last executing test programs: 2.852959155s ago: executing program 4 (id=3820): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800060000000000000000000600000072010800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf}, 0x94) 2.592964878s ago: executing program 4 (id=3823): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 2.249409874s ago: executing program 0 (id=3827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_dump={0x3f, 0x4, 0xfffffffa, 0xaf, "b84a4d62eec55836c7ad5d8d383bbcd716371f38b6e2425201e141b2a83f0ff6805776da49398116729bb299debafa845da5d414a21e60cb92ba3741f9b2461f86b7b2f35b160614bf1f7740437c13fdae941dae789f0c341ce39ee23bc46a2cf511ff5a65d388284a5ba9157d679934d7475c620cda8a7d60121f52cd24cb8084b4e839f696bd162c219e52c4a02fe8a11751b7c6a1e2dadce42728bd4d96840550d5ec559995782d5e80186df3cf"}}) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003f0000000000000000000000000000000000000000000000000064937dd7f0734c00000000000000000000000000000000f2ffffffffffffff00"/119], 0xb8}, 0x1, 0xfffff000, 0x0, 0x54}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x1ff) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x20, 0x2, 0xfe, 0x1, 0xff, 0x5}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) (rerun: 32) 1.788008263s ago: executing program 0 (id=3830): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x2004c815, &(0x7f0000000040)={0x11, 0x5, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0xb, 0xfff1}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40450c0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100480}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@delqdisc={0x128, 0x25, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff1, 0xc}, {0xfff5, 0xfff3}, {0xa, 0xb}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x493}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe01a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x53c}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) 1.785882824s ago: executing program 1 (id=3831): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000400), &(0x7f0000000300)=@tcp6=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711031000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e", @ANYRES32, @ANYBLOB], 0x26c0}}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x12c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xd7e}, @NL80211_ATTR_TX_RATES={0xe8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x10, 0x5, 0x8, 0x80, 0x7, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0x1}, {0x6}, {}, {0x2, 0x4}, {0x2, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x2}, {0x7, 0xa}, {0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x2}, {0x1, 0x6}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x3, 0x6}, {0x4, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x6}, {0x6, 0x2}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x7, 0x1}, {0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x5}, {0x5}, {0x5, 0x9}, {0x4, 0x8}, {0x1}, {0x2, 0x5}, {0x4}, {0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x7}, {0x1}, {0x5, 0x5}, {0x7}, {0x1, 0x2}, {0x5, 0x8}, {0x2}, {0x4, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x7}, {0x4}, {0x3, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x7}]}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4c804}, 0x40) 1.738420916s ago: executing program 3 (id=3832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x48}}, 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000700"/176], 0xf8}}, 0x0) 1.731619087s ago: executing program 4 (id=3833): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r1, @ANYBLOB="0c000200"], 0x28}}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, 0x0) 1.604030464s ago: executing program 1 (id=3835): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1000}) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x25f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x3}], 0x10}}], 0x2, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000bc0)={r5}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x1, r10, 0x7, r7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r2, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r11, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000080)=""/39, 0x27}], 0x4, &(0x7f0000000280)=""/64, 0x40}, 0x12140) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) 1.486509052s ago: executing program 2 (id=3836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b419a6248029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a730000000000000000001ed58cd2c684667178576dbb57345b63c313e4a8fcfefe511e084c24b31a2e693946748bb73511695bc0eec1553b0f67d50678fb29ad13d2104fdd7a992574d475d3e51652fb3fda6a9fc0458f10b6d121bd48664858b51a9054d7c1d310af6a043e4b99472fbff86fea83924059419d54f07da0b6b7d6e6d61e680f151b0e"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r3, r2}) (async) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa020000000000000045000078000000002b019078ac1e0001ac1414aa04009078030000004700000000000000000100000a010102ac1414bb44340001ac1414aa000000007f00000100000000ac141400000000000000000000000000ac14140000000000ffffffff00000000861100000000000200097bd145794862b0000000"], 0x0) (async) syz_emit_ethernet(0x1f, 0x0, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000000801020000d25e66c4ed5a969c7585d271a6c9020000000000000000000106000240060e00000900010073797a3100000000060002404305000005000300880000000600024000"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) setsockopt$ax25_int(r5, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) r7 = accept(r3, 0x0, &(0x7f0000000200)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000340)={0x28, 0x0, 0x2616}, 0x10) sendmsg$nl_xfrm(r7, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) (async) syz_open_procfs$namespace(r10, &(0x7f0000000140)='ns/uts\x00') r12 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r12, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="a90500000000000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab0000000000", 0x24}], 0x1}}], 0x1, 0x44800) 1.485947621s ago: executing program 3 (id=3837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3ff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0xb, 0x4, 0x30, 0xffffffffffffffff}, @ringbuf_query, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xe, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x1, r0, 0xffffffffffffffff], &(0x7f0000000400)=[{0x2, 0x3, 0x0, 0x9}, {0x4, 0x1, 0xf, 0x8}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0xe3, 0x60, &(0x7f0000000580)="e0da683a83e03afac3a7175d3cd8d64bea3dbf4811ea525c7cd84d72db27cb265553a75e596a879fc809348161d0209bdcf58a4ead2c0e320eb8e33338c4bd96c8846ba16972442d153967804e9926834f806d1a0f65e4bb1ee48377813245c7cec74b7f77351e378c3b9712d64f13a3d73821dd84ea0399abeb848bf4d2d605cdb5366bbb9432f04c6c457738bec7e7a34bebf192c317fd03ec0d41a413674c427cdd03fc002e949d23802b258588df653621da4768cd6132549fc29290d55dc1138fd607b1efeef4526cdac16c832b40bc0d457ea878f83bc106206af0d59f7260d4", &(0x7f0000000680)=""/96, 0x7, 0x0, 0x69, 0x1000, &(0x7f0000000700)="6b9c51bf652512a6a1c9354de2c79c5b6650b4b889e6fce0fbe4205dbda0e23775da4a25e8300dc72f77a1138b395d36568e069a4b349bc2f31fb149ee1129ebfb7572d6873d39846f5706bcc41a952f6a6650326fa3cb15d0a7ce4529c399c0680c1507233fde8b63", &(0x7f0000000a80)="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", 0x0, 0x0, 0x7}, 0x50) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.466973826s ago: executing program 4 (id=3838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000060000000060a010400000000000000000100000008000b400000000009000100737901007274000014000280080002400000000208000240000000041400018009000100686173680000000004000280140000001100010000000000000000000000000a"], 0xd4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff0200"], 0xfce) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000500)=0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000640)=0xe8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r12}, 0x10) r14 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r14, r13, 0x0, 0x0, 0x0}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000780)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) r19 = getgid() sendmsg$netlink(r0, &(0x7f00000009c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000340)={0x174, 0x13, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@generic="38e5cf53c8ddc27668cf31511047342516a1aa7859323f620db32a2695e4b26c6be502a634a072cc88ffe3ed801c9cbbed37a5fecda418c9c1115393e126c822159e5a35c8cacdd6bcbb36b9659492fdfe47515211b506f165546be54a993fe991db064a938374a635b94ecc92b1ac51", @typed={0xdd, 0x2a, 0x0, 0x0, @binary="c78ac6732e5cde52b105fbf75809d467185e1298499c936adefd9bfd4ba1c52865570d42103a7fd228b08f922815c8d770a4f0b930a89f9f160dfde69227e365ac04bc2449d76bc2c512470f792dd2134430589c652c5bd14ff19c72c5d7f709c46761c1228aaad275330efc091267ca8e8c3c0239976e16813593081a1df0975731a324aecaa9d1f68ecc1dcd7bf49a7f893fc7e3cc6695f6ad2f77212bf5611003aee78c4b6d9465873e706713a0bc95d948d3b488a4aa3b0ef4cb3dbcc96415fef394f077ae3129ac0024b2ab361bfb285bb579ef6cbb4d"}, @nested={0x8, 0x2b, 0x0, 0x1, [@nested={0x4, 0x77}]}, @typed={0x4, 0x142}, @typed={0x8, 0xc9, 0x0, 0x0, @uid=r4}]}, 0x174}], 0x1, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r2, r3, r2]}}, @rights={{0x38, 0x1, 0x1, [r6, r7, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r2, r1, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @rights={{0x18, 0x1, 0x1, [r3, r16]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xd8, 0x4}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.244686627s ago: executing program 1 (id=3839): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001b40)={&(0x7f00000018c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz1\x00'}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001b40)={&(0x7f00000018c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001900)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz1\x00'}]}]}, 0x28}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.243729761s ago: executing program 0 (id=3840): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a074edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'syzkaller1\x00'}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000002040)='{\x00', 0x2) bind$unix(r1, &(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100), 0x0) 1.243138183s ago: executing program 3 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003081000418e0ec00004fcff", 0x58}], 0x1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000240)='\x00', 0x0, 0x8}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000009408000000000000ffffffff184b0000000000000000700800"/40], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x3, 0x10}, 0x10, 0x1bc22, r3, 0x3, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x1, 0x4, 0x4}, {0x3, 0x4, 0xc, 0x2}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x1}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0db5055a47951cf7b7e871aab233bf60addc82eba408e346b73811387d8d02e4ee2a3ef7e57bada66c47fdff1bb354"], 0x3c}}, 0x0) 1.222655569s ago: executing program 2 (id=3842): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="200026bd7000ffdbdf257c00000008000300", @ANYRES32=0x0, @ANYBLOB="8200990007000000800000000a00060008021100000100000a000600ffffffffffff00100a007a6a4c060008021100000000000a00060008021100000000000a000600ffffffffffff00000a000600ff4d7b139ffc63bf4d19e168f5729330ffffffffff00000a00060008021100000000000a00060008021100000100002fc1f14a593bdaef9e98fbb05c38039fe890e4b2057cfd7163"], 0x88}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) r5 = socket$inet6(0xa, 0x1, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000380)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r6, &(0x7f0000000300)={0x2c, 0x2, r7, 0x2000000}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x800, 0x2, 0x2, 0x2, 0x3}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b1a, &(0x7f0000000040)) (async) setsockopt$inet6_int(r5, 0x29, 0x17, &(0x7f00000003c0)=0xc4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, 0x0, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x4, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}}, 0x3a) socket$inet6(0xa, 0x3, 0x88) 994.197272ms ago: executing program 2 (id=3843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x29}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) 892.477658ms ago: executing program 3 (id=3844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0005001f193c99a8772efb0c000200ffff0000000000007d89a60332fac03358ce3c726082ee467669444255ac1a44d25df50b770c6c0626833a3dda78f74e6ebaaa5954b54947f5c7942b3309654e7baba9c5f92916c262bdea4f3e5a6045dd47b7e548ad71a37d6ec9cfc71abe5a5b5ab0fe4f58a9d5d19e910d934254eaa52c0f3a4f4ecd50d23c51c4c82bd2f03773dec9add690453ed9ae99fd4c380077b8896d7bd2c70d8b651e5d05a58eae4013ca3b8ede741a5b6ba3adfb73f07411ec7641af6f0a"], 0x3c}}, 0x20000000) 884.432324ms ago: executing program 1 (id=3845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x40000000}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bda3e9db40a66a06886a", 0xa}], 0x1}, 0x4040845) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket(0x8, 0x3, 0xffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x23}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast1}, {}, {}, {@broadcast}, {@initdev}, {@local}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x4004001) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 749.268193ms ago: executing program 3 (id=3846): r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173d6642b742d6c69"], 0x38}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd006}, 0x94) 672.820086ms ago: executing program 4 (id=3847): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffefffff}, {0x16}]}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRESOCT=r6, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4856) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) 660.328465ms ago: executing program 0 (id=3848): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/254, &(0x7f00000003c0)=0xfe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100027bd7000fddbdf25020000000900030073797a32000000000900030073797a3200000000140002006d6163766c616e3100000000000000001400020076657468315f6d616376746170000000050004000200000002ee462f3de09e61fe92b34e840f688a1ba37cb9fa79faf99d5bed779bd8ad8486253b2d3895f284a6229f21e33058cdbc94cf31434e1433414f2a460373f711b4a005428e7bf006c43f178ebf6d45542db3bb9f5897413fe48a69bdb35496a139220a65f8"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40008000) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x30, 0x3f, 0x400, 0x70bd2c, 0x25dfdbfd, {0xc}, [@nested={0x1c, 0x1a, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @fd=r0}, @typed={0xf, 0xff, 0x0, 0x0, @str='SMC_PNETID\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) 631.091194ms ago: executing program 2 (id=3849): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) getsockopt$inet6_buf(r2, 0x29, 0x4, 0x0, &(0x7f0000000340)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) 372.478486ms ago: executing program 0 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x2000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000974544099f271f4811b59fe9116855457a486460efb41767bcac683527b6121c72aaaebb26845b74729b277a08c18854b3096223c58b0f6b7b4591ffcfdc2fa7ac49cf2321945acb537cacb989fb9a75881a499183663df567a2c8a6ce5b457887fd8d08f8ed7a202b9d04f0c700e8c19211e3a7c0d3c0d208e01d0a4c", @ANYRES16=r3, @ANYBLOB="010003000000000000000100000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000001d80)=0xffffff30) 365.019113ms ago: executing program 3 (id=3851): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="ae1e020080000000"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000010c0)={0x80, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x3e, 0xac, "688d55ad9b8839a300993a46494d1d2131c8c57048d76c83ce13bbe6da50fdec0419470dc880a4396305af0f20c5561b7428ec39e52684e95712"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x8, 0x1, 0x5a17, 0x2, 0xfff8, 0x9, 0x1ac, 0x1]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000000)=0xfffffffc, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r13, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f0000001300)) readv(r11, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) 364.552092ms ago: executing program 2 (id=3852): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xffffff8f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3}}, 0x7, 0x6}, &(0x7f00000003c0)=0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) 193.747144ms ago: executing program 4 (id=3853): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x8, 0x8, 0x1, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x10000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x3b, 0x0, "48380adfd31728a13bf663d4bdc88b0963f59959f482b416d44d9fc88f25b23f023f0fb961bfa197915bcf9041022c26a9e3f7fa2448f1db8138db20f019ff3261e9da9885f1df65b31a23e2da0cf975"}, 0xd8) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 140.834491ms ago: executing program 1 (id=3854): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) 140.17806ms ago: executing program 0 (id=3855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x12e1d5b2e2604ef7}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@deltfilter={0x15c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0xfff2}, {0xc, 0xb}, {0x1, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x11c, 0x2, [@TCA_CGROUP_EMATCHES={0x118, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2}, {0x8, 0x5, 0x38, 0x1, 0x9, 0x2, 0x1}}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x85}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="aee722946120b68fce91"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="f901674365bd16340134", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7}, {0x5, 