregistering): Released all slaves [ 947.152431][T31853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.334062][T31853] team0: Port device team_slave_0 added [ 947.366161][T31853] team0: Port device team_slave_1 added [ 947.475249][T31853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.500206][T31853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.560643][T31853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.590064][T31853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.597579][T31853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.650650][T31853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.711885][T18282] Bluetooth: hci1: command tx timeout [ 947.774176][T31972] netlink: 'syz.3.6356': attribute type 3 has an invalid length. [ 947.940097][T31981] __nla_validate_parse: 1 callbacks suppressed [ 947.940121][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6357'. [ 948.194325][T31853] hsr_slave_0: entered promiscuous mode [ 948.212450][T31853] hsr_slave_1: entered promiscuous mode [ 948.232659][T31853] debugfs: 'hsr0' already exists in 'hsr' [ 948.260504][T31853] Cannot create hsr debugfs directory [ 948.283540][T31996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6362'. [ 948.530845][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 948.783822][T32016] gre4: entered promiscuous mode [ 948.936762][T32023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6368'. [ 949.794389][T18282] Bluetooth: hci1: command tx timeout [ 950.185110][T32067] tipc: Enabling of bearer rejected, failed to enable media [ 950.202514][T32067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6376'. [ 950.647590][T32080] syzkaller0: entered promiscuous mode [ 950.662309][T32080] syzkaller0: entered allmulticast mode [ 950.864037][T32086] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.874626][T32086] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.363290][T32115] netlink: 'syz.2.6386': attribute type 1 has an invalid length. [ 951.395748][T32115] netlink: 2084 bytes leftover after parsing attributes in process `syz.2.6386'. [ 951.407124][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6385'. [ 951.545572][T25254] IPVS: starting estimator thread 0... [ 951.554208][T32119] gretap1: left allmulticast mode [ 951.584517][T32128] netlink: 'syz.2.6389': attribute type 1 has an invalid length. [ 951.587054][T32119] 8021q: adding VLAN 0 to HW filter on device eth0 [ 951.602994][T32119] 8021q: adding VLAN 0 to HW filter on device eth1 [ 951.612953][T32119] 8021q: adding VLAN 0 to HW filter on device eth2 [ 951.622903][T32119] 8021q: adding VLAN 0 to HW filter on device eth3 [ 951.650754][T32126] IPVS: using max 27 ests per chain, 64800 per kthread [ 951.699045][T31853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 951.714205][T31853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.864926][T32117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.876423][T18282] Bluetooth: hci1: command tx timeout [ 951.889723][T32117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.045556][T32128] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 952.049209][T31853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 952.123382][T31853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.167545][T24020] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.222065][T24017] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.246795][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 952.284120][T31853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 952.305569][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 952.333258][T31853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.389108][T31853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 952.442888][T31853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.488858][T24017] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.507697][T24017] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.559110][T32135] lo speed is unknown, defaulting to 1000 [ 952.588018][T32166] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 952.624359][T32135] lo speed is unknown, defaulting to 1000 [ 952.767436][T32166] vti0: entered promiscuous mode [ 952.781525][T32173] netlink: 'syz.0.6395': attribute type 8 has an invalid length. [ 952.824146][T32166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6395'. [ 953.086212][T31853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.195469][T31853] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.248348][T24017] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.255661][T24017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.340771][T24019] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.348027][T24019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.533356][T32192] syzkaller0: entered promiscuous mode [ 953.543854][T32192] syzkaller0: entered allmulticast mode [ 953.967034][T32209] __nla_validate_parse: 2 callbacks suppressed [ 953.967058][T32209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6401'. [ 954.296380][T32216] netlink: 'syz.2.6403': attribute type 6 has an invalid length. [ 954.694766][T32230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6405'. [ 955.231055][T32250] netlink: 'syz.4.6409': attribute type 11 has an invalid length. [ 955.242633][T32250] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6409'. [ 955.859535][T31853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.072574][T31853] veth0_vlan: entered promiscuous mode [ 956.112930][T31853] veth1_vlan: entered promiscuous mode [ 956.265798][T31853] veth0_macvtap: entered promiscuous mode [ 956.316580][T31853] veth1_macvtap: entered promiscuous mode [ 956.432062][T31853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.519709][T31853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.596225][T32279] lo speed is unknown, defaulting to 1000 [ 956.610636][T24020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.636263][T32279] lo speed is unknown, defaulting to 1000 [ 956.675620][T24020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.714298][T24020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.731840][T32293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6414'. [ 956.787739][T24020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.981112][T32292] lo speed is unknown, defaulting to 1000 [ 957.197599][T24018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.233705][T24018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.351774][T24018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.374227][T24018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.729806][T32292] lo speed is unknown, defaulting to 1000 [ 958.246372][T18932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 958.262710][T18932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 958.278552][T18932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 958.290451][T18932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 958.302173][T18932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.728116][T32325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6417'. [ 958.785409][T32328] netlink: 'syz.1.6417': attribute type 2 has an invalid length. [ 958.852058][T32307] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 959.950083][T32314] lo speed is unknown, defaulting to 1000 [ 960.001802][T32314] lo speed is unknown, defaulting to 1000 [ 960.433101][T18282] Bluetooth: hci4: command tx timeout [ 960.921466][T32359] netlink: 'syz.2.6423': attribute type 1 has an invalid length. [ 961.299434][T32370] netlink: 'syz.1.6426': attribute type 1 has an invalid length. [ 961.321890][T32370] netlink: 'syz.1.6426': attribute type 2 has an invalid length. [ 961.368029][T32376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6427'. [ 961.549131][T32388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6429'. [ 