last executing test programs: 3m46.84331772s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3m31.261637613s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3m14.44001068s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m58.229235513s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2m41.520757013s ago: executing program 4 (id=1309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x2e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="32c493", 0x3}], 0x1, 0x0, 0x0, 0x4800}, 0xc881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80004}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x44040}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x801) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x21, 0x2, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e8100220086dd6d0000000008110000000000000000000000000000000000ff0200000000000000000000000000014f1c052000089078827d9f8b604f33781de25cda6054c6a52c14825b8ec9da30c8c0c3286c"], 0x42) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) close(r2) 2m38.945700908s ago: executing program 4 (id=1315): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2m38.639065655s ago: executing program 4 (id=1318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r6, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x11) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x0, 0x2}, {0xd, 0x9}}}, 0x24}}, 0x0) (async, rerun: 32) r9 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0xb026e000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) 2m28.460795277s ago: executing program 4 (id=1324): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x2c000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd27, 0x0, {0xa, 0x10}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x7ff, 0x1ff, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) listen(0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) 2m27.845365507s ago: executing program 4 (id=1327): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c000080"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "800400", 0x30, 0x3a, 0x0, @empty, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2}}}}}}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="41811008f7039583f839ccf73d13b6a4a07ee8627aeda09a71886099b97be6e716c6c6c4d3dcc3eb0310ab920de9f4db0c7c84b41dded6794cb0f0660fe4b1f82ecc6245b267ac445e2b5e1e919e5f0b4a58c169d41575d0918a9421b741842ab432d326dff2a3c087b451d51044e2f5788764f28af3a41dad38e0cf7f3b1947ab5b7e89911de7d65e91aa775e44324301f7e597aaf58939714b673cf41fb309fcc42484125f41979d3ddf0234a991df0859d2695239fb98f88c6eb9290eb92d7d37c8337bd348f7f39a88cb33ac23d2b5440f97a3bd262bfd220ab2b0a1", 0xde}], 0x1) 2m26.882253389s ago: executing program 4 (id=1333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9452, 0xfffff801, 0x9a94}}]}]}]}, 0x54}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r5}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 1m58.183949151s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1m55.168080586s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1m43.920279775s ago: executing program 1 (id=1443): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8042) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xa0, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000580)={'ip6erspan0\x00'}) r3 = socket(0x29, 0x4, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)=0x100000001, 0x12) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40044800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffc00}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000058}, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x100}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000007c0)={r4, 0x2, 0x1, 0xf}, &(0x7f0000000800)=0x10) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c004}, 0x20048011) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000980)={r5, 0x38, &(0x7f0000000940)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x3}, @in6={0xa, 0x4e21, 0x0, @private2, 0x539}]}, &(0x7f00000009c0)=0x10) (async) connect$inet6(r3, &(0x7f0000000a00)={0xa, 0x4e23, 0x7, @mcast2, 0x9c2}, 0x1c) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000a40), 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000a80)={r4, 0x1, 0x30, 0x10, 0x16c}, &(0x7f0000000ac0)=0x18) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000b00)={0x470, 0x1, 0xa, 0x401, 0xf, 0x5, 0x1, 0x40, r4}, &(0x7f0000000b40)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b80)={r7, 0x3}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000c00)={r8, 0x400}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000cc0)={r5, 0x74, &(0x7f0000000c40)=[@in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e21, 0x1, @remote}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x8}, @in6={0xa, 