0xfb}}}]}}, @TCF_EM_CONTAINER={0x84, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x7}, "0593e3bd64e013cb7a584f13c500cf2e05a408b88c48a284a45ee6a0d5e4ca881d6913702e9638f843d7ebed582991cd5dc0f40014dd45bc5a475a80f2392ee5c93671619d37399aa212a5aaf8ec5d7142fa6ee7d163893157c3acf70dfbd5e61b92af684cc909af0d603f7306744d3b412fc4e2f157f9"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x111}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x30) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001705000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x10000, @mcast2, 0xffffffff}}, 0x4, 0x8, 0x7, 0x7fff, 0x7758}, &(0x7f00000005c0)=0x98) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000002c0)={r8, 0x7}, 0x8) socket$inet6(0xa, 0x1, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000600)={r6, 0xd, 0x6, 0xdc2, 0xffff, 0x3ff, 0x14, 0x6bfc, {r8, @in6={{0xa, 0x4e24, 0xb9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x92ec}}, 0x5, 0x9, 0x8, 0x10, 0x8}}, &(0x7f00000006c0)=0xb0) 70.024845ms ago: executing program 2 (id=3856): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) recvfrom$ax25(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@private0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', r8, 0x80, 0xa4d3661025c86628, 0x9, 0x1, {{0x25, 0x4, 0x1, 0x34, 0x94, 0x66, 0x0, 0x90, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x27, 0xaa, [@local, @broadcast, @multicast1, @private=0xa010102, @remote, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0x35, 0x3, 0xb, [{@multicast2, 0x6}, {@local, 0x8}, {@loopback, 0x6}, {@multicast1, 0x7ff}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@multicast1, 0x4}, {@multicast2, 0x8}, {@remote, 0x9}]}, @generic={0x0, 0x9, "287a1f3533ba23"}, @end]}}}}}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x100, 0x0, 0x0, {0x2, 0x14}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 0s ago: executing program 1 (id=3857): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r1, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): etlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'. [ 278.153085][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2051'. [ 278.166446][T13329] vlan3: entered allmulticast mode [ 278.178086][T13327] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 278.206979][T13327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.298240][T13338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.458312][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 278.520951][T13348] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2054'. [ 278.586140][ T1338] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 279.025194][T13377] team0: Device vti0 is of different type [ 279.332480][T13390] lo speed is unknown, defaulting to 1000 [ 279.427257][T13393] netlink: 'syz.3.2069': attribute type 4 has an invalid length. [ 279.462715][T13396] netlink: 'syz.0.2068': attribute type 21 has an invalid length. [ 280.433215][T13442] erspan0: entered promiscuous mode [ 280.525278][T13442] gretap0: entered promiscuous mode [ 280.563487][T13442] debugfs: 'hsr1' already exists in 'hsr' [ 280.587923][T13442] Cannot create hsr debugfs directory [ 280.617312][T13448] tipc: Enabling of bearer rejected, already enabled [ 280.674992][T13448] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 280.716271][T13448] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 280.932137][T13461] vlan3: entered allmulticast mode [ 280.939697][T13461] gretap0: entered allmulticast mode [ 281.115757][T13390] syzkaller0 speed is unknown, defaulting to 1000 [ 281.558281][T13494] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.622521][T13478] team0: Port device vlan0 removed [ 281.709717][T13478] team0: Port device geneve0 removed [ 281.722889][T13484] team0: Unable to change to the same mode the team is in [ 281.761145][T13498] team0: Port device vlan0 added [ 281.880476][ T6811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.944222][T13478] tipc: Enabling of bearer rejected, already enabled [ 282.091390][ T6811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.221581][ T6811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.270889][ T6811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.522972][T13536] __nla_validate_parse: 10 callbacks suppressed [ 282.522996][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 282.569243][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2104'. [ 282.655742][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.718523][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.754332][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.773313][T13546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.809895][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.814710][T13549] netlink: 'syz.0.2107': attribute type 11 has an invalid length. [ 282.831034][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.862738][T13549] netlink: 'syz.0.2107': attribute type 11 has an invalid length. [ 282.872812][T13549] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2107'. [ 282.878306][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.931915][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.947635][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.969089][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.980712][T13537] bond0: option ad_select: unable to set because the bond device is up [ 282.996609][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.006229][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.038611][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.068108][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.097011][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.135301][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.177815][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.217705][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.253676][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.280970][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.315792][T13537] bond0: option ad_select: unable to set because the bond device is up [ 283.341998][T13573] FAULT_INJECTION: forcing a failure. [ 283.341998][T13573] name failslab, interval 1, probability 0, space 0, times 1 [ 283.417617][T13573] CPU: 1 UID: 0 PID: 13573 Comm: syz.0.2113 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 283.417649][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.417662][T13573] Call Trace: [ 283.417670][T13573] [ 283.417679][T13573] dump_stack_lvl+0x189/0x250 [ 283.417708][T13573] ? __pfx____ratelimit+0x10/0x10 [ 283.417738][T13573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.417760][T13573] ? __pfx__printk+0x10/0x10 [ 283.417793][T13573] ? __pfx___might_resched+0x10/0x10 [ 283.417822][T13573] ? fs_reclaim_acquire+0x7d/0x100 [ 283.417851][T13573] should_fail_ex+0x414/0x560 [ 283.417889][T13573] should_failslab+0xa8/0x100 [ 283.417912][T13573] __kmalloc_noprof+0xcb/0x4f0 [ 283.417939][T13573] ? nf_tables_newrule+0x1506/0x2890 [ 283.417959][T13573] ? nla_strcmp+0x106/0x140 [ 283.417987][T13573] nf_tables_newrule+0x1506/0x2890 [ 283.418041][T13573] ? __pfx_nf_tables_newrule+0x10/0x10 [ 283.418065][T13573] ? nfnl_pernet+0x23/0x240 [ 283.418104][T13573] ? __nla_parse+0x40/0x60 [ 283.418133][T13573] nfnetlink_rcv+0x112f/0x2520 [ 283.418200][T13573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 283.418244][T13573] ? ref_tracker_free+0x63a/0x7d0 [ 283.418299][T13573] ? __netlink_deliver_tap+0x807/0x850 [ 283.418327][T13573] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.418377][T13573] netlink_unicast+0x82c/0x9e0 [ 283.418415][T13573] ? __pfx_netlink_unicast+0x10/0x10 [ 283.418443][T13573] ? netlink_sendmsg+0x642/0xb30 [ 283.418477][T13573] ? skb_put+0x11b/0x210 [ 283.418501][T13573] netlink_sendmsg+0x805/0xb30 [ 283.418543][T13573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.418577][T13573] ? aa_sock_msg_perm+0x94/0x160 [ 283.418606][T13573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.418628][T13573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.418665][T13573] __sock_sendmsg+0x21c/0x270 [ 283.418695][T13573] ____sys_sendmsg+0x505/0x830 [ 283.418724][T13573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.418759][T13573] ? import_iovec+0x74/0xa0 [ 283.418791][T13573] ___sys_sendmsg+0x21f/0x2a0 [ 283.418816][T13573] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.418887][T13573] ? __fget_files+0x2a/0x420 [ 283.418907][T13573] ? __fget_files+0x3a0/0x420 [ 283.418941][T13573] __x64_sys_sendmsg+0x19b/0x260 [ 283.418966][T13573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.419001][T13573] ? __pfx_ksys_write+0x10/0x10 [ 283.419026][T13573] ? rcu_is_watching+0x15/0xb0 [ 283.419063][T13573] ? do_syscall_64+0xbe/0x3b0 [ 283.419097][T13573] do_syscall_64+0xfa/0x3b0 [ 283.419123][T13573] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.419150][T13573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.419169][T13573] ? clear_bhb_loop+0x60/0xb0 [ 283.419203][T13573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.419222][T13573] RIP: 0033:0x7f9a56d8eb69 [ 283.419241][T13573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.419258][T13573] RSP: 002b:00007f9a57ce2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.419281][T13573] RAX: ffffffffffffffda RBX: 00007f9a56fb5fa0 RCX: 00007f9a56d8eb69 [ 283.419296][T13573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 283.419309][T13573] RBP: 00007f9a57ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 283.419322][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.419334][T13573] R13: 0000000000000000 R14: 00007f9a56fb5fa0 R15: 00007ffcb32a16a8 [ 283.419370][T13573] [ 284.052961][T13589] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.070196][T13594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2119'. [ 284.583876][T13616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2124'. [ 284.892139][T13628] FAULT_INJECTION: forcing a failure. [ 284.892139][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 284.960610][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2131'. [ 284.984681][T13628] CPU: 1 UID: 0 PID: 13628 Comm: syz.1.2129 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 284.984713][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.984726][T13628] Call Trace: [ 284.984734][T13628] [ 284.984743][T13628] dump_stack_lvl+0x189/0x250 [ 284.984771][T13628] ? __pfx____ratelimit+0x10/0x10 [ 284.984801][T13628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.984821][T13628] ? __pfx__printk+0x10/0x10 [ 284.984855][T13628] ? __pfx___might_resched+0x10/0x10 [ 284.984884][T13628] ? fs_reclaim_acquire+0x7d/0x100 [ 284.984913][T13628] should_fail_ex+0x414/0x560 [ 284.984952][T13628] should_failslab+0xa8/0x100 [ 284.984974][T13628] __kmalloc_cache_noprof+0x70/0x3d0 [ 284.985003][T13628] ? nfnetlink_rcv+0xeff/0x2520 [ 284.985034][T13628] nfnetlink_rcv+0xeff/0x2520 [ 284.985099][T13628] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 284.985155][T13628] ? ref_tracker_free+0x63a/0x7d0 [ 284.985211][T13628] ? __netlink_deliver_tap+0x807/0x850 [ 284.985241][T13628] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.985292][T13628] netlink_unicast+0x82c/0x9e0 [ 284.985331][T13628] ? __pfx_netlink_unicast+0x10/0x10 [ 284.985360][T13628] ? netlink_sendmsg+0x642/0xb30 [ 284.985386][T13628] ? skb_put+0x11b/0x210 [ 284.985411][T13628] netlink_sendmsg+0x805/0xb30 [ 284.985452][T13628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.985486][T13628] ? aa_sock_msg_perm+0x94/0x160 [ 284.985514][T13628] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.985538][T13628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.985569][T13628] __sock_sendmsg+0x21c/0x270 [ 284.985599][T13628] ____sys_sendmsg+0x505/0x830 [ 284.985628][T13628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.985662][T13628] ? import_iovec+0x74/0xa0 [ 284.985694][T13628] ___sys_sendmsg+0x21f/0x2a0 [ 284.985719][T13628] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.985787][T13628] ? __fget_files+0x2a/0x420 [ 284.985806][T13628] ? __fget_files+0x3a0/0x420 [ 284.985838][T13628] __x64_sys_sendmsg+0x19b/0x260 [ 284.985864][T13628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.985898][T13628] ? __pfx_ksys_write+0x10/0x10 [ 284.985923][T13628] ? rcu_is_watching+0x15/0xb0 [ 284.985959][T13628] ? do_syscall_64+0xbe/0x3b0 [ 284.985993][T13628] do_syscall_64+0xfa/0x3b0 [ 284.986021][T13628] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.986048][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.986068][T13628] ? clear_bhb_loop+0x60/0xb0 [ 284.986093][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.986112][T13628] RIP: 0033:0x7f598698eb69 [ 284.986142][T13628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.986159][T13628] RSP: 002b:00007f59878bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.986182][T13628] RAX: ffffffffffffffda RBX: 00007f5986bb5fa0 RCX: 00007f598698eb69 [ 284.986197][T13628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 284.986210][T13628] RBP: 00007f59878bd090 R08: 0000000000000000 R09: 0000000000000000 [ 284.986222][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.986234][T13628] R13: 0000000000000000 R14: 00007f5986bb5fa0 R15: 00007ffe918dca68 [ 284.986270][T13628] [ 285.030704][T13632] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2130'. [ 285.627656][T13654] netlink: 'syz.0.2137': attribute type 24 has an invalid length. [ 285.669049][T13659] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2136'. [ 285.848939][T13666] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 285.945001][T13673] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 285.995618][T13673] netlink: 'syz.1.2141': attribute type 1 has an invalid length. [ 286.118611][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 286.277022][T13692] openvswitch: netlink: Multiple metadata blocks provided [ 286.323111][T13692] openvswitch: netlink: Multiple metadata blocks provided [ 286.461804][T13702] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 286.555436][T13702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.621412][T13713] netlink: 'syz.3.2153': attribute type 11 has an invalid length. [ 286.626508][T13702] bond0: (slave rose0): Enslaving as an active interface with an up link [ 286.740166][T13722] netlink: 'syz.4.2155': attribute type 5 has an invalid length. [ 286.741672][T13724] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2155'. [ 287.076716][T13737] netlink: 'syz.4.2159': attribute type 21 has an invalid length. [ 287.216084][T13746] openvswitch: netlink: Missing key (keys=40, expected=80) [ 287.240374][T13746] bridge0: port 3(syz_tun) entered blocking state [ 287.269638][T13746] bridge0: port 3(syz_tun) entered disabled state [ 287.299079][T13746] syz_tun: entered allmulticast mode [ 287.334582][T13746] syz_tun: entered promiscuous mode [ 287.355647][T13749] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 287.408497][T13738] lo speed is unknown, defaulting to 1000 [ 287.446904][T13756] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 287.951310][T13776] __nla_validate_parse: 2 callbacks suppressed [ 287.951331][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 288.125436][T13784] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 288.376490][ T5847] block nbd2: Receive control failed (result -32) [ 288.447163][T13738] syzkaller0 speed is unknown, defaulting to 1000 [ 288.582584][T13798] veth1_macvtap: left promiscuous mode [ 288.588389][T13798] macsec0: entered promiscuous mode [ 288.602055][T13798] macsec0: entered allmulticast mode [ 288.644897][T13802] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 288.663823][T13800] veth1_macvtap: entered promiscuous mode [ 288.675546][T13800] veth1_macvtap: entered allmulticast mode [ 288.686126][T13800] macsec0: left promiscuous mode [ 288.701496][T13800] macsec0: left allmulticast mode [ 288.706723][T13800] veth1_macvtap: left allmulticast mode [ 288.879329][T13810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2176'. [ 288.906177][T13813] netlink: 'syz.3.2177': attribute type 33 has an invalid length. [ 288.925823][T13814] syz_tun: left allmulticast mode [ 288.937202][T13814] syz_tun: left promiscuous mode [ 288.945014][T13814] bridge0: port 3(syz_tun) entered disabled state [ 289.034581][T13814] bridge_slave_0: left allmulticast mode [ 289.054988][T13814] bridge_slave_0: left promiscuous mode [ 289.066919][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.093694][T13814] bridge_slave_1: left allmulticast mode [ 289.112375][T13814] bridge_slave_1: left promiscuous mode [ 289.132214][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.170551][T13814] bond0: (slave bond_slave_0): Releasing backup interface [ 289.208294][T13814] bond0: (slave bond_slave_1): Releasing backup interface [ 289.276963][T13814] team0: Port device team_slave_0 removed [ 289.303763][T13814] team0: Port device team_slave_1 removed [ 289.332921][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.356907][T13814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.371107][T13814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.379871][T13814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.400947][T13836] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2179'. [ 289.425866][T13814] bond3: (slave veth5): Releasing active interface [ 289.452782][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 289.634497][T13819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 289.646887][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.684409][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.715855][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.757141][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.857257][T13846] vlan1: entered promiscuous