961.560530][T32388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6429'. [ 961.652663][T32390] x_tables: duplicate underflow at hook 1 [ 961.800459][T24017] bond4 (unregistering): (slave geneve4): Releasing active interface [ 961.824929][T24017] bond1 (unregistering): (slave geneve2): Releasing active interface [ 962.186895][T24017] bond0 (unregistering): Released all slaves [ 962.194427][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.215067][T24017] bond1 (unregistering): Released all slaves [ 962.229803][T24017] bond2 (unregistering): Released all slaves [ 962.244709][T24017] bond3 (unregistering): Released all slaves [ 962.267261][T24017] bond4 (unregistering): Released all slaves [ 962.287192][T24017] bond5 (unregistering): Released all slaves [ 962.305342][T24017] bond6 (unregistering): (slave veth13): Releasing backup interface [ 962.322626][T24017] bond6 (unregistering): Released all slaves [ 962.339924][T32371] netlink: 364 bytes leftover after parsing attributes in process `syz.1.6426'. [ 962.350531][T32371] netlink: 82 bytes leftover after parsing attributes in process `syz.1.6426'. [ 962.359842][T32370] netlink: 364 bytes leftover after parsing attributes in process `syz.1.6426'. [ 962.369724][T32370] netlink: 82 bytes leftover after parsing attributes in process `syz.1.6426'. [ 962.431023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.511788][T18282] Bluetooth: hci4: command tx timeout [ 962.579745][T24017] hmó3)óÿ: left promiscuous mode [ 962.608443][T32401] netlink: 'syz.3.6435': attribute type 10 has an invalid length. [ 962.631023][T32400] netlink: 'syz.3.6435': attribute type 10 has an invalid length. [ 962.654968][T32400] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 962.693127][T32402] netlink: 'syz.1.6433': attribute type 1 has an invalid length. [ 962.767582][T32401] bond0: (slave dummy0): Releasing backup interface [ 962.802375][T32401] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 962.822697][T32401] team0: Failed to send options change via netlink (err -105) [ 962.860459][T32401] team0: Port device dummy0 added [ 963.009680][T32417] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6437'. [ 963.073482][T24017] tipc: Disabling bearer [ 963.083468][T24017] tipc: Disabling bearer [ 963.120759][T24017] tipc: Left network mode [ 963.253028][ T5817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.265791][T32425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6438'. [ 963.346561][T32413] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 963.438638][T32433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6440'. [ 963.676833][T32425] bridge_slave_0: invalid flags given to default FDB implementation [ 963.809468][T24017] IPVS: stopping backup sync thread 22331 ... [ 964.355976][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 964.420888][T32314] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.441288][T32314] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.457355][T32314] bridge_slave_0: entered allmulticast mode [ 964.477610][T32314] bridge_slave_0: entered promiscuous mode [ 964.488604][T32314] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.497817][T32314] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.512997][T32314] bridge_slave_1: entered allmulticast mode [ 964.539187][T32314] bridge_slave_1: entered promiscuous mode [ 964.590772][T18282] Bluetooth: hci4: command tx timeout [ 964.742217][T32314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.816043][T32314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.837703][T32496] lo speed is unknown, defaulting to 1000 [ 964.899364][T32496] lo speed is unknown, defaulting to 1000 [ 965.015872][T32314] team0: Port device team_slave_0 added [ 965.035762][T32314] team0: Port device team_slave_1 added [ 965.300745][T32314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.329437][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.370760][T32314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.449643][T32314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.461594][T32314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.544343][T32314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.159939][T32314] hsr_slave_0: entered promiscuous mode [ 966.182906][T32314] hsr_slave_1: entered promiscuous mode [ 966.204546][T32314] debugfs: 'hsr0' already exists in 'hsr' [ 966.217333][T32314] Cannot create hsr debugfs directory [ 966.671375][T18282] Bluetooth: hci4: command tx timeout [ 966.687558][T32554] netlink: 'syz.4.6464': attribute type 3 has an invalid length. [ 966.888931][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 967.148292][T32569] __nla_validate_parse: 4 callbacks suppressed [ 967.148315][T32569] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6466'. [ 967.863023][T24017] IPVS: stop unused estimator thread 0... [ 968.045841][T32603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6477'. [ 968.086115][T32603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'. [ 968.102730][T32604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6476'. [ 968.127898][T32603] netlink: 'syz.1.6477': attribute type 11 has an invalid length. [ 968.339967][ T7017] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.364539][ T7017] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.437104][ T7017] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.476655][T32621] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6478'. [ 968.479522][ T7017] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.495999][T32621] openvswitch: netlink: Missing key (keys=40, expected=100) [ 968.714141][T32631] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6479'. [ 969.403900][T32657] batadv_slave_0: entered promiscuous mode [ 969.546049][T32656] batadv_slave_0: left promiscuous mode [ 969.928792][T32678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6491'. [ 969.960028][T32678] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6491'. [ 969.988812][T32678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6491'. [ 970.055330][T32686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6491'. [ 970.176720][T32314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 970.224070][T32314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.261135][T32314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 970.298763][T32314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.390598][T32314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 970.434401][T32314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.550786][T32314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.599027][T32314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.031531][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.039224][T32723] netlink: 'syz.2.6498': attribute type 13 has an invalid length. [ 971.063245][T32723] netlink: 'syz.2.6498': attribute type 17 has an invalid length. [ 971.070364][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.083443][T32723] netlink: 'syz.2.6498': attribute type 27 has an invalid length. [ 971.160098][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.194032][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.224448][T32725] lo speed is unknown, defaulting to 1000 [ 971.251008][T32725] lo speed is unknown, defaulting to 1000 [ 971.287568][T32314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.351593][T32314] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.385570][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.392830][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.435798][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.443160][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.407037][ T312] __nla_validate_parse: 6 callbacks suppressed [ 972.407059][ T312] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6510'. [ 972.909795][ T330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6513'. [ 973.152099][T32314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.357709][T32314] veth0_vlan: entered promiscuous mode [ 973.380098][ T351] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6515'. [ 973.399053][T32314] veth1_vlan: entered promiscuous mode [ 973.544015][T32314] veth0_macvtap: entered promiscuous mode [ 973.603880][T32314] veth1_macvtap: entered promiscuous mode [ 973.673444][T32314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.738381][T32314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.787002][ T7007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.820809][ T7007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.875152][ T7007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.966577][ T7017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.002118][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6524'. [ 974.035831][ T385] netlink: 'syz.1.6526': attribute type 5 has an invalid length. [ 974.055286][ T390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6524'. [ 974.284011][T24017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.319001][T24017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.489973][ T7007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.527360][ T7007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.700170][ T412] vlan2: entered promiscuous mode [ 974.720017][ T412] bridge0: entered promiscuous mode [ 975.118025][ T440] netlink: 'syz.1.6538': attribute type 1 has an invalid length. [ 975.167342][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6539'. [ 975.169471][ T443] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6540'. [ 975.193185][ T439] block nbd6: Unsupported socket: should be TCP or UNIX. [ 975.219512][ T440] bond1: entered promiscuous mode [ 975.225473][ T440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.335792][ T451] netlink: 'syz.3.6542': attribute type 1 has an invalid length. [ 975.371888][ T451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.404150][ T450] bond1: (slave geneve2): making interface the new active one [ 975.430121][ T450] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 975.454356][ T7007] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 975.480909][ T7007] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 975.560689][ T440] bond1: (slave bridge1): making interface the new active one [ 975.585368][ T440] bridge1: entered promiscuous mode [ 975.617363][ T440] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 975.657434][ T7007] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 975.695749][ T7007] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 975.732142][ T468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 976.208962][ T490] netlink: 'syz.4.6550': attribute type 11 has an invalid length. [ 976.320161][ T499] tipc: Started in network mode [ 976.347947][ T499] tipc: Node identity e269bf104d3, cluster identity 4711 [ 976.358109][ T499] tipc: Enabled bearer , priority 0 [ 976.503468][ T499] syzkaller0: entered promiscuous mode [ 976.509395][ T499] syzkaller0: entered allmulticast mode [ 976.520941][ T499] tipc: Resetting bearer [ 976.542687][ T511] netlink: 'syz.1.6556': attribute type 1 has an invalid length. [ 976.589365][ T496] tipc: Resetting bearer [ 976.652863][ T517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6558'. [ 976.663520][ T517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6558'. [ 976.691902][ T517] netlink: 'syz.3.6558': attribute type 1 has an invalid length. [ 980.241559][ T496] tipc: Disabling bearer [ 980.252509][ T511] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 980.272666][ T517] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 980.282588][T15458] tipc: Node number set to 2941894416 [ 980.504465][ T532] tipc: Started in network mode [ 980.510691][ T532] tipc: Node identity 567d84318fcc, cluster identity 4711 [ 980.527681][ T532] tipc: Enabled bearer , priority 0 [ 980.536541][ T536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6562'. [ 980.546768][ T532] syzkaller0: entered promiscuous mode [ 980.558838][ T532] syzkaller0: entered allmulticast mode [ 980.603783][ T540] x_tables: duplicate underflow at hook 1 [ 980.652924][ T542] tipc: Resetting bearer [ 980.660537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.695205][ T543] veth1_to_bond: entered allmulticast mode [ 980.711735][ T545] netlink: 'syz.3.6568': attribute type 1 has an invalid length. [ 980.729122][ T545] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6568'. [ 980.747060][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6566'. [ 980.770364][ T545] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6568'. [ 980.779909][ T549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6568'. [ 980.793070][ T530] tipc: Resetting bearer [ 980.864044][ T530] tipc: Disabling bearer [ 980.891774][ T543] veth1_to_bond (unregistering): left allmulticast mode [ 980.926554][ T543] bond0: (slave bond_slave_1): Releasing backup interface [ 980.948035][ T554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'. [ 980.987969][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 981.025691][ T561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6572'. [ 981.060843][ T554] netlink: 'syz.2.6570': attribute type 12 has an invalid length. [ 981.115803][ T561] macsec1: entered promiscuous mode [ 981.135727][ T561] team0: entered promiscuous mode [ 981.156163][ T561] team_slave_0: entered promiscuous mode [ 981.163375][ T561] team_slave_1: entered promiscuous mode [ 981.180981][ T561] macsec1: entered allmulticast mode [ 981.190752][ T561] team0: entered allmulticast mode [ 981.200442][ T561] team_slave_0: entered allmulticast mode [ 981.209155][ T571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6574'. [ 981.223282][ T561] team_slave_1: entered allmulticast mode [ 981.229586][ T561] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 981.243945][ T561] team0: Device macsec1 is already an upper device of the team interface [ 981.254412][ T561] team0: left allmulticast mode [ 981.261026][ T561] team_slave_0: left allmulticast mode [ 981.270426][ T561] team_slave_1: left allmulticast mode [ 981.281501][ T561] team0: left promiscuous mode [ 981.286637][ T561] team_slave_0: left promiscuous mode [ 981.292918][ T561] team_slave_1: left promiscuous mode [ 981.331742][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6574'. [ 981.331870][ T554] netlink: 'syz.2.6570': attribute type 12 has an invalid length. [ 981.559307][ T586] xt_TCPMSS: Only works on TCP SYN packets [ 981.608815][ T589] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 268435459, id = 0 [ 981.929933][ T598] lo speed is unknown, defaulting to 1000 [ 981.929966][ T5817] IPVS: starting estimator thread 0... [ 981.965050][ T598] lo speed is unknown, defaulting to 1000 [ 982.053805][ T603] IPVS: using max 29 ests per chain, 69600 per kthread [ 982.742527][ T617] netlink: 'syz.4.6589': attribute type 39 has an invalid length. [ 982.795087][ T617] hsr_slave_0 (unregistering): left promiscuous mode [ 983.188124][ T627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.838155][ T647] lo speed is unknown, defaulting to 1000 [ 983.859699][ T647] lo speed is unknown, defaulting to 1000 [ 984.234086][ T658] netlink: 'syz.4.6600': attribute type 178 has an invalid length. [ 984.346074][ T659] lo speed is unknown, defaulting to 1000 [ 984.434829][ T659] lo speed is unknown, defaulting to 1000 [ 984.924923][ T686] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 984.933171][ T686] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 985.334898][ T694] sctp: [Deprecated]: syz.3.6611 (pid 694) Use of int in max_burst socket option. [ 985.334898][ T694] Use struct sctp_assoc_value instead [ 985.701730][ T709] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 