0x4e24, 0x80, @loopback, 0x2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000d00)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={r9, 0x1}, &(0x7f0000000d80)=0xc) (async) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r10, 0x89e0, &(0x7f0000000dc0)) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r11, 0x89e2, &(0x7f0000000e00)) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000e40)={r7, 0x1000, 0x4, [0x9b, 0xa, 0x3, 0x8001]}, &(0x7f0000000e80)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000ec0)={r12, 0x0, 0x8}, 0x8) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x737, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000084}, 0x8004) 1m43.475948893s ago: executing program 1 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/63, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xa}, {0x8, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1m42.522357125s ago: executing program 1 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x4, "c489cd1150ed63d137822b0f022e276e"}}}]}, 0x44}}, 0x8880) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 1m37.453678544s ago: executing program 1 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 1m36.981028701s ago: executing program 1 (id=1456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 1m36.242660541s ago: executing program 1 (id=1459): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0, 0x33fe0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001ac0)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@icmpv6={0x7, 0x6, "991ba0", 0x41, 0x3a, 0x0, @private2, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "8a3dce6a1cb9bc38aa74a009dec1fb9085c83decbe63036b72b8b479817e7fca0b4c1132140611fe0ce3cf5893cac09fcc7cbc"}, {0x5}, {0x19}]}}}}}, 0x7b) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r5 = socket(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@newtfilter={0x4d4, 0x2c, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6, 0xa}, {0xffe0, 0xd}, {0x7f1b4f771beeffe2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xde6}, @filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x2, 0x19d, 0x6, 0x3, 0x8, 0x3, 0xfffff0f9, 0x0, 0x7, 0xff, 0x53edeb84, 0x80000001, 0x9, 0x2, 0x8, 0x9, 0x871b, 0xfffffff5, 0x80000000, 0xfffffffb, 0x0, 0x7, 0xf, 0xff, 0x3, 0x7, 0x5, 0xffff, 0x72, 0x9, 0xc5, 0x80, 0x6, 0x1ff, 0x4, 0xffff, 0xff, 0x2, 0x6, 0x8, 0x7, 0xe0, 0x90000, 0x8, 0x7, 0xb9df, 0x2d46, 0x8, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x7, 0x0, 0x5, 0x4, 0x4, 0x7, 0x6, 0x1, 0x3bdf, 0xd, 0xf, 0x8, 0x2, 0x6, 0x37, 0x10, 0x4, 0x5, 0x8, 0x9, 0x1, 0xc, 0x40, 0x689abe0b, 0xd4df, 0x892e, 0x3, 0x7, 0x59ade919, 0x9, 0x8, 0x8001, 0x7, 0x1, 0x3, 0x9, 0x5, 0xe8f, 0x2, 0x9, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x8, 0x2, 0x1, 0x4cbacc00, 0xffffff00, 0x8, 0x80000000, 0x2b180f73, 0x6, 0x200, 0x400, 0xfffffffb, 0x9, 0x7, 0x7fe0, 0x7, 0x200, 0x8, 0x24a6a7b6, 0x9, 0x4, 0x7, 0x3ff, 0x0, 0x7, 0x908, 0x4, 0xd, 0xffffffff, 0xdac2, 0xc, 0x77, 0x2, 0x200, 0xc, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x26d4, 0x9, 0x2, 0x28, 0x0, 0xf1, 0x3, 0x9, 0x7d0595b1, 0x2, 0x1, 0x1, 0x79, 0x153, 0x5, 0x9, 0x6, 0xa05, 0x80000001, 0x1, 0x6c, 0x8000, 0x1, 0x1, 0x6, 0x1b44f286, 0x808, 0x5, 0x0, 0xffff0001, 0xff, 0x5, 0xffff, 0x76d, 0x2, 0x7, 0x0, 0x96ef, 0x8, 0x2, 0x7, 0x5, 0x4d, 0x8000, 0x5, 0x1000, 0x8, 0x3, 0x7f, 0x10, 0xf65b, 0x7f, 0x2, 0x10, 0x2ac950bc, 0x2, 0xdc64, 0xff, 0x4, 0x800, 0x2, 0x8, 0x8000, 0xed3, 0x6, 0x7, 0xc978, 0x7, 0xffffffff, 0x5, 0x7, 0x4, 0x1, 0x5, 0x7, 0x9, 0x9, 0x800, 0x0, 0x8b64, 0x2000000, 0x9, 0x5, 0x4, 0x8ed7, 0x2, 0x7, 0x34, 0x4, 0x4, 0x7, 0x101, 0x101, 0x4, 0x5, 0xffff8000, 0x6f3, 0x800, 0xffffffff, 0x6, 0x4, 0x100, 0x8, 0x7fffffff, 0x81, 0x10001, 0x6, 0x8, 0x5, 0x7, 0x2, 0xfffffc78, 0x5, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x100, 0x55d9, 0x81, {0x17, 0x0, 0x14e4, 0x1, 0x0, 0x5}, {0x0, 0x1, 0x38ce, 0x3ff, 0x9, 0x2}, 0xc7a7, 0x9df, 0x7}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffff21}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x7}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x2000}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) unshare(0x62040200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r11 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0xfffffffffffffa9f, 0x3, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) 1m21.06584153s ago: executing program 32 (id=1459): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0, 0x33fe0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001ac0)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@icmpv6={0x7, 0x6, "991ba0", 0x41, 0x3a, 