mode [ 289.865906][T13846] bridge0: entered promiscuous mode [ 289.963866][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'. [ 289.983149][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 289.992950][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 290.353490][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2190'. [ 290.481076][T13887] netlink: 'syz.3.2192': attribute type 21 has an invalid length. [ 290.521887][T13887] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 290.880772][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 290.958661][T13905] nbd3: detected capacity change from 0 to 127 [ 290.973129][ T5847] block nbd3: Receive control failed (result -104) [ 291.430104][T13929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.507731][T13932] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 291.988010][ T30] audit: type=1107 audit(1754296901.320:3): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 292.474344][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.846492][T14000] tipc: Enabling of bearer rejected, failed to enable media [ 293.780684][T13993] mpoa:mpoad_close: () going down [ 293.849483][T14048] syzkaller1: entered promiscuous mode [ 293.868161][T14048] syzkaller1: entered allmulticast mode [ 293.942161][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 294.050101][T14057] __nla_validate_parse: 5 callbacks suppressed [ 294.050122][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2237'. [ 294.271514][T14064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2238'. [ 294.284181][T14064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2238'. [ 294.321564][T14064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2238'. [ 294.354892][T14064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2238'. [ 294.786952][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 294.787541][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 295.306818][T14109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2252'. [ 295.351959][T14109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2252'. [ 295.402674][T14109] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2252'. [ 295.784987][T14134] openvswitch: netlink: Actions may not be safe on all matching packets [ 299.615671][T14255] team0: MTU too low for tipc bearer [ 299.625348][T14255] tipc: Disabling bearer [ 299.641010][T14255] __nla_validate_parse: 33 callbacks suppressed [ 299.641032][T14255] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2284'. [ 299.907691][T14270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'. [ 300.054276][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 300.162353][T14283] netlink: 'syz.4.2294': attribute type 10 has an invalid length. [ 300.177425][T14281] sctp: [Deprecated]: syz.2.2293 (pid 14281) Use of int in max_burst socket option. [ 300.177425][T14281] Use struct sctp_assoc_value instead [ 300.232129][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 300.248257][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 300.381121][T14296] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 300.504554][T14305] netlink: zone id is out of range [ 300.519255][T14305] netlink: zone id is out of range [ 300.531234][T14305] netlink: zone id is out of range [ 300.541045][T14305] netlink: zone id is out of range [ 300.561068][T14311] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 300.585051][T14311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2300'. [ 300.585074][T14305] netlink: zone id is out of range [ 300.617635][T14305] netlink: zone id is out of range [ 300.624460][T14315] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2302'. [ 300.642153][T14317] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2302'. [ 300.643277][T14305] netlink: zone id is out of range [ 300.671312][T14305] netlink: zone id is out of range [ 300.676657][T14305] netlink: zone id is out of range [ 300.682514][T14305] netlink: zone id is out of range [ 300.850938][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2307'. [ 300.855914][T14327] 8021q: VLANs not supported on ip6_vti0 [ 301.107738][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2310'. [ 301.362256][T14354] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 301.480803][T14355] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 301.600615][T14361] netlink: 'syz.4.2317': attribute type 2 has an invalid length. [ 303.927399][T14463] siw: device registration error -23 [ 303.956881][T14469] siw: device registration error -23 [ 304.283274][T14486] syzkaller0: entered promiscuous mode [ 304.295207][T14486] syzkaller0: entered allmulticast mode [ 305.232483][T14537] __nla_validate_parse: 9 callbacks suppressed [ 305.232505][T14537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2360'. [ 305.254657][T14537] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2360'. [ 305.298832][T14537] bridge5: entered allmulticast mode [ 305.652588][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 308.186566][T14584] IPv6: sit1: Disabled Multicast RS [ 308.193647][T14584] sit1: entered allmulticast mode [ 308.410590][T14616] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2378'. [ 308.422818][T14614] netem: incorrect ge model size [ 308.429099][T14614] netem: change failed [ 308.435740][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2379'. [ 308.526576][T14616] 8021q: VLANs not supported on gre0 [ 308.770800][T14633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'. [ 308.890735][T14636] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 308.942588][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 309.139571][T14643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.334026][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 309.360469][T14666] bridge0: port 3(syz_tun) entered disabled state [ 309.367801][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.375685][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.461805][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 309.486593][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 309.500532][T14672] net_ratelimit: 16 callbacks suppressed [ 309.500556][T14672] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 309.526237][T14672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.807260][T14690] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 310.494951][T14722] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 311.017419][T14748] netlink: 'syz.1.2418': attribute type 7 has an invalid length. [ 311.097204][T14748] : entered promiscuous mode [ 311.132061][T14752] __nla_validate_parse: 2 callbacks suppressed [ 311.132081][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 311.349465][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2419'. [ 311.371070][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 311.722168][T14783] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2426'. [ 311.846474][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 311.876137][ T1338] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 311.937381][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 312.265429][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 312.465939][T14830] netlink: 'syz.2.2436': attribute type 5 has an invalid length. [ 312.478247][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 312.838957][T14845] syz0: rxe_newlink: already configured on lo [ 312.880345][T14847] vlan0: entered promiscuous mode [ 312.967892][T14849] bond5: entered promiscuous mode [ 312.974316][T14849] bond5: entered allmulticast mode [ 312.980167][T14849] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.340587][T14867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.447227][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 313.501664][T14869] block nbd4: server does not support multiple connections per device. [ 313.522004][T14869] block nbd4: shutting down sockets [ 313.563661][T14875] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2451'. [ 314.283633][T14910] lo speed is unknown, defaulting to 1000 [ 314.595866][T14925] tipc: Enabling of bearer rejected, failed to enable media [ 314.654444][T14934] netlink: 'syz.3.2471': attribute type 1 has an invalid length. [ 314.668802][T14934] netlink: 'syz.3.2471': attribute type 3 has an invalid length. [ 314.855067][T14938] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 314.897785][T14910] syzkaller0 speed is unknown, defaulting to 1000 [ 315.003147][T14942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 315.072303][T14942] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 315.094779][T14942] gretap2: entered promiscuous mode [ 315.112075][T14942] gretap2: entered allmulticast mode [ 315.119711][T14941] syzkaller0: entered promiscuous mode [ 315.133461][T14941] syzkaller0: entered allmulticast mode [ 315.170114][T14954] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 315.197038][T14955] sctp: [Deprecated]: syz.2.2477 (pid 14955) Use of int in max_burst socket option deprecated. [ 315.197038][T14955] Use struct sctp_assoc_value instead [ 315.839875][T14979] netlink: 'syz.3.2483': attribute type 10 has an invalid length. [ 316.286899][T14993] __nla_validate_parse: 7 callbacks suppressed [ 316.286920][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 316.360726][T14993] dummy0: entered promiscuous mode [ 316.395635][T14993] dummy0: left promiscuous mode [ 316.495949][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2493'. [ 316.942427][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 317.413175][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2504'. [ 317.614620][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 317.647338][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2509'. [ 317.811724][T15068] tipc: Enabled bearer , priority 0 [ 317.820276][T15068] syzkaller0: entered promiscuous mode [ 317.829305][T15068] syzkaller0: entered allmulticast mode [ 317.864613][T15073] atomic_op ffff8880550e0998 conn xmit_atomic 0000000000000000 [ 317.894901][T15066] tipc: Resetting bearer [ 317.952409][T15066] tipc: Disabling bearer [ 317.957413][T15078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2513'. [ 317.986510][T15073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2513'. [ 318.056491][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 318.116223][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 318.135764][T15084] netdevsim netdevsim3 : renamed from netdevsim0 [ 318.168464][T15085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.360772][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.313467][T15142] lo speed is unknown, defaulting to 1000 [ 319.719217][T15142] syzkaller0 speed is unknown, defaulting to 1000 [ 320.149290][T15191] netlink: set zone limit has 8 unknown bytes [ 320.340389][T15196] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 321.275540][T15245] bond0: option mode: unable to set because the bond device is up [ 321.304343][ T11] block nbd3: Possible stuck request ffff8880253b0000: control (read@0,1024B). Runtime 30 seconds [ 321.315583][ T11] block nbd3: Possible stuck request ffff8880253b01c0: control (read@1024,1024B). Runtime 30 seconds [ 321.326785][ T11] block nbd3: Possible stuck request ffff8880253b0380: control (read@2048,1024B). Runtime 30 seconds [ 321.338712][ T11] block nbd3: Possible stuck request ffff8880253b0540: control (read@3072,1024B). Runtime 30 seconds [ 321.382088][T15248] __nla_validate_parse: 15 callbacks suppressed [ 321.382110][T15248] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2569'. [ 321.447741][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 321.457766][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 321.470586][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 321.836575][T15271] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 321.977537][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 322.007097][T15284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2574'. [ 322.028166][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 322.050290][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 322.124861][T15283] bridge0: port 1(vlan1) entered blocking state [ 322.142603][T15283] bridge0: port 1(vlan1) entered disabled state [ 322.150847][T15283] vlan1: entered allmulticast mode [ 322.160946][T15283] bridge0: entered allmulticast mode [ 322.164516][T15293] block nbd4: Unsupported socket: shutdown callout must be supported. [ 322.183967][T15283] vlan1: left allmulticast mode [ 322.198275][T15283] bridge0: left allmulticast mode [ 322.220795][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 322.237642][T15286] tunl0: entered promiscuous mode [ 322.243286][T15286] tunl0: left allmulticast mode [ 322.255258][T15286] gre0: entered promiscuous mode [ 322.271331][T15286] gre0: left allmulticast mode [ 322.275431][T15293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2580'. [ 322.286531][T15286] gretap0: left allmulticast mode [ 322.338609][T15286] erspan0: left allmulticast mode [ 322.372483][T15286] ip_vti0: entered promiscuous mode [ 322.384440][T15286] ip_vti0: left allmulticast mode [ 324.586035][T15398] vcan0 (unregistering): left allmulticast mode [ 325.523741][T15444] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 325.733185][T15450] can: request_module (can-proto-0) failed. [ 326.415093][T15493] __nla_validate_parse: 15 callbacks suppressed [ 326.415119][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2630'. [ 326.600210][T15503] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 327.073818][T15532] 8021q: VLANs not supported on lo [ 327.365334][T15544] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2645'. [ 327.432390][T15548] netlink: 'syz.3.2646': attribute type 21 has an invalid length. [ 327.452261][T15551] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 327.745127][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2651'. [ 327.920496][T15572] bond8: entered promiscuous mode [ 327.946493][T15572] bond8: entered allmulticast mode [ 327.969475][T15572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.407454][T15606] netlink: 'syz.2.2659': attribute type 3 has an invalid length. [ 328.455968][T15606] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2659'. [ 328.561662][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 328.706376][T15627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.711271][T15620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 328.795860][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 328.805601][T15623] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 328.841672][T15623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2664'. [ 329.269185][T15657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2671'. [ 329.334566][T15660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2671'. [ 329.666409][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 329.691758][T15678] netlink: 'syz.4.2677': attribute type 8 has an invalid length. [ 330.887907][T15739] netlink: 'syz.2.2692': attribute type 1 has an invalid length. [ 330.923679][T15739] netlink: 'syz.2.2692': attribute type 2 has an invalid length. [ 331.014875][T15746] netlink: 'syz.2.2692': attribute type 32 has an invalid length. [ 331.158198][T15752] syzkaller1: entered promiscuous mode [ 331.196838][T15752] syzkaller1: entered allmulticast mode [ 331.426622][T15769] __nla_validate_parse: 8 callbacks suppressed [ 331.426642][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 331.508994][T15766] veth7: entered promiscuous mode [ 331.694468][T15764] IPVS: stopping master sync thread 12260 ... [ 331.958427][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 331.993575][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2706'. [ 332.112056][T15804] 8021q: VLANs not supported on ip6_vti0 [ 332.180935][T15810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'. [ 332.195883][T15812] netlink: 'syz.0.2709': attribute type 29 has an invalid length. [ 332.205430][T15806] netlink: 'syz.1.2708': attribute type 75 has an invalid length. [ 332.358353][T15820] tipc: Enabling of bearer rejected, failed to enable media [ 332.375824][T15821] IPVS: set_ctl: invalid protocol: 22 172.30.4.1:20000 [ 332.447033][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2712'. [ 332.548553][T15832] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2715'. [ 332.683773][T15838] netlink: ct family unspecified [ 332.693369][T15838] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.750362][T15842] sctp: [Deprecated]: syz.4.2718 (pid 15842) Use of int in maxseg socket option. [ 332.750362][T15842] Use struct sctp_assoc_value instead [ 333.193103][T15861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2723'. [ 333.379755][T15867] tipc: Enabling of bearer rejected, failed to enable media [ 333.679668][T15886] tipc: Enabled bearer , priority 0 [ 333.712391][T15886] syzkaller0: entered promiscuous mode [ 333.717921][T15886] syzkaller0: entered allmulticast mode [ 333.793508][T15888] tipc: Resetting bearer [ 333.818062][T15880] tipc: Resetting bearer [ 333.888908][T15880] tipc: Disabling bearer [ 333.917222][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 333.944565][T15896] tipc: Enabling of bearer rejected, failed to enable media [ 334.152730][T15913] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2735'. [ 334.165852][T15914] netlink: 'syz.2.2739': attribute type 2 has an invalid length. [ 334.795797][T15949] tipc: Enabling of bearer rejected, already enabled [ 335.224292][T15965] netlink: 'syz.1.2752': attribute type 11 has an invalid length. [ 335.255803][T15965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2752'. [ 335.408764][T15968] macsec4: entered promiscuous mode [ 335.557993][T15968] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 335.570578][T15968] netlink: 'syz.2.2753': attribute