985.723339][ T707] __nla_validate_parse: 16 callbacks suppressed [ 985.723362][ T707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6617'. [ 985.859969][ T709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.905360][ T716] bond1: (slave geneve3): making interface the new active one [ 985.916813][ T716] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 986.015259][T24020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.025845][T24020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.086147][T24018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.112680][T24018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.343540][ T731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6623'. [ 986.388140][ T731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.446531][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6626'. [ 986.486110][ T731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.612809][ T743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6627'. [ 986.664795][ T743] vlan2: entered promiscuous mode [ 986.684086][ T743] bridge0: entered promiscuous mode [ 986.821547][ T757] IPv6: addrconf: prefix option has invalid lifetime [ 986.829757][ T757] netlink: 'syz.2.6628': attribute type 1 has an invalid length. [ 987.083200][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6631'. [ 987.455935][ T787] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 987.486100][ T787] netlink: 'syz.2.6639': attribute type 11 has an invalid length. [ 987.513477][ T787] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6639'. [ 987.629992][ T797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6642'. [ 987.692303][ T789] nbd6: detected capacity change from 0 to 127 [ 987.827267][T18282] block nbd6: Receive control failed (result -104) [ 987.949447][ T812] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 988.082703][ T818] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6646'. [ 988.133133][ T818] netlink: 'syz.0.6646': attribute type 1 has an invalid length. [ 988.459754][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6650'. [ 988.498694][ T833] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6650'. [ 988.625369][ T843] syzkaller0: entered promiscuous mode [ 988.634872][ T843] syzkaller0: entered allmulticast mode [ 988.744247][ T849] netlink: 'syz.2.6655': attribute type 58 has an invalid length. [ 989.330992][ T869] syzkaller0: entered promiscuous mode [ 989.348739][ T869] syzkaller0: entered allmulticast mode [ 989.607692][ T891] sctp: [Deprecated]: syz.2.6666 (pid 891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 989.607692][ T891] Use struct sctp_sack_info instead [ 989.714264][ T895] netlink: 'syz.4.6669': attribute type 1 has an invalid length. [ 991.071373][ T1751] block nbd6: Connection timed out, retrying (0/1 alive) [ 991.081580][ T1751] block nbd6: Connection timed out, retrying (0/1 alive) [ 991.088776][ T1751] block nbd6: Connection timed out, retrying (0/1 alive) [ 991.097656][ T1751] block nbd6: Connection timed out, retrying (0/1 alive) [ 991.105182][T20802] block nbd6: Dead connection, failed to find a fallback [ 991.112489][T20802] block nbd6: shutting down sockets [ 991.122817][T20802] blk_print_req_error: 138 callbacks suppressed [ 991.122836][T20802] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.143777][T20802] buffer_io_error: 138 callbacks suppressed [ 991.143801][T20802] Buffer I/O error on dev nbd6, logical block 2, async page read [ 991.157989][T20802] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.169581][T20802] Buffer I/O error on dev nbd6, logical block 1, async page read [ 991.177592][T20802] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.186829][T20802] Buffer I/O error on dev nbd6, logical block 0, async page read [ 991.194795][T20802] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.204022][T20802] Buffer I/O error on dev nbd6, logical block 3, async page read [ 991.213754][ T583] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.229480][ T583] Buffer I/O error on dev nbd6, logical block 0, async page read [ 991.239072][ T583] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.248387][ T583] Buffer I/O error on dev nbd6, logical block 1, async page read [ 991.256834][ T583] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.266282][ T583] Buffer I/O error on dev nbd6, logical block 2, async page read [ 991.276635][ T583] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.286011][ T583] Buffer I/O error on dev nbd6, logical block 3, async page read [ 991.294109][ T583] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.303507][ T583] Buffer I/O error on dev nbd6, logical block 0, async page read [ 991.312085][ T583] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.321687][ T583] Buffer I/O error on dev nbd6, logical block 1, async page read [ 991.332891][ T583] ldm_validate_partition_table(): Disk read failed. [ 991.342237][ T583] Dev nbd6: unable to read RDB block 0 [ 991.349958][ T583] nbd6: unable to read partition table [ 991.388840][ T583] ldm_validate_partition_table(): Disk read failed. [ 991.422476][ T583] Dev nbd6: unable to read RDB block 0 [ 991.436125][ T583] nbd6: unable to read partition table [ 993.134197][ T882] syzkaller0: entered promiscuous mode [ 993.139710][ T882] syzkaller0: entered allmulticast mode [ 993.181521][ T898] gretap1: entered allmulticast mode [ 993.458452][ T913] __nla_validate_parse: 3 callbacks suppressed [ 993.458475][ T913] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6672'. [ 993.632915][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6671'. [ 997.058308][ T924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.169746][ T901] lo speed is unknown, defaulting to 1000 [ 997.193593][ T901] lo speed is unknown, defaulting to 1000 [ 997.254096][ T934] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 997.256912][ T937] netlink: 'syz.1.6676': attribute type 1 has an invalid length. [ 997.265820][ T939] netlink: 'syz.3.6678': attribute type 4 has an invalid length. [ 997.283131][ T934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6677'. [ 997.316416][ T939] netlink: 'syz.3.6678': attribute type 4 has an invalid length. [ 997.536677][ T948] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.544766][ T948] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.816835][ T948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.832374][ T948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.066353][T24019] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.083793][T24019] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 998.093637][T24019] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.107637][T24019] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 998.138856][T24019] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.165674][T24019] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 998.279265][T24019] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.314900][T24019] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 998.811725][ T998] Cannot find set identified by id 0 to match [ 999.065486][ T1008] netlink: 'syz.2.6691': attribute type 4 has an invalid length. [ 999.692503][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 999.743310][ T1039] openvswitch: netlink: Flow actions attr not present in new flow. [ 1000.431644][ T1090] netlink: 'syz.0.6705': attribute type 1 has an invalid length. [ 1000.548119][ T1096] netlink: 'syz.0.6705': attribute type 1 has an invalid length. [ 1000.572864][ T1095] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1000.605023][ T1096] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6705'. [ 1000.632028][ T1090] netlink: 'syz.0.6705': attribute type 1 has an invalid length. [ 1000.640743][ T1090] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6705'. [ 1000.684802][ T1095] lo speed is unknown, defaulting