0x0, @private2, @local, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "8a3dce6a1cb9bc38aa74a009dec1fb9085c83decbe63036b72b8b479817e7fca0b4c1132140611fe0ce3cf5893cac09fcc7cbc"}, {0x5}, {0x19}]}}}}}, 0x7b) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r5 = socket(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=@newtfilter={0x4d4, 0x2c, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6, 0xa}, {0xffe0, 0xd}, {0x7f1b4f771beeffe2, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xde6}, @filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x2, 0x19d, 0x6, 0x3, 0x8, 0x3, 0xfffff0f9, 0x0, 0x7, 0xff, 0x53edeb84, 0x80000001, 0x9, 0x2, 0x8, 0x9, 0x871b, 0xfffffff5, 0x80000000, 0xfffffffb, 0x0, 0x7, 0xf, 0xff, 0x3, 0x7, 0x5, 0xffff, 0x72, 0x9, 0xc5, 0x80, 0x6, 0x1ff, 0x4, 0xffff, 0xff, 0x2, 0x6, 0x8, 0x7, 0xe0, 0x90000, 0x8, 0x7, 0xb9df, 0x2d46, 0x8, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x7, 0x0, 0x5, 0x4, 0x4, 0x7, 0x6, 0x1, 0x3bdf, 0xd, 0xf, 0x8, 0x2, 0x6, 0x37, 0x10, 0x4, 0x5, 0x8, 0x9, 0x1, 0xc, 0x40, 0x689abe0b, 0xd4df, 0x892e, 0x3, 0x7, 0x59ade919, 0x9, 0x8, 0x8001, 0x7, 0x1, 0x3, 0x9, 0x5, 0xe8f, 0x2, 0x9, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x8, 0x2, 0x1, 0x4cbacc00, 0xffffff00, 0x8, 0x80000000, 0x2b180f73, 0x6, 0x200, 0x400, 0xfffffffb, 0x9, 0x7, 0x7fe0, 0x7, 0x200, 0x8, 0x24a6a7b6, 0x9, 0x4, 0x7, 0x3ff, 0x0, 0x7, 0x908, 0x4, 0xd, 0xffffffff, 0xdac2, 0xc, 0x77, 0x2, 0x200, 0xc, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x26d4, 0x9, 0x2, 0x28, 0x0, 0xf1, 0x3, 0x9, 0x7d0595b1, 0x2, 0x1, 0x1, 0x79, 0x153, 0x5, 0x9, 0x6, 0xa05, 0x80000001, 0x1, 0x6c, 0x8000, 0x1, 0x1, 0x6, 0x1b44f286, 0x808, 0x5, 0x0, 0xffff0001, 0xff, 0x5, 0xffff, 0x76d, 0x2, 0x7, 0x0, 0x96ef, 0x8, 0x2, 0x7, 0x5, 0x4d, 0x8000, 0x5, 0x1000, 0x8, 0x3, 0x7f, 0x10, 0xf65b, 0x7f, 0x2, 0x10, 0x2ac950bc, 0x2, 0xdc64, 0xff, 0x4, 0x800, 0x2, 0x8, 0x8000, 0xed3, 0x6, 0x7, 0xc978, 0x7, 0xffffffff, 0x5, 0x7, 0x4, 0x1, 0x5, 0x7, 0x9, 0x9, 0x800, 0x0, 0x8b64, 0x2000000, 0x9, 0x5, 0x4, 0x8ed7, 0x2, 0x7, 0x34, 0x4, 0x4, 0x7, 0x101, 0x101, 0x4, 0x5, 0xffff8000, 0x6f3, 0x800, 0xffffffff, 0x6, 0x4, 0x100, 0x8, 0x7fffffff, 0x81, 0x10001, 0x6, 0x8, 0x5, 0x7, 0x2, 0xfffffc78, 0x5, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x100, 0x55d9, 0x81, {0x17, 0x0, 0x14e4, 0x1, 0x0, 0x5}, {0x0, 0x1, 0x38ce, 0x3ff, 0x9, 0x2}, 0xc7a7, 0x9df, 0x7}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffff21}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2d, 0x7}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x2000}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) unshare(0x62040200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r11 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r11, 0x0, 0x80, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0xfffffffffffffa9f, 0x3, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) 12.031176038s ago: executing program 2 (id=1573): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x8000, 0x2, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket(0x2b, 0x1, 0x6) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff00000000000008004e1900480067000001219078e0000001acca89e2ff8abade2f1023d00000000400000005000000ba903794fe04830f2aac1e0101e00000027f001401004e224e210441907884a3bc53bff66205"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000009000000000000000008001000ffffffffd68d48c2c31828b665792989820c6db7ef9ee705fc2bc2e5ba73dae6a4e3526f5d0e24469b964330398fea18774cb6acfc2d932b84c2de53d90dd7cede66ef12d1bcf4bb42ae0aa8e39c96a52f83c573400b20368479810dd539b0bd574057eb572d18f9100781e55cc11ccfd1a2b53c82815351d7d270203149d8adbad078346f0e72e91d15f9827a89e609b7ea5fe583e889196370026edd3d577a93e95184a55fdc874a40bd90ffb57b62f64361fe21b921040a1bdf8b2b2c8c40a1a1c7ba4c"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f56", 0x7c}, {&(0x7f00000003c0)="66f7bddd40", 0x5}], 0x2}], 0x1, 0x0) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x801) 11.908446612s ago: executing program 2 (id=1574): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x38}}, 0x0) sendmsg$kcm(r1, 0x0, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$FS_IOC_RESVSP(r4, 0x800442d4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r1) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x6e56b6e39485c0b0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES8=r1, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x2, 0x6, "9f1b792cb0ae5f6b8a5ec68978e4f36b561f441434bdce3e6c3086ebd3aaecc51962fa5fbb79bc108dc2c1cd6332ffdb60645b8417a2c2627a0500b7539939bc120000"}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r12, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r13, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00c8a75e6f1a5d97000000efffff60a69625571fe4220000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r16, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r16, 