type 11 has an invalid length. [ 336.466101][T16027] __nla_validate_parse: 9 callbacks suppressed [ 336.466124][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2769'. [ 336.496752][T16028] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2768'. [ 336.508420][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 336.528700][T16027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2769'. [ 336.559119][T16035] netlink: 'syz.3.2772': attribute type 10 has an invalid length. [ 336.909373][T16050] erspan0: entered promiscuous mode [ 336.919131][T16050] erspan0: entered allmulticast mode [ 337.124103][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 337.154312][T16066] netlink: 'syz.4.2782': attribute type 1 has an invalid length. [ 337.428577][T16066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2782'. [ 337.816851][T16115] netlink: 'syz.2.2796': attribute type 23 has an invalid length. [ 337.988036][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 338.664629][T16144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2807'. [ 338.695664][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 338.745889][T16144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2807'. [ 338.823286][T16153] netlink: 'syz.4.2808': attribute type 5 has an invalid length. [ 338.935997][T16153] geneve3: entered promiscuous mode [ 338.980733][T16153] geneve3: entered allmulticast mode [ 339.027830][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.038381][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.052928][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.063352][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.079892][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.088153][ T5938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 339.100106][T16156] tipc: Enabling of bearer rejected, failed to enable media [ 339.174779][ T5938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 339.205617][ T5938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 339.261905][ T5938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 339.350394][T16158] lo speed is unknown, defaulting to 1000 [ 339.537586][T16175] batadv2: entered allmulticast mode [ 340.008288][T16200] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 340.130247][T16158] syzkaller0 speed is unknown, defaulting to 1000 [ 341.222572][ T5847] Bluetooth: hci5: command tx timeout [ 341.346825][T16158] chnl_net:caif_netlink_parms(): no params data found [ 341.426943][T16256] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 341.458037][T16256] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 341.482627][T16256] __nla_validate_parse: 4 callbacks suppressed [ 341.482648][T16256] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2834'. [ 341.738856][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2835'. [ 341.800263][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2835'. [ 341.918653][T16269] macvtap1: entered promiscuous mode [ 341.946459][T16269] vlan0: entered promiscuous mode [ 341.959382][T16269] macvtap1: entered allmulticast mode [ 341.965413][T16269] vlan0: entered allmulticast mode [ 342.002577][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2838'. [ 342.052170][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'. [ 342.097789][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.129360][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.165079][T16158] bridge_slave_0: entered allmulticast mode [ 342.189716][T16158] bridge_slave_0: entered promiscuous mode [ 342.232698][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.245141][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.276237][T16158] bridge_slave_1: entered allmulticast mode [ 342.302952][T16158] bridge_slave_1: entered promiscuous mode [ 342.435775][T16301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 342.656253][T16158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.776069][T16158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.870615][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2844'. [ 343.148764][T16158] team0: Port device team_slave_0 added [ 343.175878][T16158] team0: Port device team_slave_1 added [ 343.301587][ T51] Bluetooth: hci5: command tx timeout [ 343.477686][T16350] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2849'. [ 343.512345][T16158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.519518][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.586250][T16358] x_tables: ip_tables: udp match: only valid for protocol 17 [ 343.594982][T16158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.612749][T16363] netlink: 'syz.3.2854': attribute type 4 has an invalid length. [ 343.624745][T16363] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2854'. [ 343.653828][T16363] : renamed from bond0 (while UP) [ 344.013689][T16158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.020860][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.048485][T16158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.093129][ T67] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 344.233143][T16158] hsr_slave_0: entered promiscuous mode [ 344.240467][T16158] hsr_slave_1: entered promiscuous mode [ 344.248018][T16158] debugfs: 'hsr0' already exists in 'hsr' [ 344.255431][T16158] Cannot create hsr debugfs directory [ 344.658001][T16158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 344.801066][T16158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 344.863673][T16408] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 344.981936][T16420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2868'. [ 345.050190][T16411] batman_adv: batadv0: Removing interface: team0 [ 345.090545][T16411] team0 (unregistering): Port device team_slave_0 removed [ 345.129911][T16411] team0 (unregistering): Port device team_slave_1 removed [ 345.141826][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 345.189697][T16158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 345.381566][ T5847] Bluetooth: hci5: command tx timeout [ 345.470384][T16158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 345.487102][T16434] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 345.531584][T16434] netlink: 'syz.3.2872': attribute type 3 has an invalid length. [ 345.760014][T16444] netlink: 'syz.4.2875': attribute type 1 has an invalid length. [ 345.879135][T16451] syzkaller0: create flow: hash 1913928569 index 1 [ 346.600180][T16481] __nla_validate_parse: 3 callbacks suppressed [ 346.600204][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 346.600272][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2884'. [ 346.664740][T16450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.715369][T16450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.141889][ T12] syzkaller0: tun_net_xmit 76 [ 347.149807][ T12] syzkaller0: tun_net_xmit 48 [ 347.190888][ T43] syzkaller0: tun_net_xmit 76 [ 347.308394][T16445] syzkaller0: delete flow: hash 1913928569 index 1 [ 347.419030][T16494] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 347.471643][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 347.480828][ T5847] Bluetooth: hci5: command tx timeout [ 349.015563][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 349.030664][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.052021][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.060944][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.073844][T16158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.164084][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.208272][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.229514][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.239823][T16158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.283482][T16158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.304370][ T5938] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.319055][ T5938] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.340553][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 349.351727][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.387045][ T5938] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.421368][ T5938] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.451928][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.463188][T16158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.690520][T16519] bond9: entered promiscuous mode [ 349.710810][T16519] bond9: entered allmulticast mode [ 349.721559][T16519] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.872043][T16534] bond0: (slave dummy0): Releasing backup interface [ 349.895425][T16534] dummy0: left allmulticast mode [ 349.914869][T16534] bond0: (slave bond_slave_0): Releasing backup interface [ 349.918429][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 349.932628][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 349.943580][T16534] bond0: (slave ): Releasing backup interface [ 349.961062][T16534] mac80211_hwsim hwsim11 : left allmulticast mode [ 350.028552][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2895'. [ 350.081493][T16534] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2895'. [ 350.156543][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2895'. [ 350.263434][T16551] tipc: Enabling of bearer rejected, already enabled [ 350.317762][T16158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.608243][T16158] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.638458][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.645738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.683080][T16575] openvswitch: netlink: IP tunnel dst address not specified [ 350.710105][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.717387][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.899154][T16580] netlink: 'syz.3.2906': attribute type 3 has an invalid length. [ 351.026420][T16158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.270449][T16604] netlink: 'syz.4.2911': attribute type 10 has an invalid length. [ 351.300733][T16604] geneve0: left allmulticast mode [ 351.316909][T16604] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.386574][ T11] block nbd3: Possible stuck request ffff8880253b0000: control (read@0,1024B). Runtime 60 seconds [ 351.398775][ T11] block nbd3: Possible stuck request ffff8880253b01c0: control (read@1024,1024B). Runtime 60 seconds [ 351.412014][ T11] block nbd3: Possible stuck request ffff8880253b0380: control (read@2048,1024B). Runtime 60 seconds [ 351.423243][ T11] block nbd3: Possible stuck request ffff8880253b0540: control (read@3072,1024B). Runtime 60 seconds [ 351.704143][T16620] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 351.740022][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.755429][T16622] __nla_validate_parse: 5 callbacks suppressed [ 351.755480][T16622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2916'. [ 351.764729][T16620] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2915'. [ 351.831893][T16623] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 351.858937][T16158] veth0_vlan: entered promiscuous mode [ 351.878685][T16623] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2915'. [ 351.881179][T16158] veth1_vlan: entered promiscuous mode [ 352.056163][T16158] veth0_macvtap: entered promiscuous mode [ 352.135758][T16158] veth1_macvtap: entered promiscuous mode [ 352.170483][T16634] netlink: 'syz.2.2918': attribute type 23 has an invalid length. [ 352.287129][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.317015][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.478991][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.502486][T16660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2922'. [ 352.527048][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.679223][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.713728][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.859776][T16672] netlink: 'syz.3.2925': attribute type 10 has an invalid length. [ 352.918211][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 352.947536][T16672] macvtap0: left allmulticast mode [ 353.050847][T16680] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 353.179768][T16685] raw_sendmsg: syz.4.2928 forgot to set AF_INET. Fix it! [ 353.225166][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.264070][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.417519][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.431878][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.548335][T16702] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 353.662465][T16706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.797531][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2938'. [ 353.984765][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'. [ 356.725409][ T5206] udevd[5206]: worker [5891] /devices/virtual/block/nbd3 is taking a long time [ 357.194247][T16741] netlink: del zone limit has 4 unknown bytes [ 357.209869][T16739] tipc: Enabled bearer , priority 0 [ 357.687477][T16747] syzkaller0: entered promiscuous mode [ 357.708277][T16747] syzkaller0: entered allmulticast mode [ 357.740832][T16747] tipc: Resetting bearer [ 357.778203][T16762] netlink: 'syz.0.2947': attribute type 39 has an invalid length. [ 357.812847][T16738] tipc: Resetting bearer [ 357.874779][T16767] "syz.4.2948" (16767) uses obsolete ecb(arc4) skcipher [ 358.055980][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 358.116012][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 358.252097][ T5912] tipc: Node number set to 517184598 [ 360.231494][T16738] tipc: Disabling bearer [ 360.285220][T16778] xfrm2: entered promiscuous mode [ 360.297684][T16778] xfrm2: entered allmulticast mode [ 360.593027][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2956'. [ 360.844265][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 361.050591][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2960'. [ 361.320363][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2969'. [ 361.340031][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2968'. [ 361.657782][T16863] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 361.672640][T16863] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 361.722871][T16868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2973'. [ 361.734978][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 362.212310][T16876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2977'. [ 362.609322][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.630514][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.642142][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.660557][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.671601][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.680206][T16899] netlink: 'syz.0.2984': attribute type 10 has an invalid length. [ 362.730359][T16899] dummy0: entered promiscuous mode [ 362.768286][T16899] bridge0: port 3(dummy0) entered blocking state [ 362.776799][T16899] bridge0: port 3(dummy0) entered disabled state [ 362.783819][T16899] dummy0: entered allmulticast mode [ 362.800538][T16899] bridge0: port 3(dummy0) entered blocking state [ 362.807278][T16899] bridge0: port 3(dummy0) entered forwarding state [ 362.918960][T16895] lo speed is unknown, defaulting to 1000 [ 363.020372][T16916] delete_channel: no stack [ 363.031870][T16916] netlink: 'syz.0.2989': attribute type 4 has an invalid length. [ 363.059065][T16917] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 363.111075][T16917] __nla_validate_parse: 3 callbacks suppressed [ 363.111098][T16917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2988'. [ 363.331922][T16923] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 363.396776][T16913] lo speed is unknown, defaulting to 1000 [ 363.414181][T16895] syzkaller0 speed is unknown, defaulting to 1000 [ 363.616395][T16928] tipc: Enabling of bearer rejected, failed to enable media [ 363.947324][T16935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2996'. [ 363.958413][T16913] syzkaller0 speed is unknown, defaulting to 1000 [ 364.195365][T16895] chnl_net:caif_netlink_parms(): no params data found [ 364.690902][T16968] netlink: 'syz.0.3004': attribute type 11 has an invalid length. [ 364.717126][T16968] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3004'. [ 364.751276][ T5847] Bluetooth: hci0: command tx timeout [ 364.957374][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3006'. [ 364.973442][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3006'. [ 365.065263][T16895] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.099616][T16895] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.127750][T16895] bridge_slave_0: entered allmulticast mode [ 365.146918][T16895] bridge_slave_0: entered promiscuous mode [ 365.198566][T16895] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.225232][T16895] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.260551][T16895] bridge_slave_1: entered allmulticast mode [ 365.294903][T16895] bridge_slave_1: entered promiscuous mode [ 365.486878][T16895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.522351][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.537037][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.552253][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 365.577912][T16895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.763855][T16998] tipc: Enabling of bearer rejected, already enabled [ 365.832607][ T8885] syzkaller0 speed is unknown, defaulting to 1000 [ 365.895542][T16895] team0: Port device team_slave_0 added [ 365.907808][T16895] team0: Port device team_slave_1 added [ 366.033569][T17018] tipc: Enabling of bearer rejected, already enabled [ 366.048565][T16895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.058617][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.093274][T16895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.109327][ T67] tipc: Resetting bearer [ 366.137132][T16895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.170609][T16895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.281540][T16895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.480050][T16895] hsr_slave_0: entered promiscuous mode [ 366.487937][T16895] hsr_slave_1: entered promiscuous mode [ 366.495766][T16895] debugfs: 'hsr0' already exists in 'hsr' [ 366.502392][T16895] Cannot create hsr debugfs directory [ 366.821801][ T5847] Bluetooth: hci0: command tx timeout [ 366.868396][T17058] netlink: 'syz.0.3026': attribute type 27 has an invalid length. [ 367.036974][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'. [ 367.367223][T17091] netlink: 'syz.4.3033': attribute type 4 has an invalid length. [ 367.406734][T16895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.431698][T17092] netlink: 'syz.4.3033': attribute type 4 has an invalid length. [ 367.469076][T17095] netlink: 'syz.1.3035': attribute type 32 has an invalid length. [ 367.605987][T16895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.733408][T16895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.797093][T17104] 8021q: VLANs not supported on ip6_vti0 [ 367.927437][T16895] netdevsim netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.334055][T17129] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3043'. [ 368.399463][T16895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.420815][T17138] netlink: 'syz.4.3046': attribute type 33 has an invalid length. [ 368.441416][T17138] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3046'. [ 368.477086][T16895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.554355][T16895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.615117][T16895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.735460][T17159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3049'. [ 368.846100][T17163] (unnamed net_device) (uninitialized): (slave macsec0): Device is not bonding slave [ 368.887912][T17163] (unnamed net_device) (uninitialized): option active_slave: invalid value (macsec0) [ 368.903829][ T5847] Bluetooth: hci0: command tx timeout [ 369.103711][T16895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.180940][T16895] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.258218][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.265591][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.336169][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.343382][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.549792][T16895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.619053][T17199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3063'. [ 370.074891][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 370.095906][T17219] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3068'. [ 370.111703][T17217] netlink: 'syz.2.3067': attribute type 20 has an invalid length. [ 370.120428][T17218] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3068'. [ 370.142473][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3067'. [ 370.187105][T17217] netlink: 'syz.2.3067': attribute type 20 has an invalid length. [ 370.211568][T17225] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3067'. [ 370.313691][T16895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.426362][T16895] veth0_vlan: entered promiscuous mode [ 370.470753][T16895] veth1_vlan: entered promiscuous mode [ 370.571644][T17229] netlink: 'syz.2.3070': attribute type 4 has an invalid length. [ 370.583991][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'. [ 370.639401][T17231] bridge0: port 4(vlan0) entered blocking state [ 370.648732][T17231] bridge0: port 4(vlan0) entered disabled state [ 370.662245][T17231] vlan0: entered allmulticast mode [ 370.668277][T17231] bridge0: entered allmulticast mode [ 370.690169][T17231] vlan0: left allmulticast mode [ 370.706136][T17231] bridge0: left allmulticast mode [ 370.726865][T17229] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 370.740143][T16895] veth0_macvtap: entered promiscuous mode [ 370.766833][T16895] veth1_macvtap: entered promiscuous mode [ 370.906574][T17234] bridge_slave_1 (unregistering): left allmulticast mode [ 370.918356][T17234] bridge_slave_1 (unregistering): left promiscuous mode [ 370.931084][T17234] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.981305][ T5847] Bluetooth: hci0: command tx timeout [ 371.026291][T16895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.070286][T16895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.117729][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.144166][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.218926][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.236717][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.334018][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.354231][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.425493][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.453436][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.554856][T17304] netlink: 'syz.2.3089': attribute type 8 has an invalid length. [ 373.059971][T17318] tipc: Started in network mode [ 373.082646][T17318] tipc: Node identity 2afbec1e7696, cluster identity 4711 [ 373.100729][T17318] tipc: Enabled bearer , priority 0 [ 373.230662][T17325] syzkaller0: entered promiscuous mode [ 373.240896][T17325] syzkaller0: entered allmulticast mode [ 373.279597][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.294179][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.321536][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.329855][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.338939][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.420295][T17325] tipc: Resetting bearer [ 373.474750][T17331] lo speed is unknown, defaulting to 1000 [ 373.587030][T17325] tipc: Resetting bearer [ 373.690019][T17325] tipc: Disabling bearer [ 373.982176][T17353] netlink: 'syz.3.3102': attribute type 4 has an invalid length. [ 374.071076][T17349] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.106202][T17331] syzkaller0 speed is unknown, defaulting to 1000 [ 374.154551][T17359] __nla_validate_parse: 7 callbacks suppressed [ 374.154571][T17359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3104'. [ 374.266645][T17359] team0: Mode changed to "broadcast" [ 374.288612][T17362] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3105'. [ 374.299675][T17364] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3106'. [ 374.330463][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 374.549766][T17367] bond6: entered promiscuous mode [ 374.590675][T17367] bond6: entered allmulticast mode [ 374.609822][T17367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.839466][T17390] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 374.853582][T17388] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 374.877499][T17331] chnl_net:caif_netlink_parms(): no params data found [ 374.886977][T17388] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3115'. [ 374.957055][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'. [ 374.966617][T17397] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3116'. [ 374.977459][T17397] netlink: 'syz.0.3116': attribute type 5 has an invalid length. [ 375.025415][T17390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 375.053665][T17400] netlink: 'syz.1.3118': attribute type 1 has an invalid length. [ 375.080179][T17393] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 375.212942][T17398] vlan1: entered allmulticast mode [ 375.218365][T17398] veth1: entered allmulticast mode [ 375.226253][T17398] veth1: entered promiscuous mode [ 375.235535][T17398] veth1: left promiscuous mode [ 375.245542][T17398] bond9: (slave vlan1): making interface the new active one [ 375.255338][T17398] veth1: entered promiscuous mode [ 375.262166][T17398] vlan1: entered promiscuous mode [ 375.268415][T17398] bond9: (slave vlan1): Enslaving as an active interface with an up link [ 375.272294][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 375.333866][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.388798][ T5847] Bluetooth: hci1: command tx timeout [ 375.398916][T17418] bridge_slave_1 (unregistering): left allmulticast mode [ 375.413896][T17418] bridge_slave_1 (unregistering): left promiscuous mode [ 375.415920][T17422] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 375.437710][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.495743][T17331] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.503818][T17331] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.514345][T17331] bridge_slave_0: entered allmulticast mode [ 375.523041][T17331] bridge_slave_0: entered promiscuous mode [ 375.549330][T17331] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.558804][T17331] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.566710][T17331] bridge_slave_1: entered allmulticast mode [ 375.586853][T17331] bridge_slave_1: entered promiscuous mode [ 375.690390][T17431] (unnamed net_device) (uninitialized): (slave macsec0): Device is not bonding slave [ 375.709606][T17431] (unnamed net_device) (uninitialized): option active_slave: invalid value (macsec0) [ 375.717139][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3124'. [ 375.739117][T17431] netlink: 'syz.3.3122': attribute type 16 has an invalid length. [ 375.763855][T17431] netlink: 'syz.3.3122': attribute type 17 has an invalid length. [ 375.833511][T17439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 375.881715][T17431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.934055][T17331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.969978][T17331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.086864][T17331] team0: Port device team_slave_0 added [ 376.120384][T17331] team0: Port device team_slave_1 added [ 376.258476][T17331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.273603][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.306434][T17331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.323936][T17331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.354732][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.386301][T17331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.509550][T17331] hsr_slave_0: entered promiscuous mode [ 376.529588][T17331] hsr_slave_1: entered promiscuous mode [ 376.540894][T17331] debugfs: 'hsr0' already exists in 'hsr' [ 376.557832][T17331] Cannot create hsr debugfs directory [ 377.088589][T17331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.127928][T17485] C: renamed from lo [ 377.194720][T17331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.316538][T17331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.461736][ T5847] Bluetooth: hci1: command tx timeout [ 377.508984][T17331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 377.520861][T17505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'. [ 377.960657][T17514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.979757][T17523] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 378.086591][T17331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.162626][T17331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.296256][T17530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.385562][T17331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.404997][T17331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.614494][T17331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.645507][T17331] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.675791][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.683138][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.709619][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.717319][T17427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.920207][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 379.296120][T17567] __nla_validate_parse: 6 callbacks suppressed [ 379.296142][T17567] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3159'. [ 379.479396][T17331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.542588][ T5847] Bluetooth: hci1: command tx timeout [ 379.818298][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 379.927521][T17592] netlink: 'syz.2.3165': attribute type 4 has an invalid length. [ 379.979584][T17597] netlink: 'syz.2.3165': attribute type 4 has an invalid length. [ 380.140696][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3166'. [ 380.570401][T17623] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 380.805694][T17623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.819874][T17331] veth0_vlan: entered promiscuous mode [ 380.840123][T17331] veth1_vlan: entered promiscuous mode [ 380.946643][T17331] veth0_macvtap: entered promiscuous mode [ 381.018802][T17642] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3174'. [ 381.019129][T17331] veth1_macvtap: entered promiscuous mode [ 381.227950][T17331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.284559][T17331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.434285][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 381.451362][T16327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.463509][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 381.465528][ T11] block nbd3: Possible stuck request ffff8880253b0000: control (read@0,1024B). Runtime 90 seconds [ 381.483880][ T11] block nbd3: Possible stuck request ffff8880253b01c0: control (read@1024,1024B). Runtime 90 seconds [ 381.495448][ T11] block nbd3: Possible stuck request ffff8880253b0380: control (read@2048,1024B). Runtime 90 seconds [ 381.506513][ T11] block nbd3: Possible stuck request ffff8880253b0540: control (read@3072,1024B). Runtime 90 seconds [ 381.544455][T16327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.556706][T16327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.566665][T16327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.623946][ T5847] Bluetooth: hci1: command tx timeout [ 381.731532][T17672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3185'. [ 381.756631][T16327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.773311][T16327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.820650][T16327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.842800][T16327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.117150][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 382.297953][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3186'. [ 382.503701][T17693] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 382.695431][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 382.914310][ T5840] syz_tun (unregistering): left allmulticast mode [ 382.936235][ T5840] syz_tun (unregistering): left promiscuous mode [ 382.964389][ T5840] bridge0: port 3(syz_tun) entered disabled state [ 383.194293][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.216178][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.233097][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.242711][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.251819][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.344853][T17706] C speed is unknown, defaulting to 1000 [ 383.818165][T17728] netlink: zone id is out of range [ 383.823562][T17728] netlink: zone id is out of range [ 383.828713][T17728] netlink: zone id is out of range [ 383.834742][T17728] netlink: zone id is out of range [ 383.842015][T17728] netlink: zone id is out of range [ 383.847310][T17728] netlink: zone id is out of range [ 383.867565][T17728] netlink: zone id is out of range [ 383.885792][T17728] netlink: zone id is out of range [ 383.891965][T17728] netlink: zone id is out of range [ 383.901525][T17728] netlink: zone id is out of range [ 383.924160][T17706] syzkaller0 speed is unknown, defaulting to 1000 [ 384.125801][T17730] syz.4.3201 (17730) used greatest stack depth: 19448 bytes left [ 384.322723][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3202'. [ 384.571889][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 384.889533][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3207'. [ 385.316697][ T5847] Bluetooth: hci2: command tx timeout [ 387.105635][T17706] chnl_net:caif_netlink_parms(): no params data found [ 387.285576][T17778] macvtap1: entered allmulticast mode [ 387.308481][T17778] veth0_macvtap: entered allmulticast mode [ 387.341895][T17785] netlink: 'syz.3.3215': attribute type 10 has an invalid length. [ 387.356560][T16327] vlan1: left promiscuous mode [ 387.389906][ T5847] Bluetooth: hci2: command tx timeout [ 387.433700][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'. [ 387.465682][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.478208][T17785] bond0: (slave team0): Enslaving as an active interface with an up link [ 387.488582][T17783] tipc: Started in network mode [ 387.494116][T17783] tipc: Node identity becc0f6d5613, cluster identity 4711 [ 387.503857][T17783] tipc: Enabled bearer , priority 0 [ 387.505956][T17795] IPVS: length: 232 != 24 [ 387.557476][T17787] syzkaller0: entered promiscuous mode [ 387.563596][T17787] syzkaller0: entered allmulticast mode [ 387.682436][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.689720][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.704295][T17706] bridge_slave_0: entered allmulticast mode [ 387.720891][T17706] bridge_slave_0: entered promiscuous mode [ 387.749597][T17783] tipc: Resetting bearer [ 387.783354][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.790688][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.808824][T17706] bridge_slave_1: entered allmulticast mode [ 387.819343][T17706] bridge_slave_1: entered promiscuous mode [ 387.877705][T17782] tipc: Resetting bearer [ 387.950131][T17782] tipc: Disabling bearer [ 388.024037][T17706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.122463][T17706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.339037][T17706] team0: Port device team_slave_0 added [ 388.366366][T17706] team0: Port device team_slave_1 added [ 388.649696][T17843] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3227'. [ 388.652404][T17706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.719097][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.748756][T17706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.769430][T17706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.813023][T17706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.855879][T17706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.888301][T17852] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 388.937008][T17863] Bluetooth: MGMT ver 1.23 [ 389.040019][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 389.079905][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 389.127963][T17706] hsr_slave_0: entered promiscuous mode [ 389.148994][T17706] hsr_slave_1: entered promiscuous mode [ 389.166528][T17706] debugfs: 'hsr0' already exists in 'hsr' [ 389.200736][T17706] Cannot create hsr debugfs directory [ 389.249900][T17873] veth3: entered promiscuous mode [ 389.255355][T17873] veth3: entered allmulticast mode [ 389.365973][T17888] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3240'. [ 389.449499][T17891] netlink: 'syz.0.3240': attribute type 6 has an invalid length. [ 389.459046][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3241'. [ 389.481961][ T5847] Bluetooth: hci2: command tx timeout [ 389.692867][ T43] IPVS: starting estimator thread 0... [ 389.692867][T17896] net_ratelimit: 399 callbacks suppressed [ 389.692886][T17896] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 389.740651][T17902] batman_adv: batadv0: Adding interface: wlan1 [ 389.747637][T17902] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.776074][T17902] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 389.801821][T17903] IPVS: using max 27 ests per chain, 64800 per kthread [ 390.169887][T17926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3251'. [ 390.184053][T17706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 390.388261][T17706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 390.513182][T17706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 390.573099][T17941] tipc: Started in network mode [ 390.578168][T17941] tipc: Node identity 9e461b645ece, cluster identity 4711 [ 390.617383][T17941] tipc: Enabled bearer , priority 0 [ 390.777972][T17706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 390.917450][T17939] tipc: Disabling bearer [ 390.938612][T17957] netlink: 'syz.3.3261': attribute type 1 has an invalid length. [ 390.949583][T17957] netlink: 'syz.3.3261': attribute type 4 has an invalid length. [ 390.957827][T17957] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3261'. [ 390.975692][T17958] netlink: 'syz.2.3260': attribute type 23 has an invalid length. [ 390.991386][ T5847] Bluetooth: hci0: command tx timeout [ 391.240209][T17706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.270533][T17706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.312722][T17706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.347858][T17968] vlan2: entered allmulticast mode [ 391.360077][T17968] bond0: entered allmulticast mode [ 391.391843][T17968] bond_slave_0: entered allmulticast mode [ 391.423017][T17968] bond_slave_1: entered allmulticast mode [ 391.446835][T17968] team0: entered allmulticast mode [ 391.466550][T17968] team_slave_0: entered allmulticast mode [ 391.478766][T17968] team_slave_1: entered allmulticast mode [ 391.494610][T17706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.547435][ T5847] Bluetooth: hci2: command tx timeout [ 391.899135][T17706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.980267][T17706] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.015360][T17744] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.022891][T17744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.069427][T17999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3270'. [ 392.079611][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3268'. [ 392.105589][T17744] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.113109][T17744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.549303][T18019] netlink: 'syz.4.3275': attribute type 10 has an invalid length. [ 392.624462][T18019] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.663085][T18019] bond0: (slave team0): Enslaving as an active interface with an up link [ 392.787271][T17706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.988098][T17706] veth0_vlan: entered promiscuous mode [ 393.012114][T17706] veth1_vlan: entered promiscuous mode [ 393.074950][T17706] veth0_macvtap: entered promiscuous mode [ 393.108674][T17706] veth1_macvtap: entered promiscuous mode [ 393.167685][T18036] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3281'. [ 393.186203][T17706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.219355][T17706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.282766][T17747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.305537][T17747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.323610][T17747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.352480][T17747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.382184][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3283'. [ 393.590872][T18045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3285'. [ 393.638942][T18045] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 393.669298][T17744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.714154][T17744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.736996][T18051] IPVS: Unknown mcast interface: pim6reg [ 393.798869][T17430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.820099][T17430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.187029][T18066] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3292'. [ 394.475796][T18075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.495011][T18076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3294'. [ 394.505611][T18073] C speed is unknown, defaulting to 1000 [ 394.582027][T18079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3296'. [ 395.055254][T18088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3300'. [ 395.211490][T18073] syzkaller0 speed is unknown, defaulting to 1000 [ 395.278893][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3300'. [ 395.385507][T18092] team_slave_0: entered promiscuous mode [ 395.391650][T18092] team_slave_1: entered promiscuous mode [ 395.735196][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 395.989576][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.006890][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.015830][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.037399][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.052246][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.190454][T18108] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.199079][T18108] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.318364][T18108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.340572][T18108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.521230][T17430] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.622617][T17430] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.640127][T17430] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.667382][T17430] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.736635][T18118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.963293][T18110] C speed is unknown, defaulting to 1000 [ 397.306493][T18135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3313'. [ 397.655096][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 397.676100][T18110] syzkaller0 speed is unknown, defaulting to 1000 [ 397.853244][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3322'. [ 398.102429][ T5847] Bluetooth: hci3: command tx timeout [ 398.749215][T18110] chnl_net:caif_netlink_parms(): no params data found [ 398.769435][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3329'. [ 398.817787][T18186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.853716][T18186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.890094][T18186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.909726][T18186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.948697][T18110] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.967056][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.981899][T18110] bridge_slave_0: entered allmulticast mode [ 399.990156][T18110] bridge_slave_0: entered promiscuous mode [ 400.020325][T18110] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.043213][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.054637][T18110] bridge_slave_1: entered allmulticast mode [ 400.080850][T18110] bridge_slave_1: entered promiscuous mode [ 400.181529][ T5847] Bluetooth: hci3: command tx timeout [ 400.218170][T18110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.247277][T18110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.385653][T18110] team0: Port device team_slave_0 added [ 400.409115][T18110] team0: Port device team_slave_1 added [ 400.620863][T18110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.645639][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.712718][T18110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.732329][T18110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.740076][T18110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.770072][T18110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.998463][T18110] hsr_slave_0: entered promiscuous mode [ 401.035217][T18110] hsr_slave_1: entered promiscuous mode [ 401.053900][T18110] debugfs: 'hsr0' already exists in 'hsr' [ 401.070646][T18110] Cannot create hsr debugfs directory [ 401.353645][T18254] netlink: 'syz.4.3340': attribute type 2 has an invalid length. [ 401.457268][T18257] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3342'. [ 401.568309][T18262] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3344'. [ 401.692610][T18110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.719059][T18110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.732197][T18110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 401.765849][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 401.780972][T18271] netlink: 'syz.4.3347': attribute type 29 has an invalid length. [ 401.804814][T18271] netlink: 'syz.4.3347': attribute type 29 has an invalid length. [ 401.870078][T18110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.886253][T18110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.915541][T18110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 402.144337][T18110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.194939][T18110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.230343][T18110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 402.262964][ T5847] Bluetooth: hci3: command tx timeout [ 402.484252][T18303] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 402.515190][T18303] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3354'. [ 402.539386][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3354'. [ 402.779578][T18310] syzkaller0: entered promiscuous mode [ 402.788405][T18310] syzkaller0: entered allmulticast mode [ 404.351726][ T5847] Bluetooth: hci3: command tx timeout [ 405.170927][T18335] tipc: Enabling of bearer rejected, media not registered [ 405.294379][T18110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.336265][T18110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.395104][T18346] dvmrp0: entered allmulticast mode [ 405.412185][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3366'. [ 405.421302][T18110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.440266][T18110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.804984][T18370] tipc: Enabled bearer , priority 0 [ 405.813715][T18366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3370'. [ 405.870851][T18370] syzkaller0: entered promiscuous mode [ 405.893294][T18370] syzkaller0: entered allmulticast mode [ 405.914980][T18370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 405.993195][T18370] tipc: Resetting bearer [ 406.004225][T18375] tap0: tun_chr_ioctl cmd 1074025676 [ 406.016660][T18375] tap0: owner set to 0 [ 406.026923][T18368] tipc: Resetting bearer [ 406.057835][T18368] tipc: Disabling bearer [ 406.093074][T18110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.122058][T18110] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.162989][T16325] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.170626][T16325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.198272][T16325] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.205980][T16325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.470214][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.544634][T18381] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3373'. [ 406.655100][T18110] veth0_vlan: entered promiscuous mode [ 406.769133][T18110] veth1_vlan: entered promiscuous mode [ 406.852876][T18110] veth0_macvtap: entered promiscuous mode [ 406.897053][T18110] veth1_macvtap: entered promiscuous mode [ 406.955653][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3378'. [ 407.045102][T18110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.108257][T18110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.199185][T16325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.230833][T16325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.281828][T16325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.311906][T16325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.656092][T17430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.691671][T17430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.828587][T17744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.833676][T18425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3387'. [ 407.849810][T17744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.863051][T18425] nbd: illegal input index -8454144 [ 408.326601][T18453] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3393'. [ 408.478362][T18459] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 408.675164][T18466] macvlan1: mtu greater than device maximum [ 408.826214][T18472] netlink: 'syz.3.3401': attribute type 11 has an invalid length. [ 408.993074][T18478] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 409.193368][T18493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3409'. [ 409.407038][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 409.545069][T18512] syzkaller0: entered promiscuous mode [ 409.550999][T18512] syzkaller0: entered allmulticast mode [ 409.600410][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 410.161202][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3422'. [ 410.229287][T18549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.248405][T18549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.390163][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 410.599537][T18562] tipc: Started in network mode [ 410.605097][T18562] tipc: Node identity 126efbfb3be3, cluster identity 4711 [ 410.621043][T18562] tipc: Enabled bearer , priority 0 [ 410.630810][T18563] syzkaller0: entered promiscuous mode [ 410.637431][T18563] syzkaller0: entered allmulticast mode [ 410.695816][T18562] tipc: Resetting bearer [ 410.740125][T18560] tipc: Resetting bearer [ 410.976371][T18560] tipc: Disabling bearer [ 410.980725][T18584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3433'. [ 411.317144][ T8882] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 411.355368][ T8882] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 411.542263][ T11] block nbd3: Possible stuck request ffff8880253b0000: control (read@0,1024B). Runtime 120 seconds [ 411.553570][ T11] block nbd3: Possible stuck request ffff8880253b01c0: control (read@1024,1024B). Runtime 120 seconds [ 411.565773][ T11] block nbd3: Possible stuck request ffff8880253b0380: control (read@2048,1024B). Runtime 120 seconds [ 411.590704][ T11] block nbd3: Possible stuck request ffff8880253b0540: control (read@3072,1024B). Runtime 120 seconds [ 411.754163][T18612] tipc: Started in network mode [ 411.759295][T18612] tipc: Node identity cef98c50b126, cluster identity 4711 [ 411.768752][T18612] tipc: Enabled bearer , priority 0 [ 411.806430][T18617] syzkaller0: entered promiscuous mode [ 411.813953][T18617] syzkaller0: entered allmulticast mode [ 411.853678][T18612] tipc: Resetting bearer [ 411.906801][T18609] tipc: Resetting bearer [ 411.995357][T18609] tipc: Disabling bearer [ 412.010117][T18623] netlink: 'syz.3.3445': attribute type 10 has an invalid length. [ 412.047474][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.067904][T18621] IPv6: sit2: Disabled Multicast RS [ 412.079827][T18621] sit2: entered allmulticast mode [ 412.080357][T18629] __nla_validate_parse: 1 callbacks suppressed [ 412.080373][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3446'. [ 412.152481][T18623] team_slave_0: left promiscuous mode [ 412.160855][T18623] team_slave_1: left promiscuous mode [ 412.208440][T18623] bond0: (slave team0): Releasing backup interface [ 412.217523][T18623] team0: left allmulticast mode [ 412.233991][T18623] team_slave_0: left allmulticast mode [ 412.258559][T18623] team_slave_1: left allmulticast mode [ 412.280003][T18623] batman_adv: batadv0: Adding interface: team0 [ 412.295381][T18623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.324265][T18623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 