to 1000 [ 1000.716037][ T1095] lo speed is unknown, defaulting to 1000 [ 1000.938063][ T1107] ip6gretap0: entered promiscuous mode [ 1001.163721][ T1119] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1001.252287][ T1121] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1001.362850][ T1121] bond2 (unregistering): Released all slaves [ 1001.934627][ T1129] syzkaller1: entered promiscuous mode [ 1001.959878][ T1129] syzkaller1: entered allmulticast mode [ 1003.579485][ T1192] netlink: 'syz.3.6736': attribute type 13 has an invalid length. [ 1003.588048][ T1183] netlink: 'syz.2.6732': attribute type 27 has an invalid length. [ 1003.605130][ T1192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1003.647598][ T1192] netlink: 'syz.3.6736': attribute type 13 has an invalid length. [ 1003.647614][ T7005] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.665914][ T1192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1003.702255][ T7005] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.726199][ T7005] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.746498][T24020] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.851876][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'. [ 1003.997126][ T1211] syzkaller1: entered promiscuous mode [ 1004.005073][ T1211] syzkaller1: entered allmulticast mode [ 1004.154486][ T1220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6749'. [ 1004.179773][ T1220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6749'. [ 1004.257058][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6754'. [ 1004.720797][ T1249] lo speed is unknown, defaulting to 1000 [ 1004.725309][ T1252] syzkaller0: entered promiscuous mode [ 1004.742890][ T1252] syzkaller0: entered allmulticast mode [ 1004.765593][ T1249] lo speed is unknown, defaulting to 1000 [ 1004.954002][ T1260] tipc: Enabled bearer , priority 0 [ 1004.987508][ T1260] syzkaller0: entered promiscuous mode [ 1005.026284][ T1260] syzkaller0: entered allmulticast mode [ 1005.139158][ T1260] tipc: Resetting bearer [ 1005.175652][ T1259] tipc: Resetting bearer [ 1005.275335][ T1259] tipc: Disabling bearer [ 1005.508830][ T1283] syzkaller1: entered promiscuous mode [ 1005.515516][ T1283] syzkaller1: entered allmulticast mode [ 1005.626624][ T1290] smbdirect: ib_dev[sz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1005.697069][ T1290] smbdirect: ib_dev[sz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1005.740806][ T1290] smbdirect: ib_dev[sz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1005.825536][ T1290] infiniband sz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1006.243566][ T7005] smbdirect: ib_dev[sz2] removed [ 1006.447691][ T1320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1006.726526][ T1327] xt_hashlimit: size too large, truncated to 1048576 [ 1006.852677][ T1336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6798'. [ 1007.144760][ T1348] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1007.175915][ T1348] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1007.602918][ T1372] syzkaller0: entered promiscuous mode [ 1007.609160][ T1372] syzkaller0: entered allmulticast mode [ 1007.709991][ T1379] netlink: 436 bytes leftover after parsing attributes in process `syz.4.6814'. [ 1007.738855][ T1381] netlink: 'syz.3.6815': attribute type 3 has an invalid length. [ 1008.393850][ T1416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1008.403893][ T1405] syzkaller0: entered promiscuous mode [ 1008.420846][ T1405] syzkaller0: entered allmulticast mode [ 1009.621324][ T1442] Cannot find del_set index 4 as target [ 1012.557657][ T1421] ip6tnl2: entered promiscuous mode [ 1012.564138][ T1421] ip6tnl2: entered allmulticast mode [ 1012.871571][ T1461] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6850'. [ 1013.276146][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1013.305567][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1013.318635][ T1484] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6860'. [ 1014.499945][ T1537] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6879'. [ 1014.656520][ T1549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1014.702011][ T1543] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1014.735454][ T1543] bond3 (unregistering): Released all slaves [ 1014.829627][ T1558] Bluetooth: MGMT ver 1.23 [ 1014.878584][ T1564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1014.942814][ T1565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1015.347780][ T1574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1015.406914][ T1574] gtp0: entered promiscuous mode [ 1015.430138][ T1574] gtp0: entered allmulticast mode [ 1015.624032][ T1586] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1015.663820][ T1586] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6892'. [ 1015.707166][ T1586] netlink: 'syz.0.6892': attribute type 29 has an invalid length. [ 1015.746623][ T1590] x_tables: duplicate underflow at hook 3 [ 1016.533654][ T1617] syzkaller0: entered promiscuous mode [ 1016.573262][ T1617] 0: reclassify loop, rule prio 0, protocol 800 [ 1016.888491][ T1632] bond2: entered promiscuous mode [ 1016.910738][T18932] Bluetooth: hci2: command 0x0401 tx timeout [ 1016.916976][T18282] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1017.204305][ T1663] tipc: Failed to remove unknown binding: 66,1,1/0:4198768160/4198768162 [ 1017.233665][ T1663] tipc: Failed to remove unknown binding: 66,1,1/0:4198768160/4198768162 [ 1017.577262][ T1684] syzkaller0: entered promiscuous mode [ 1017.586429][ T1684] syzkaller0: entered allmulticast mode [ 1020.085574][ T1654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1020.097350][ T1684] netlink: 'syz.0.6915': attribute type 1 has an invalid length. [ 1020.304577][ T1703] __nla_validate_parse: 23 callbacks suppressed [ 1020.304601][ T1703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1020.460976][ T1715] netlink: 'syz.1.6923': attribute type 2 has an invalid length. [ 1020.483939][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6920'. [ 1020.501704][ T1715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6923'. [ 1020.802963][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1020.868051][ T1740] syzkaller0: entered promiscuous mode [ 1021.147967][ T1744] lo speed is unknown, defaulting to 1000 [ 1021.163524][ T1744] lo speed is unknown, defaulting to 1000 [ 1021.647638][ T1769] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1021.665058][ T1769] syzkaller1: linktype set to 780 [ 1021.683683][ T1769] netlink: 'syz.0.6937': attribute type 1 has an invalid length. [ 1021.706208][ T1769] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1021.723296][ T1769] netlink: 'syz.0.6937': attribute type 1 has an invalid length. [ 1021.735796][ T1769] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6937'. [ 1022.204485][ T24] IPVS: starting estimator thread 0... [ 1022.216589][ T1763] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:19241 [ 1022.250931][ T1763] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1022.332921][ T1783] IPVS: using max 24 ests per chain, 57600 per kthread [ 1022.437105][ T1790] netlink: 'syz.4.6940': attribute type 1 has an invalid length. [ 1022.603773][ T1790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1022.666824][ T1793] bond3: (slave batadv1): Opening slave failed [ 1022.723720][ T1799] syzkaller0: entered promiscuous mode [ 1023.328662][ T1831] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6948'. [ 1023.734745][ T1843] netlink: 'syz.1.6953': attribute type 1 has an invalid length. [ 1023.837830][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1023.881402][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1024.113386][ T1843] bond3: entered promiscuous mode [ 1024.129714][ T1843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.288489][ T1851] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1024.347442][ T1851] bond4 (unregistering): Released all slaves [ 1024.660840][ T1856] lo speed is unknown, defaulting to 1000 [ 1024.849621][ T1872] syzkaller0: entered promiscuous mode [ 1024.889095][ T1856] lo speed is unknown, defaulting to 1000 [ 1025.557509][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1028.809903][ T1913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6964'. [ 1029.397481][ T1950] netlink: 'syz.0.6972': attribute type 12 has an invalid length. [ 1029.474555][ T1952] xt_TCPMSS: Only works on TCP SYN packets [ 1029.755841][ T1953] block nbd7: server does not support multiple connections per device. [ 1029.798734][ T1953] block nbd7: shutting down sockets [ 1029.926437][ T1957] syzkaller0: entered promiscuous mode [ 1029.949748][ T1959] nbd: must specify an index to disconnect [ 1030.084793][ T1968] netlink: 'syz.2.6977': attribute type 39 has an invalid length. [ 1030.274041][ T1966] lo speed is unknown, defaulting to 1000 [ 1030.282957][ T1966] lo speed is unknown, defaulting to 1000 [ 1030.503942][ T1983] syzkaller1: entered promiscuous mode [ 1030.530150][ T1983] syzkaller1: entered allmulticast mode [ 1030.759163][ T1981] lo speed is unknown, defaulting to 1000 [ 1030.894452][ T1999] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6986'. [ 1030.909053][ T2000] netlink: 'syz.1.6984': attribute type 39 has an invalid length. [ 1030.932363][ T1981] lo speed is unknown, defaulting to 1000 [ 1033.475807][ T2010] syzkaller0: entered promiscuous mode [ 1037.381392][ T2049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1037.533471][ T2051] netlink: 'syz.2.6998': attribute type 1 has an invalid length. [ 1037.594903][ T2051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.614728][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7000'. [ 1037.629838][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7000'. [ 1037.651749][ T2057] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7000'. [ 1037.669308][ T2060] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1037.696652][ T2051] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1037.706927][ T2051] bond1: (slave batadv1): making interface the new active one [ 1037.717578][ T2051] batadv1: entered promiscuous mode [ 1037.724159][ T2051] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1037.737584][ T2062] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7001'. [ 1037.737671][ T2059] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7001'. [ 1037.781344][ T2060] bond1 (unregistering): (slave veth3): Releasing active interface [ 1037.798476][ T2060] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1037.816291][ T2060] bond1 (unregistering): Released all slaves [ 1037.849898][ T2061] lo speed is unknown, defaulting to 1000 [ 1037.861139][ T2061] lo speed is unknown, defaulting to 1000 [ 1038.007518][ T2066] syzkaller0: entered promiscuous mode [ 1038.105456][ T2068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7002'. [ 1039.194873][ T2127] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7019'. [ 1039.458420][ T2122] syzkaller0: entered promiscuous mode [ 1043.934109][ T2174] syzkaller0: entered promiscuous mode [ 1043.942313][ T2174] syzkaller0: entered allmulticast mode [ 1044.224120][ T2188] tipc: Enabled bearer , priority 0 [ 1044.246560][ T2188] syzkaller0: entered promiscuous mode [ 1044.267190][ T2188] syzkaller0: entered allmulticast mode [ 1044.288665][ T2192] syzkaller0: entered promiscuous mode [ 1044.423644][ T2188] tipc: Resetting bearer [ 1044.454465][ T2187] tipc: Resetting bearer [ 1044.558603][ T2187] tipc: Disabling bearer [ 1044.561270][ T2205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.611663][ T2210] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 1044.643023][ T2210] netlink: 'syz.3.7038': attribute type 62 has an invalid length. [ 1044.740457][ T2214] lo speed is unknown, defaulting to 1000 [ 1044.753988][ T2214] lo speed is unknown, defaulting to 1000 [ 1045.093690][ T2236] sctp: [Deprecated]: syz.1.7044 (pid 2236) Use of int in maxseg socket option. [ 1045.093690][ T2236] Use struct sctp_assoc_value instead [ 1045.143132][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1045.166945][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7044'. [ 1045.419313][ T2247] batadv_slave_0: entered promiscuous mode [ 1045.581095][ T2247] batadv_slave_0: left promiscuous mode [ 1045.741978][ T2263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1045.867927][ T2259] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7051'. [ 1045.988882][ T2277] tipc: Enabled bearer , priority 0 [ 1045.998070][ T2272] syzkaller0: entered promiscuous mode [ 1046.005832][ T2272] syzkaller0: entered allmulticast mode [ 1046.041273][ T2276] netlink: 'syz.1.7057': attribute type 4 has an invalid length. [ 1046.061690][ T2272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7055'. [ 1046.154288][ T2272] tipc: Resetting bearer [ 1046.171127][ T2280] netlink: 'syz.2.7058': attribute type 3 has an invalid length. [ 1046.196234][ T2271] tipc: Resetting bearer [ 1046.216758][ T2280] netlink: 'syz.2.7058': attribute type 1 has an invalid length. [ 1046.235249][ T2280] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7058'. [ 1046.289716][ T2271] tipc: Disabling bearer [ 1046.834112][ T2321] macsec2: entered promiscuous mode [ 1046.839499][ T2321] macsec2: entered allmulticast mode [ 1046.872892][ T2319] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1046.908834][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1046.941807][ T2319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1046.974615][ T2322] team0: entered promiscuous mode [ 1046.985837][ T2322] team_slave_0: entered promiscuous mode [ 1046.988137][ T2330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1047.000445][ T2322] team_slave_1: entered promiscuous mode [ 1047.022360][ T2322] dummy0: entered promiscuous mode [ 1047.024090][ T2330] netlink: 'syz.0.7076': attribute type 30 has an invalid length. [ 1047.037444][ T2322] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1047.051039][ T2330] netlink: 'syz.0.7076': attribute type 29 has an invalid length. [ 1047.105668][ T2335] netlink: 'syz.0.7076': attribute type 1 has an invalid length. [ 1047.126329][ T2330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7076'. [ 1047.189708][ T2335] gretap1: entered allmulticast mode [ 1047.266453][ T2341] netlink: 'syz.3.7078': attribute type 1 has an invalid length. [ 1047.688679][T24017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.714658][T24017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.748029][T24017] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.771253][T24017] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.819437][ T2363] netlink: 'syz.1.7085': attribute type 12 has an invalid length. [ 1047.865354][ T2365] syzkaller1: entered promiscuous mode [ 1047.876842][ T2365] syzkaller1: entered allmulticast mode [ 1048.075074][ T2378] bond1: option lacp_active: invalid value (8) [ 1048.083086][ T2378] bond1 (unregistering): Released all slaves [ 1048.166969][ T2376] netlink: 'syz.3.7091': attribute type 3 has an invalid length. [ 1048.336003][ T2387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1048.345902][ T2386] syzkaller1: entered promiscuous mode [ 1048.372312][ T2386] syzkaller1: entered allmulticast mode [ 1048.728685][ T2409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1049.081247][ T2430] xfrm1: entered allmulticast mode [ 1049.147232][ T2443] syzkaller1: entered promiscuous mode [ 1049.167119][ T2443] syzkaller1: entered allmulticast mode [ 1049.479435][ T2460] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) ! [ 1049.632816][ T2469] [ 1049.635213][ T2469] ====================================================== [ 1049.642339][ T2469] WARNING: possible circular locking dependency detected [ 1049.649371][ T2469] syzkaller #0 Not tainted [ 1049.653823][ T2469] ------------------------------------------------------ [ 1049.661029][ T2469] syz.1.7113/2469 is trying to acquire lock: [ 1049.667019][ T2469] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1049.676353][ T2469] [ 1049.676353][ T2469] but task is already holding lock: [ 1049.683801][ T2469] ffffffff8f38d120 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1049.692691][ T2469] [ 1049.692691][ T2469] which lock already depends on the new lock. [ 1049.692691][ T2469] [ 1049.703098][ T2469] [ 1049.703098][ T2469] the existing dependency chain (in reverse order) is: [ 1049.712135][ T2469] [ 1049.712135][ T2469] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 1049.719376][ T2469] __mutex_lock+0x1a3/0x1550 [ 1049.724591][ T2469] get_device_parent+0x16f/0x3a0 [ 1049.730062][ T2469] device_add+0x2e1/0xbb0 [ 1049.734918][ T2469] device_create+0x269/0x300 [ 1049.740037][ T2469] msr_device_create+0x33/0x50 [ 1049.745340][ T2469] cpuhp_invoke_callback+0x445/0x860 [ 1049.751331][ T2469] cpuhp_thread_fun+0x36b/0x780 [ 1049.756712][ T2469] smpboot_thread_fn+0x541/0xa50 [ 1049.762183][ T2469] kthread+0x388/0x470 [ 1049.766782][ T2469] ret_from_fork+0x514/0xb70 [ 1049.771900][ T2469] ret_from_fork_asm+0x1a/0x30 [ 1049.777188][ T2469] [ 1049.777188][ T2469] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1049.784846][ T2469] cpuhp_thread_fun+0x127/0x780 [ 1049.790222][ T2469] smpboot_thread_fn+0x541/0xa50 [ 1049.795784][ T2469] kthread+0x388/0x470 [ 1049.800388][ T2469] ret_from_fork+0x514/0xb70 [ 1049.805508][ T2469] ret_from_fork_asm+0x1a/0x30 [ 1049.810802][ T2469] [ 1049.810802][ T2469] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1049.818546][ T2469] cpus_read_lock+0x42/0x160 [ 1049.823743][ T2469] static_key_slow_inc+0x12/0x30 [ 1049.829209][ T2469] setup_udp_tunnel_sock+0x2fd/0x510 [ 1049.835045][ T2469] l2tp_tunnel_register+0xde2/0x1490 [ 1049.840865][ T2469] pppol2tp_connect+0x8b7/0x17c0 [ 1049.846341][ T2469] __sys_connect+0x312/0x450 [ 1049.851465][ T2469] __x64_sys_connect+0x7a/0x90 [ 1049.856753][ T2469] do_syscall_64+0x15f/0xf80 [ 1049.861871][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.868292][ T2469] [ 1049.868292][ T2469] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1049.876043][ T2469] lock_sock_nested+0x41/0x100 [ 1049.881345][ T2469] inet_shutdown+0x6a/0x390 [ 1049.886382][ T2469] nbd_mark_nsock_dead+0x2e9/0x560 [ 1049.892019][ T2469] sock_shutdown+0x15e/0x260 [ 1049.897169][ T2469] nbd_clear_sock+0x24/0x170 [ 1049.902312][ T2469] nbd_config_put+0x2dd/0x580 [ 1049.907575][ T2469] nbd_genl_connect+0x19d5/0x1cf0 [ 1049.913156][ T2469] genl_family_rcv_msg_doit+0x22a/0x330 [ 1049.919407][ T2469] genl_rcv_msg+0x61c/0x7a0 [ 1049.924469][ T2469] netlink_rcv_skb+0x232/0x4b0 [ 1049.929773][ T2469] genl_rcv+0x28/0x40 [ 1049.934299][ T2469] netlink_unicast+0x75c/0x8e0 [ 1049.939605][ T2469] netlink_sendmsg+0x813/0xb40 [ 1049.944986][ T2469] ____sys_sendmsg+0x972/0x9f0 [ 1049.950302][ T2469] ___sys_sendmsg+0x2a5/0x360 [ 1049.955517][ T2469] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1049.960985][ T2469] do_syscall_64+0x15f/0xf80 [ 1049.966101][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.972603][ T2469] [ 1049.972603][ T2469] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1049.980344][ T2469] __mutex_lock+0x1a3/0x1550 [ 1049.985459][ T2469] nbd_queue_rq+0x37b/0x1100 [ 1049.990661][ T2469] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1049.996759][ T2469] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1050.003645][ T2469] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1050.010169][ T2469] blk_mq_run_hw_queue+0x348/0x4f0 [ 1050.015867][ T2469] blk_mq_dispatch_list+0xd16/0xe10 [ 1050.021603][ T2469] blk_mq_flush_plug_list+0x48d/0x570 [ 1050.027599][ T2469] __blk_flush_plug+0x3ed/0x4d0 [ 1050.033067][ T2469] __submit_bio+0x28d/0x580 [ 1050.038115][ T2469] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1050.044369][ T2469] block_read_full_folio+0x599/0x830 [ 1050.050202][ T2469] filemap_read_folio+0x137/0x3b0 [ 1050.055786][ T2469] do_read_cache_folio+0x358/0x590 [ 1050.061467][ T2469] read_part_sector+0xb6/0x2b0 [ 1050.066867][ T2469] adfspart_check_ICS+0xb1/0x960 [ 1050.072350][ T2469] bdev_disk_changed+0x817/0x1770 [ 1050.077998][ T2469] blkdev_get_whole+0x380/0x510 [ 1050.083382][ T2469] bdev_open+0x31e/0xd30 [ 1050.088157][ T2469] blkdev_open+0x470/0x610 [ 1050.093100][ T2469] do_dentry_open+0x785/0x14e0 [ 1050.098655][ T2469] vfs_open+0x3b/0x340 [ 1050.103270][ T2469] path_openat+0x2e08/0x3860 [ 1050.108391][ T2469] do_file_open+0x23e/0x4a0 [ 1050.113421][ T2469] do_sys_openat2+0x113/0x200 [ 1050.118711][ T2469] __x64_sys_openat+0x138/0x170 [ 1050.124085][ T2469] do_syscall_64+0x15f/0xf80 [ 1050.129220][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.135634][ T2469] [ 1050.135634][ T2469] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1050.142857][ T2469] __mutex_lock+0x1a3/0x1550 [ 1050.147985][ T2469] nbd_queue_rq+0xc6/0x1100 [ 1050.153018][ T2469] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1050.159113][ T2469] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1050.165977][ T2469] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1050.172513][ T2469] blk_mq_run_hw_queue+0x348/0x4f0 [ 1050.178166][ T2469] blk_mq_dispatch_list+0xd16/0xe10 [ 1050.183897][ T2469] blk_mq_flush_plug_list+0x48d/0x570 [ 1050.189805][ T2469] __blk_flush_plug+0x3ed/0x4d0 [ 1050.195283][ T2469] __submit_bio+0x28d/0x580 [ 1050.200328][ T2469] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1050.206672][ T2469] block_read_full_folio+0x599/0x830 [ 1050.212484][ T2469] filemap_read_folio+0x137/0x3b0 [ 1050.218042][ T2469] do_read_cache_folio+0x358/0x590 [ 1050.223686][ T2469] read_part_sector+0xb6/0x2b0 [ 1050.228983][ T2469] adfspart_check_ICS+0xb1/0x960 [ 1050.234514][ T2469] bdev_disk_changed+0x817/0x1770 [ 1050.240065][ T2469] blkdev_get_whole+0x380/0x510 [ 1050.245455][ T2469] bdev_open+0x31e/0xd30 [ 1050.250323][ T2469] blkdev_open+0x470/0x610 [ 1050.255537][ T2469] do_dentry_open+0x785/0x14e0 [ 1050.260832][ T2469] vfs_open+0x3b/0x340 [ 1050.265613][ T2469] path_openat+0x2e08/0x3860 [ 1050.270773][ T2469] do_file_open+0x23e/0x4a0 [ 1050.275827][ T2469] do_sys_openat2+0x113/0x200 [ 1050.281037][ T2469] __x64_sys_openat+0x138/0x170 [ 1050.286428][ T2469] do_syscall_64+0x15f/0xf80 [ 1050.291550][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.297974][ T2469] [ 1050.297974][ T2469] -> #3 (set->srcu){.+.+}-{0:0}: [ 1050.305128][ T2469] __synchronize_srcu+0xca/0x300 [ 1050.310617][ T2469] elevator_switch+0x1e8/0x7a0 [ 1050.315946][ T2469] elevator_change+0x2cc/0x450 [ 1050.321242][ T2469] elevator_set_default+0x36c/0x430 [ 1050.326970][ T2469] blk_register_queue+0x3e9/0x4e0 [ 1050.332704][ T2469] __add_disk+0x677/0xd50 [ 1050.337560][ T2469] add_disk_fwnode+0xfb/0x480 [ 1050.342765][ T2469] nbd_dev_add+0x72c/0xb50 [ 1050.348056][ T2469] nbd_init+0x168/0x1f0 [ 1050.352740][ T2469] do_one_initcall+0x250/0x870 [ 1050.358038][ T2469] do_initcall_level+0x104/0x190 [ 1050.363508][ T2469] do_initcalls+0x59/0xa0 [ 1050.368475][ T2469] kernel_init_freeable+0x2a6/0x3e0 [ 1050.374200][ T2469] kernel_init+0x1d/0x1d0 [ 1050.379061][ T2469] ret_from_fork+0x514/0xb70 [ 1050.384174][ T2469] ret_from_fork_asm+0x1a/0x30 [ 1050.389464][ T2469] [ 1050.389464][ T2469] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1050.397293][ T2469] __mutex_lock+0x1a3/0x1550 [ 1050.402413][ T2469] elevator_change+0x1b3/0x450 [ 1050.407709][ T2469] elevator_set_none+0xb5/0x140 [ 1050.413114][ T2469] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1050.419443][ T2469] nbd_start_device+0x17f/0xb10 [ 1050.424823][ T2469] nbd_genl_connect+0x165b/0x1cf0 [ 1050.430382][ T2469] genl_family_rcv_msg_doit+0x22a/0x330 [ 1050.436468][ T2469] genl_rcv_msg+0x61c/0x7a0 [ 1050.441501][ T2469] netlink_rcv_skb+0x232/0x4b0 [ 1050.446794][ T2469] genl_rcv+0x28/0x40 [ 1050.451313][ T2469] netlink_unicast+0x75c/0x8e0 [ 1050.456692][ T2469] netlink_sendmsg+0x813/0xb40 [ 1050.461996][ T2469] ____sys_sendmsg+0x972/0x9f0 [ 1050.467311][ T2469] ___sys_sendmsg+0x2a5/0x360 [ 1050.472572][ T2469] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1050.478048][ T2469] do_syscall_64+0x15f/0xf80 [ 1050.483181][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.489604][ T2469] [ 1050.489604][ T2469] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1050.498223][ T2469] blk_alloc_queue+0x546/0x680 [ 1050.503526][ T2469] __blk_mq_alloc_disk+0x197/0x390 [ 1050.509202][ T2469] nbd_dev_add+0x499/0xb50 [ 1050.514166][ T2469] nbd_init+0x168/0x1f0 [ 1050.518865][ T2469] do_one_initcall+0x250/0x870 [ 1050.524174][ T2469] do_initcall_level+0x104/0x190 [ 1050.529644][ T2469] do_initcalls+0x59/0xa0 [ 1050.534506][ T2469] kernel_init_freeable+0x2a6/0x3e0 [ 1050.540236][ T2469] kernel_init+0x1d/0x1d0 [ 1050.545111][ T2469] ret_from_fork+0x514/0xb70 [ 1050.550231][ T2469] ret_from_fork_asm+0x1a/0x30 [ 1050.555527][ T2469] [ 1050.555527][ T2469] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1050.562838][ T2469] __lock_acquire+0x15a5/0x2cf0 [ 1050.568222][ T2469] lock_acquire+0x106/0x350 [ 1050.573333][ T2469] fs_reclaim_acquire+0x71/0x100 [ 1050.578804][ T2469] __kmalloc_cache_noprof+0x40/0x660 [ 1050.584623][ T2469] get_device_parent+0x255/0x3a0 [ 1050.590083][ T2469] device_add+0x2e1/0xbb0 [ 1050.594956][ T2469] netdev_register_kobject+0x178/0x310 [ 1050.600952][ T2469] register_netdevice+0x1456/0x1ec0 [ 1050.606680][ T2469] register_netdev+0x40/0x60 [ 1050.611799][ T2469] bnep_add_connection+0x6e5/0xca0 [ 1050.617444][ T2469] do_bnep_sock_ioctl+0x40b/0x650 [ 1050.623009][ T2469] sock_do_ioctl+0x101/0x320 [ 1050.628134][ T2469] sock_ioctl+0x5c6/0x7f0 [ 1050.633169][ T2469] __se_sys_ioctl+0xfc/0x170 [ 1050.638288][ T2469] do_syscall_64+0x15f/0xf80 [ 1050.643410][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.649827][ T2469] [ 1050.649827][ T2469] other info that might help us debug this: [ 1050.649827][ T2469] [ 1050.660141][ T2469] Chain exists of: [ 1050.660141][ T2469] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 1050.660141][ T2469] [ 1050.672157][ T2469] Possible unsafe locking scenario: [ 1050.672157][ T2469] [ 1050.679610][ T2469] CPU0 CPU1 [ 1050.684975][ T2469] ---- ---- [ 1050.690349][ T2469] lock(gdp_mutex); [ 1050.694288][ T2469] lock(cpuhp_state-up); [ 1050.701158][ T2469] lock(gdp_mutex); [ 1050.707696][ T2469] lock(fs_reclaim); [ 1050.711777][ T2469] [ 1050.711777][ T2469] *** DEADLOCK *** [ 1050.711777][ T2469] [ 1050.720024][ T2469] 3 locks held by syz.1.7113/2469: [ 1050.725229][ T2469] #0: ffffffff8ff7a628 (bnep_session_sem){++++}-{4:4}, at: bnep_add_connection+0x22e/0xca0 [ 1050.735341][ T2469] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1050.744495][ T2469] #2: ffffffff8f38d120 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1050.753815][ T2469] [ 1050.753815][ T2469] stack backtrace: [ 1050.759879][ T2469] CPU: 1 UID: 0 PID: 2469 Comm: syz.1.7113 Not tainted syzkaller #0 PREEMPT(full) [ 1050.759899][ T2469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1050.759910][ T2469] Call Trace: [ 1050.759919][ T2469] [ 1050.759927][ T2469] dump_stack_lvl+0xe8/0x150 [ 1050.759947][ T2469] print_circular_bug+0x2e1/0x300 [ 1050.759971][ T2469] check_noncircular+0x12e/0x150 [ 1050.759995][ T2469] __lock_acquire+0x15a5/0x2cf0 [ 1050.760015][ T2469] ? lockdep_unlock+0x5d/0xd0 [ 1050.760030][ T2469] ? __lock_acquire+0x146e/0x2cf0 [ 1050.760051][ T2469] ? __kmalloc_cache_noprof+0x40/0x660 [ 1050.760074][ T2469] lock_acquire+0x106/0x350 [ 1050.760090][ T2469] ? __kmalloc_cache_noprof+0x40/0x660 [ 1050.760117][ T2469] fs_reclaim_acquire+0x71/0x100 [ 1050.760141][ T2469] ? __kmalloc_cache_noprof+0x40/0x660 [ 1050.760163][ T2469] __kmalloc_cache_noprof+0x40/0x660 [ 1050.760186][ T2469] ? get_device_parent+0x255/0x3a0 [ 1050.760202][ T2469] ? do_raw_spin_unlock+0xf5/0x210 [ 1050.760228][ T2469] get_device_parent+0x255/0x3a0 [ 1050.760253][ T2469] device_add+0x2e1/0xbb0 [ 1050.760269][ T2469] ? device_initialize+0x26a/0x460 [ 1050.760287][ T2469] netdev_register_kobject+0x178/0x310 [ 1050.760313][ T2469] register_netdevice+0x1456/0x1ec0 [ 1050.760341][ T2469] ? __pfx_register_netdevice+0x10/0x10 [ 1050.760363][ T2469] ? __hw_addr_insert+0x205/0x230 [ 1050.760383][ T2469] ? dev_addr_mod+0x174/0x350 [ 1050.760405][ T2469] ? dev_addr_mod+0x1ba/0x350 [ 1050.760425][ T2469] register_netdev+0x40/0x60 [ 1050.760446][ T2469] bnep_add_connection+0x6e5/0xca0 [ 1050.760472][ T2469] ? __pfx_bnep_add_connection+0x10/0x10 [ 1050.760499][ T2469] ? __fget_files+0x3a0/0x420 [ 1050.760523][ T2469] do_bnep_sock_ioctl+0x40b/0x650 [ 1050.760546][ T2469] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 1050.760571][ T2469] ? tomoyo_path_number_perm+0x219/0x630 [ 1050.760597][ T2469] sock_do_ioctl+0x101/0x320 [ 1050.760621][ T2469] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1050.760644][ T2469] ? do_futex+0x333/0x420 [ 1050.760668][ T2469] sock_ioctl+0x5c6/0x7f0 [ 1050.760692][ T2469] ? __pfx_sock_ioctl+0x10/0x10 [ 1050.760715][ T2469] ? __fget_files+0x2a/0x420 [ 1050.760734][ T2469] ? __fget_files+0x3a0/0x420 [ 1050.760752][ T2469] ? __fget_files+0x2a/0x420 [ 1050.760772][ T2469] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1050.760796][ T2469] ? __pfx_sock_ioctl+0x10/0x10 [ 1050.760818][ T2469] __se_sys_ioctl+0xfc/0x170 [ 1050.760842][ T2469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.760859][ T2469] do_syscall_64+0x15f/0xf80 [ 1050.760877][ T2469] ? trace_irq_disable+0x3b/0x140 [ 1050.760901][ T2469] ? clear_bhb_loop+0x40/0x90 [ 1050.760919][ T2469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.760936][ T2469] RIP: 0033:0x7f628739cdd9 [ 1050.760952][ T2469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.760968][ T2469] RSP: 002b:00007f62881f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1050.760985][ T2469] RAX: ffffffffffffffda RBX: 00007f6287616090 RCX: 00007f628739cdd9 [ 1050.760998][ T2469] RDX: 0000200000000080 RSI: 00000000400442c8 RDI: 0000000000000008 [ 1050.761009][ T2469] RBP: 00007f6287432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1050.761020][ T2469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.761030][ T2469] R13: 00007f6287616128 R14: 00007f6287616090 R15: 00007ffc7777a378 [ 1050.761048][ T2469] [ 1051.305103][ T2475] lo speed is unknown, defaulting to 1000 [ 1051.311915][ T2475] lo speed is unknown, defaulting to 1000 [ 1051.347698][ T2493] __nla_validate_parse: 10 callbacks suppressed [ 1051.347719][ T2493] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1051.784525][T18282] Bluetooth: hci4: link tx timeout [ 1051.790562][T18282] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.838916][T18932] Bluetooth: hci4: link tx timeout [ 1051.844414][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.874467][T18932] Bluetooth: hci4: link tx timeout [ 1051.879792][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.952978][T18932] Bluetooth: hci4: link tx timeout [ 1051.958180][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1052.370692][T18932] Bluetooth: hci4: link tx timeout [ 1052.375892][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1052.990806][T18932] Bluetooth: hci4: link tx timeout [ 1052.996035][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.224952][T18932] Bluetooth: hci4: link tx timeout [ 1053.230121][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.362125][T18932] Bluetooth: hci4: link tx timeout [ 1053.367307][T18932] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1053.870614][T18932] Bluetooth: hci4: command 0x0406 tx timeout