412.336546][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.384793][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.474082][T18619] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 412.585329][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.623345][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.670069][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.708281][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.769416][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.793487][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.846979][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.872324][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.904212][T18619] hsr0 speed is unknown, defaulting to 1000 [ 412.950881][T18619] hsr0 speed is unknown, defaulting to 1000 [ 413.094080][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3456'. [ 413.113642][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 413.597935][T18700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3466'. [ 413.626829][T18702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3466'. [ 413.785837][T18713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3468'. [ 413.843821][T18717] C: renamed from lo [ 414.195509][T18730] netlink: 'syz.3.3471': attribute type 10 has an invalid length. [ 414.281071][T18730] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 414.302813][T18730] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 414.325389][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 414.325906][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 414.413190][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3473'. [ 414.524039][T18737] netlink: 'syz.2.3473': attribute type 32 has an invalid length. [ 414.540495][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 414.550799][T18737] (unnamed net_device) (uninitialized): option coupled_control: invalid value (115) [ 414.752601][T18753] netlink: 'syz.4.3478': attribute type 1 has an invalid length. [ 414.843735][T18761] wg1: entered promiscuous mode [ 415.348674][T18785] lo: entered allmulticast mode [ 415.805848][T18802] tipc: Enabled bearer , priority 0 [ 415.823732][T18802] syzkaller0: entered promiscuous mode [ 415.829520][T18802] syzkaller0: entered allmulticast mode [ 415.877273][T18802] netlink: 'syz.4.3494': attribute type 10 has an invalid length. [ 415.979925][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.995090][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.049302][T18802] dummy0: entered promiscuous mode [ 416.058213][T18802] bridge0: port 3(dummy0) entered blocking state [ 416.066794][T18802] bridge0: port 3(dummy0) entered disabled state [ 416.090491][T18802] dummy0: entered allmulticast mode [ 416.146872][T18802] tipc: Resetting bearer [ 416.155051][T18814] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 416.192522][T18801] tipc: Resetting bearer [ 416.215269][T18801] tipc: Disabling bearer [ 416.289304][T18823] netlink: 'syz.2.3499': attribute type 7 has an invalid length. [ 416.298363][T18823] netlink: 'syz.2.3499': attribute type 8 has an invalid length. [ 417.172206][T18852] __nla_validate_parse: 9 callbacks suppressed [ 417.172227][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3509'. [ 417.229997][T18852] bond0: entered promiscuous mode [ 417.261954][T18852] bond_slave_0: entered promiscuous mode [ 417.286800][T18852] bond_slave_1: entered promiscuous mode [ 417.295986][T18852] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 417.353552][T18852] bond0: left promiscuous mode [ 417.358784][T18852] bond_slave_0: left promiscuous mode [ 417.366161][T18852] bond_slave_1: left promiscuous mode [ 417.383717][T18852] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 417.470761][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3513'. [ 418.017481][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 418.032062][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 418.130496][T18890] erspan0: entered promiscuous mode [ 418.137736][T18890] gretap0: entered promiscuous mode [ 418.161330][T18890] debugfs: 'hsr1' already exists in 'hsr' [ 418.191963][T18890] Cannot create hsr debugfs directory [ 418.866431][T18915] openvswitch: netlink: IP tunnel dst address not specified [ 419.104596][T18924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3532'. [ 419.508173][T18939] vlan2: entered allmulticast mode [ 419.513650][T18939] bridge0: entered allmulticast mode [ 419.827803][T18951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3539'. [ 419.920954][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3541'. [ 419.950197][T18958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.048377][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3543'. [ 420.329669][T18977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3546'. [ 420.356436][T18978] tc_dump_action: action bad kind [ 420.442344][T18986] netlink: 'syz.2.3548': attribute type 21 has an invalid length. [ 420.489316][T18989] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 421.081671][T19009] nbd4: detected capacity change from 0 to 127 [ 421.159562][ T5847] block nbd4: Receive control failed (result -104) [ 421.517408][T19033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.984466][T19052] netlink: 'syz.2.3564': attribute type 1 has an invalid length. [ 422.177720][T19052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.275794][T19057] vlan2: entered promiscuous mode [ 422.320496][T19057] bond1: entered promiscuous mode [ 422.341606][T19057] vlan2: entered allmulticast mode [ 422.367655][T19057] bond1: entered allmulticast mode [ 422.466603][T19064] bond1: (slave gretap1): making interface the new active one [ 422.515833][T19064] gretap1: entered promiscuous mode [ 422.532747][T19064] gretap1: entered allmulticast mode [ 422.560861][T19064] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 422.666437][T19064] syz.2.3564 (19064) used greatest stack depth: 18384 bytes left [ 422.829784][T19099] __nla_validate_parse: 3 callbacks suppressed [ 422.829821][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 423.813831][T19134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3585'. [ 423.900167][T19141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3586'. [ 423.940935][T19134] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3585'. [ 423.974723][ T5944] hid-generic 0005:0C45:1012.0003: item fetching failed at offset 0/1 [ 423.982404][T19140] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 423.997733][ T5944] hid-generic 0005:0C45:1012.0003: probe with driver hid-generic failed with error -22 [ 424.028814][T19146] netlink: 'syz.4.3587': attribute type 18 has an invalid length. [ 424.073168][T17742] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.090855][T17742] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.183291][T17742] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.244858][T17742] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.394532][T19166] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 424.498482][T19153] syzkaller1: entered promiscuous mode [ 424.506117][T19153] syzkaller1: entered allmulticast mode [ 424.536839][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'. [ 424.576044][T19148] netlink: 'syz.2.3588': attribute type 1 has an invalid length. [ 424.593905][T19148] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3588'. [ 424.633692][T19176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3595'. [ 424.879569][T19182] 8021q: VLANs not supported on lo [ 425.138346][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'. [ 425.199313][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3603'. [ 425.221060][T19198] delete_channel: no stack [ 425.229673][T19207] tipc: Enabling of bearer rejected, failed to enable media [ 425.441034][T19216] netlink: 'syz.0.3607': attribute type 2 has an invalid length. [ 425.454065][T19216] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 425.679867][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 426.046992][T19234] tipc: Enabled bearer , priority 0 [ 426.126230][T19232] tipc: Disabling bearer [ 426.202604][T19247] bpq0: entered promiscuous mode [ 426.253669][T19241] tipc: Enabling of bearer rejected, failed to enable media [ 426.602509][ T8885] IPVS: starting estimator thread 0... [ 426.741535][T19259] IPVS: using max 29 ests per chain, 69600 per kthread [ 427.008027][T19269] bond2: entered promiscuous mode [ 427.021587][T19269] bond2: entered allmulticast mode [ 427.044296][T19269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.072302][T19272] bond0: option mode: unable to set because the bond device has slaves [ 427.093440][T19277] sit0: entered promiscuous mode [ 427.125256][T19277] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 427.146154][T19278] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 427.480758][T19289] netlink: 'syz.1.3628': attribute type 10 has an invalid length. [ 428.025807][T19289] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.936996][T19346] __nla_validate_parse: 10 callbacks suppressed [ 428.937030][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 429.119923][T19350] delete_channel: no stack [ 429.150628][T19350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3647'. [ 429.179047][T19355] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 429.371951][T19362] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3651'. [ 429.413478][T19361] macvtap1: entered promiscuous mode [ 429.418856][T19361] vlan0: entered promiscuous mode [ 429.425214][T19361] macvtap1: entered allmulticast mode [ 429.431494][T19361] vlan0: entered allmulticast mode [ 429.436784][T19361] veth0_vlan: entered allmulticast mode [ 429.756014][T19379] syzkaller0: entered promiscuous mode [ 429.768594][T19377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3655'. [ 429.782352][T19379] syzkaller0: entered allmulticast mode [ 429.819471][T19372] tipc: Enabled bearer , priority 0 [ 429.871527][T19383] netlink: 'syz.0.3656': attribute type 23 has an invalid length. [ 430.003362][T19372] tipc: Resetting bearer [ 430.056122][T19372] tipc: Disabling bearer [ 430.133139][T19394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3659'. [ 430.322389][T19405] netlink: 'syz.0.3661': attribute type 1 has an invalid length. [ 430.519092][T19405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.583934][T19421] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3665'. [ 430.671503][T19414] macvtap1: entered promiscuous mode [ 430.682568][T19414] bond3: entered promiscuous mode [ 430.688316][T19414] macvtap1: entered allmulticast mode [ 430.700430][T19414] bond3: entered allmulticast mode [ 430.708213][T19414] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 430.803753][T19418] bond3: (slave gretap1): making interface the new active one [ 430.822010][T19418] gretap1: entered promiscuous mode [ 430.827677][T19418] gretap1: entered allmulticast mode [ 430.880640][T19418] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 430.946162][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3670'. [ 431.136580][T19439] tipc: Enabled bearer , priority 0 [ 431.169266][T19439] syzkaller0: entered promiscuous mode [ 431.183337][T19439] syzkaller0: entered allmulticast mode [ 431.235970][T19445] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3674'. [ 431.268991][T19439] tipc: Resetting bearer [ 431.306257][T19452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 431.387972][T19437] tipc: Resetting bearer [ 431.500696][T19437] tipc: Disabling bearer [ 432.146294][T19485] team0: Device xfrm1 is of different type [ 432.638522][T19504] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 432.803607][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 433.034384][T19524] netlink: 'syz.1.3691': attribute type 24 has an invalid length. [ 433.048680][T19522] unknown channel width for channel at 909000KHz? [ 433.070593][T19522] unknown channel width for channel at 909000KHz? [ 433.089120][T19522] unknown channel width for channel at 909000KHz? [ 433.447387][T19540] netlink: 'syz.4.3694': attribute type 75 has an invalid length. [ 434.106406][T19569] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 434.282408][T19572] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 434.384580][T19582] __nla_validate_parse: 2 callbacks suppressed [ 434.384603][T19582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 434.775004][T19588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.785960][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3712'. [ 434.825657][T19601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3711'. [ 434.869520][T19593] bond_slave_0: entered promiscuous mode [ 434.875822][T19593] bond_slave_1: entered promiscuous mode [ 434.882578][T19605] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3711'. [ 434.894251][T19593] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 434.918287][T19593] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 435.143118][T19608] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3713'. [ 435.225751][T19619] openvswitch: netlink: IP tunnel dst address not specified [ 435.335629][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3716'. [ 435.544306][T19628] syzkaller1: entered promiscuous mode [ 435.549857][T19628] syzkaller1: entered allmulticast mode [ 435.559521][T19643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 435.599450][T19638] netlink: 'syz.4.3720': attribute type 29 has an invalid length. [ 435.718587][T19643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.730239][T19638] netlink: 'syz.4.3720': attribute type 29 has an invalid length. [ 435.839173][T19644] syzkaller1: entered promiscuous mode [ 435.845683][T19644] syzkaller1: entered allmulticast mode [ 436.206811][T19667] netlink: 'syz.4.3727': attribute type 1 has an invalid length. [ 436.231567][T19667] netlink: 'syz.4.3727': attribute type 3 has an invalid length. [ 436.257675][T19667] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3727'. [ 436.279845][T19667] NCSI netlink: No device for ifindex 0 [ 436.350779][T19675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3730'. [ 436.599033][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3733'. [ 437.249017][T19708] tipc: Enabled bearer , priority 0 [ 437.292702][T19708] syzkaller0: entered promiscuous mode [ 437.315350][T19708] syzkaller0: entered allmulticast mode [ 437.372305][T19708] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 437.503967][T19708] tipc: Resetting bearer [ 437.551380][T19707] tipc: Resetting bearer [ 437.579579][T19707] tipc: Disabling bearer [ 437.887548][T19733] netlink: 'syz.2.3744': attribute type 4 has an invalid length. [ 438.499341][T19757] syz_tun: entered allmulticast mode [ 438.546302][T19757] syz_tun: left allmulticast mode [ 438.560812][T19764] openvswitch: netlink: Flow key attribute not present in set flow. [ 438.861485][T19774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.026742][T19779] syzkaller0: entered promiscuous mode [ 439.034009][T19779] syzkaller0: entered allmulticast mode [ 439.056476][T19784] tipc: MTU too low for tipc bearer [ 439.440843][T19812] tipc: Enabled bearer , priority 0 [ 439.461037][T19812] syzkaller0: entered promiscuous mode [ 439.477301][T19812] syzkaller0: entered allmulticast mode [ 439.495449][T19812] tipc: Resetting bearer [ 439.504231][T19811] tipc: Resetting bearer [ 439.524606][T19811] tipc: Disabling bearer [ 439.847374][T19825] __nla_validate_parse: 7 callbacks suppressed [ 439.847393][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 439.880884][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 439.883331][T19825] dummy0: entered promiscuous mode [ 439.912691][T19825] batadv_slave_1: entered promiscuous mode [ 439.913059][T19829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3772'. [ 439.920855][T19825] debugfs: 'hsr1' already exists in 'hsr' [ 439.949768][T19825] Cannot create hsr debugfs directory [ 439.984360][T19827] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 440.023708][T19827] netlink: 'syz.3.3773': attribute type 2 has an invalid length. [ 440.217679][T19843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 440.318285][T19850] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 440.350933][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.366454][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.374070][T19843] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 440.403350][T19843] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 440.431656][T19850] ip6tnl2: entered promiscuous mode [ 440.437108][T19850] ip6tnl2: entered allmulticast mode [ 440.495466][T19858] netlink: 'syz.1.3779': attribute type 58 has an invalid length. [ 440.518084][T19858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3779'. [ 440.884606][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3786'. [ 440.908788][T19878] syzkaller1: entered promiscuous mode [ 440.925795][T19878] syzkaller1: entered allmulticast mode [ 441.033059][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'. [ 441.497648][T19898] pim6reg: entered allmulticast mode [ 441.627521][ T11] block nbd3: Possible stuck request ffff8880253b0000: control (read@0,1024B). Runtime 150 seconds [ 441.639628][ T11] block nbd3: Possible stuck request ffff8880253b01c0: control (read@1024,1024B). Runtime 150 seconds [ 441.650981][ T11] block nbd3: Possible stuck request ffff8880253b0380: control (read@2048,1024B). Runtime 150 seconds [ 441.663790][ T11] block nbd3: Possible stuck request ffff8880253b0540: control (read@3072,1024B). Runtime 150 seconds [ 441.862553][T19907] syz_tun: entered allmulticast mode [ 441.942135][T19905] syz_tun: left allmulticast mode [ 442.110738][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'. [ 442.235057][T19932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3804'. [ 442.329412][T19936] netlink: 'syz.0.3802': attribute type 2 has an invalid length. [ 442.394005][T19936] bridge0: port 3(dummy0) entered disabled state [ 442.479145][T19936] dummy0 (unregistering): left allmulticast mode [ 442.506480][T19947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3809'. [ 442.522654][T19936] bridge0: port 3(dummy0) entered disabled state [ 442.553625][T19943] : entered promiscuous mode [ 442.621561][T19950] (unnamed net_device) (uninitialized): (slave macsec0): Device is not bonding slave [ 442.710119][T19950] (unnamed net_device) (uninitialized): option active_slave: invalid value (macsec0) [ 443.254558][T19979] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 443.603712][T19996] netlink: 'syz.2.3822': attribute type 7 has an invalid length. [ 444.283744][T20022] netlink: zone id is out of range [ 444.289749][T20022] netlink: del zone limit has 4 unknown bytes [ 444.316556][T20025] netlink: 'syz.0.3830': attribute type 10 has an invalid length. [ 444.372110][T20025] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 444.748818][T20039] netlink: 'syz.1.3835': attribute type 2 has an invalid length. [ 444.885105][T20043] netlink: 'syz.4.3838': attribute type 11 has an invalid length. [ 444.933900][T20043] netlink: 'syz.4.3838': attribute type 11 has an invalid length. [ 444.967899][T20043] __nla_validate_parse: 3 callbacks suppressed [ 444.967917][T20043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3838'. [ 445.064279][T20058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3840'. [ 445.362548][T20073] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 445.517935][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.637877][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 445.641818][T20085] netlink: 'syz.4.3847': attribute type 3 has an invalid length. [ 445.917626][T20099] batman_adv: batadv0: Removing interface: team0 [ 445.979821][T20104] netlink: 'syz.3.3851': attribute type 10 has an invalid length. [ 446.057750][T20099] bridge_slave_0: left allmulticast mode [ 446.132861][T20099] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.224110][T20099] bond0: (slave bond_slave_0): Releasing backup interface [ 446.224734][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 446.257438][T20099] bond_slave_0: left allmulticast mode [ 446.275256][T20099] bond0: (slave bond_slave_1): Releasing backup interface [ 446.337090][T20099] bond_slave_1: left allmulticast mode [ 446.394995][T20099] team0: Port device team_slave_0 removed [ 446.467579][T20099] team0: Port device team_slave_1 removed [ 446.516037][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.554155][T20099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.617007][T20099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.626988][T20099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.641972][T20099] ------------[ cut here ]------------ [ 446.648125][T20099] WARNING: CPU: 0 PID: 20099 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 446.658139][T20099] Modules linked in: [ 446.662444][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.3.3851 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 446.674267][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.684605][T20099] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 446.691165][T20099] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 0d c0 fb f7 e9 78 fe ff ff e8 a3 9d 98 f7 eb 05 e8 9c 9d 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 446.711054][T20099] RSP: 0018:ffffc9000de5e620 EFLAGS: 00010246 [ 446.717238][T20099] RAX: ffffffff8a27130d RBX: ffff8880703bc800 RCX: 0000000000080000 [ 446.725317][T20099] RDX: ffffc9000b7b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 446.733461][T20099] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 446.741548][T20099] R10: dffffc0000000000 R11: fffff52001bcbcbc R12: ffff888055b3b8de [ 446.749602][T20099] R13: ffff8880703bc890 R14: 0000000000000000 R15: 1ffff1100e077912 [ 446.757739][T20099] FS: 00007fc736b1b6c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 446.766783][T20099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.773482][T20099] CR2: 00007f2f87f17e9c CR3: 0000000059d64000 CR4: 00000000003526f0 [ 446.781731][T20099] Call Trace: [ 446.785046][T20099] [ 446.788103][T20099] fib6_ifup+0x14a/0x180 [ 446.792471][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 446.797274][T20099] fib6_clean_node+0x24a/0x590 [ 446.802158][T20099] ? __pfx_fib6_clean_node+0x10/0x10 [ 446.807487][T20099] ? __lock_acquire+0xab9/0xd20 [ 446.812480][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 446.818102][T20099] fib6_walk_continue+0x678/0x910 [ 446.823454][T20099] fib6_walk+0x149/0x290 [ 446.827883][T20099] __fib6_clean_all+0x234/0x380 [ 446.832868][T20099] ? __fib6_clean_all+0x9b/0x380 [ 446.838046][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 446.843060][T20099] ? __pfx___fib6_clean_all+0x10/0x10 [ 446.848507][T20099] ? __pfx_fib6_clean_node+0x10/0x10 [ 446.853923][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 446.858919][T20099] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 446.875449][T20099] rt6_sync_up+0x128/0x160 [ 446.880130][T20099] ? __pfx_rt6_sync_up+0x10/0x10 [ 446.885315][T20099] ? ipv6_mc_up+0x3da/0x580 [ 446.889983][T20099] addrconf_notify+0xd55/0x1010 [ 446.895026][T20099] notifier_call_chain+0x1b3/0x3e0 [ 446.900206][T20099] netif_state_change+0x284/0x3a0 [ 446.905368][T20099] ? __pfx_netif_state_change+0x10/0x10 [ 446.911061][T20099] ? do_set_master+0x1f7/0x6d0 [ 446.915921][T20099] ? validate_linkmsg+0x765/0x950 [ 446.921142][T20099] do_setlink+0x35de/0x41c0 [ 446.925699][T20099] ? __kernel_text_address+0xd/0x40 [ 446.931044][T20099] ? arch_stack_walk+0xfc/0x150 [ 446.936001][T20099] ? __pfx_do_setlink+0x10/0x10 [ 446.940917][T20099] ? __lock_acquire+0xab9/0xd20 [ 446.945892][T20099] ? __mutex_trylock_common+0x153/0x260 [ 446.951537][T20099] ? __pfx___mutex_trylock_common+0x10/0x10 [ 446.957630][T20099] ? rcu_is_watching+0x15/0xb0 [ 446.962701][T20099] ? trace_contention_end+0x39/0x120 [ 446.968047][T20099] ? __mutex_lock+0x335/0x1340 [ 446.973103][T20099] ? __pfx_aa_get_newest_label+0x10/0x10 [ 446.978788][T20099] ? __pfx_aa_get_newest_label+0x10/0x10 [ 446.984639][T20099] ? rtnl_newlink+0x8db/0x1c70 [ 446.989561][T20099] ? rcu_is_watching+0x15/0xb0 [ 446.994436][T20099] ? __pfx___mutex_lock+0x10/0x10 [ 446.999529][T20099] ? ns_capable+0x8a/0xf0 [ 447.003977][T20099] ? rtnl_link_get_net_capable+0x16a/0x350 [ 447.009833][T20099] rtnl_newlink+0x149f/0x1c70 [ 447.014641][T20099] ? netlink_sendmsg+0x805/0xb30 [ 447.019726][T20099] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.024969][T20099] ? kasan_quarantine_put+0xdd/0x220 [ 447.030564][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.035852][T20099] ? nlmon_xmit+0xb0/0x100 [ 447.040307][T20099] ? kmem_cache_free+0x18f/0x400 [ 447.045316][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.050741][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.056028][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.061641][T20099] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.067474][T20099] ? __dev_queue_xmit+0x27b/0x3b50 [ 447.072742][T20099] ? __lock_acquire+0xab9/0xd20 [ 447.077681][T20099] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.082802][T20099] rtnetlink_rcv_msg+0x7cf/0xb70 [ 447.087867][T20099] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 447.093123][T20099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.098630][T20099] ? ref_tracker_free+0x63a/0x7d0 [ 447.103763][T20099] ? __asan_memcpy+0x40/0x70 [ 447.108429][T20099] ? __pfx_ref_tracker_free+0x10/0x10 [ 447.114168][T20099] netlink_rcv_skb+0x205/0x470 [ 447.119149][T20099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.124719][T20099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.130166][T20099] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.135470][T20099] netlink_unicast+0x82c/0x9e0 [ 447.140548][T20099] ? __pfx_netlink_unicast+0x10/0x10 [ 447.145935][T20099] ? netlink_sendmsg+0x642/0xb30 [ 447.150938][T20099] ? skb_put+0x11b/0x210 [ 447.155294][T20099] netlink_sendmsg+0x805/0xb30 [ 447.160468][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.165842][T20099] ? aa_sock_msg_perm+0x94/0x160 [ 447.170910][T20099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.176266][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.181624][T20099] __sock_sendmsg+0x21c/0x270 [ 447.186688][T20099] ____sys_sendmsg+0x505/0x830 [ 447.191547][T20099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.197038][T20099] ? import_iovec+0x74/0xa0 [ 447.201741][T20099] ___sys_sendmsg+0x21f/0x2a0 [ 447.206580][T20099] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.211927][T20099] ? __fget_files+0x2a/0x420 [ 447.216544][T20099] ? __fget_files+0x3a0/0x420 [ 447.221325][T20099] __x64_sys_sendmsg+0x19b/0x260 [ 447.226598][T20099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.232249][T20099] ? rcu_is_watching+0x15/0xb0 [ 447.237128][T20099] ? do_syscall_64+0xbe/0x3b0 [ 447.242005][T20099] do_syscall_64+0xfa/0x3b0 [ 447.246815][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.252320][T20099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.258425][T20099] ? clear_bhb_loop+0x60/0xb0 [ 447.263191][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.269126][T20099] RIP: 0033:0x7fc735d8eb69 [ 447.273714][T20099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.293923][T20099] RSP: 002b:00007fc736b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.302550][T20099] RAX: ffffffffffffffda RBX: 00007fc735fb5fa0 RCX: 00007fc735d8eb69 [ 447.310829][T20099] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 447.318924][T20099] RBP: 00007fc735e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 447.327071][T20099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.335125][T20099] R13: 0000000000000000 R14: 00007fc735fb5fa0 R15: 00007ffc91d51f88 [ 447.343279][T20099] [ 447.346356][T20099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 447.353655][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.3.3851 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 447.365463][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.375630][T20099] Call Trace: [ 447.378944][T20099] [ 447.381946][T20099] dump_stack_lvl+0x99/0x250 [ 447.387028][T20099] ? __asan_memcpy+0x40/0x70 [ 447.391912][T20099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.397300][T20099] ? __pfx__printk+0x10/0x10 [ 447.401976][T20099] panic+0x2db/0x790 [ 447.405929][T20099] ? __pfx_panic+0x10/0x10 [ 447.410753][T20099] ? show_trace_log_lvl+0x4fb/0x550 [ 447.416406][T20099] __warn+0x31b/0x4b0 [ 447.432435][T20099] ? rt6_multipath_rebalance+0x455/0x8b0 [ 447.438088][T20099] ? rt6_multipath_rebalance+0x455/0x8b0 [ 447.443758][T20099] report_bug+0x2be/0x4f0 [ 447.448371][T20099] ? rt6_multipath_rebalance+0x455/0x8b0 [ 447.454174][T20099] ? rt6_multipath_rebalance+0x455/0x8b0 [ 447.460191][T20099] ? rt6_multipath_rebalance+0x457/0x8b0 [ 447.465916][T20099] handle_bug+0x84/0x160 [ 447.470196][T20099] exc_invalid_op+0x1a/0x50 [ 447.474875][T20099] asm_exc_invalid_op+0x1a/0x20 [ 447.479904][T20099] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 447.486364][T20099] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 0d c0 fb f7 e9 78 fe ff ff e8 a3 9d 98 f7 eb 05 e8 9c 9d 98 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 447.506075][T20099] RSP: 0018:ffffc9000de5e620 EFLAGS: 00010246 [ 447.512268][T20099] RAX: ffffffff8a27130d RBX: ffff8880703bc800 RCX: 0000000000080000 [ 447.520447][T20099] RDX: ffffc9000b7b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 447.528423][T20099] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 447.536393][T20099] R10: dffffc0000000000 R11: fffff52001bcbcbc R12: ffff888055b3b8de [ 447.544655][T20099] R13: ffff8880703bc890 R14: 0000000000000000 R15: 1ffff1100e077912 [ 447.552762][T20099] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 447.558687][T20099] fib6_ifup+0x14a/0x180 [ 447.563070][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 447.568113][T20099] fib6_clean_node+0x24a/0x590 [ 447.572990][T20099] ? __pfx_fib6_clean_node+0x10/0x10 [ 447.578298][T20099] ? __lock_acquire+0xab9/0xd20 [ 447.583247][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.588644][T20099] fib6_walk_continue+0x678/0x910 [ 447.593710][T20099] fib6_walk+0x149/0x290 [ 447.597960][T20099] __fib6_clean_all+0x234/0x380 [ 447.602832][T20099] ? __fib6_clean_all+0x9b/0x380 [ 447.607878][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 447.612743][T20099] ? __pfx___fib6_clean_all+0x10/0x10 [ 447.618187][T20099] ? __pfx_fib6_clean_node+0x10/0x10 [ 447.623669][T20099] ? __pfx_fib6_ifup+0x10/0x10 [ 447.628443][T20099] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 447.634093][T20099] rt6_sync_up+0x128/0x160 [ 447.638715][T20099] ? __pfx_rt6_sync_up+0x10/0x10 [ 447.643791][T20099] ? ipv6_mc_up+0x3da/0x580 [ 447.648353][T20099] addrconf_notify+0xd55/0x1010 [ 447.653400][T20099] notifier_call_chain+0x1b3/0x3e0 [ 447.658558][T20099] netif_state_change+0x284/0x3a0 [ 447.663614][T20099] ? __pfx_netif_state_change+0x10/0x10 [ 447.669185][T20099] ? do_set_master+0x1f7/0x6d0 [ 447.673978][T20099] ? validate_linkmsg+0x765/0x950 [ 447.679322][T20099] do_setlink+0x35de/0x41c0 [ 447.683845][T20099] ? __kernel_text_address+0xd/0x40 [ 447.689071][T20099] ? arch_stack_walk+0xfc/0x150 [ 447.694213][T20099] ? __pfx_do_setlink+0x10/0x10 [ 447.699198][T20099] ? __lock_acquire+0xab9/0xd20 [ 447.704097][T20099] ? __mutex_trylock_common+0x153/0x260 [ 447.709662][T20099] ? __pfx___mutex_trylock_common+0x10/0x10 [ 447.715831][T20099] ? rcu_is_watching+0x15/0xb0 [ 447.720630][T20099] ? trace_contention_end+0x39/0x120 [ 447.726347][T20099] ? __mutex_lock+0x335/0x1340 [ 447.731401][T20099] ? __pfx_aa_get_newest_label+0x10/0x10 [ 447.737437][T20099] ? __pfx_aa_get_newest_label+0x10/0x10 [ 447.743104][T20099] ? rtnl_newlink+0x8db/0x1c70 [ 447.748008][T20099] ? rcu_is_watching+0x15/0xb0 [ 447.752826][T20099] ? __pfx___mutex_lock+0x10/0x10 [ 447.757896][T20099] ? ns_capable+0x8a/0xf0 [ 447.762242][T20099] ? rtnl_link_get_net_capable+0x16a/0x350 [ 447.768066][T20099] rtnl_newlink+0x149f/0x1c70 [ 447.772760][T20099] ? netlink_sendmsg+0x805/0xb30 [ 447.777726][T20099] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.782787][T20099] ? kasan_quarantine_put+0xdd/0x220 [ 447.788436][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.793659][T20099] ? nlmon_xmit+0xb0/0x100 [ 447.798164][T20099] ? kmem_cache_free+0x18f/0x400 [ 447.803149][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.808606][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.813893][T20099] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.819311][T20099] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.825235][T20099] ? __dev_queue_xmit+0x27b/0x3b50 [ 447.830374][T20099] ? __lock_acquire+0xab9/0xd20 [ 447.835280][T20099] ? __pfx_rtnl_newlink+0x10/0x10 [ 447.840312][T20099] rtnetlink_rcv_msg+0x7cf/0xb70 [ 447.845300][T20099] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 447.850434][T20099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.855901][T20099] ? ref_tracker_free+0x63a/0x7d0 [ 447.860947][T20099] ? __asan_memcpy+0x40/0x70 [ 447.865727][T20099] ? __pfx_ref_tracker_free+0x10/0x10 [ 447.871385][T20099] netlink_rcv_skb+0x205/0x470 [ 447.876340][T20099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.881819][T20099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.887730][T20099] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.892960][T20099] netlink_unicast+0x82c/0x9e0 [ 447.897743][T20099] ? __pfx_netlink_unicast+0x10/0x10 [ 447.903042][T20099] ? netlink_sendmsg+0x642/0xb30 [ 447.908026][T20099] ? skb_put+0x11b/0x210 [ 447.912309][T20099] netlink_sendmsg+0x805/0xb30 [ 447.917286][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.922823][T20099] ? aa_sock_msg_perm+0x94/0x160 [ 447.927781][T20099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.933442][T20099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.938739][T20099] __sock_sendmsg+0x21c/0x270 [ 447.943602][T20099] ____sys_sendmsg+0x505/0x830 [ 447.948375][T20099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.953867][T20099] ? import_iovec+0x74/0xa0 [ 447.958720][T20099] ___sys_sendmsg+0x21f/0x2a0 [ 447.963558][T20099] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.968921][T20099] ? __fget_files+0x2a/0x420 [ 447.973837][T20099] ? __fget_files+0x3a0/0x420 [ 447.978714][T20099] __x64_sys_sendmsg+0x19b/0x260 [ 447.983675][T20099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.989160][T20099] ? rcu_is_watching+0x15/0xb0 [ 447.993967][T20099] ? do_syscall_64+0xbe/0x3b0 [ 447.998668][T20099] do_syscall_64+0xfa/0x3b0 [ 448.003265][T20099] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.008571][T20099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.014675][T20099] ? clear_bhb_loop+0x60/0xb0 [ 448.019530][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.025527][T20099] RIP: 0033:0x7fc735d8eb69 [ 448.029950][T20099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.050199][T20099] RSP: 002b:00007fc736b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.058727][T20099] RAX: ffffffffffffffda RBX: 00007fc735fb5fa0 RCX: 00007fc735d8eb69 [ 448.066875][T20099] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 448.074934][T20099] RBP: 00007fc735e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 448.082911][T20099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.090893][T20099] R13: 0000000000000000 R14: 00007fc735fb5fa0 R15: 00007ffc91d51f88 [ 448.099196][T20099] [ 448.102634][T20099] Kernel Offset: disabled [ 448.107045][T20099] Rebooting in 86400 seconds..