0x0) 9.431299525s ago: executing program 2 (id=1579): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@remote, @empty, 0x11, 0x8}}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth0_to_batadv\x00', &(0x7f0000000440)=@ethtool_coalesce={0xf, 0xed8, 0x0, 0x8, 0x7, 0x3, 0x0, 0x3, 0x5, 0x3, 0x7ff, 0xcd, 0xb, 0x5, 0xffffff76, 0x4, 0x1, 0x3ff, 0x7, 0xfff, 0xc, 0x8, 0x80}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x18050}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010}, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10, 0x800) connect$llc(r6, &(0x7f0000000200)={0x1a, 0x336, 0x1, 0x19, 0x9f, 0x96, @multicast}, 0x10) (async) connect$llc(r6, &(0x7f0000000300)={0x1a, 0x30e, 0x0, 0x1, 0xc, 0x4, @multicast}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000004c0)="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", 0x109}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789", 0x6f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff}, 0x20}}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r9) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (rerun: 64) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x8, 0xb1, 0xc162d000, @vifc_lcl_ifindex=r11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000791200000000edfcc222208fb00bed3b75000095000000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_dellink={0x34, 0x13, 0x100, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r12, 0x0, 0x40100}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xa}]}}]}]}, 0x34}}, 0x48010) (rerun: 64) 9.053389371s ago: executing program 2 (id=1581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) unshare(0x20400) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000180), 0x4) (async, rerun: 64) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0), 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000040)={0x2c, 0x4, 0x0, 0x3b}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) 8.564849159s ago: executing program 2 (id=1583): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xd27}, {0x2000000}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) syz_emit_ethernet(0x9d, &(0x7f0000000000)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1800", 0x13dceca7f49629c4, 0x3a, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x38}, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "ceb21659a0196f43d70080f11faca763f011771a3cbed2afe11af2ac6a56b6873e609e83a568851e028e7fdf820716176402581745e806f6f2d4843095498cc8f2c8bb29a02dd9d50167ee4ff30000000000005ad9e2a848a1b45400d4e90b"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) syz_emit_ethernet(0xc9, &(0x7f0000000640)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x93, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x8b, 0x0, @opaque="f483f01ce77cad2770e2031623bd8e82a9d51c6b60977ccf4ba3236ac1a5635f8fe2cfd844af58d00016709889fd0210b14da4698a11c037545a90b92a8d5595d4acb7207ca63b6150e0d7e7c58f4d86551374831a75a1c347345ea231887c7c205625fd17a1eb15a186dc89989197b16ec82781e8482fcb272392c902a320e3ddbc65"}}}}}}, 0x0) 7.784264613s ago: executing program 2 (id=1585): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001804d20000000000240000002400000007000000000000000200001302000000050000000000000000000000002e00"], 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private0, @local, @local, 0x4, 0xb, 0x0, 0x400, 0x4, 0x1, r4}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x180107, r4}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=r0, @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) unshare(0x62040200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r7 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x8, 0xfffffffffffffa9f, 0x3, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019200100b7578179f8a133e0e0ac630000000000e00000020000000000000000000000000000001f0000260500"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/112], 0xb8}}, 0x24000800) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x24, &(0x7f00000000c0)=0xd, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 1.849750727s ago: executing program 0 (id=1595): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100), 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x48}}, 0x4040) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.337173934s ago: executing program 0 (id=1596): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x1c, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x0, 0xe, 0x5, 0x3aeb, 0x3}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0x6175, 0x1000, &(0x7f0000000140)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140)={0x1, 0x8, 0xa148, 0x879f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000011c0)=[{0x5, 0x3, 0xf, 0x7}], 0x10, 0x6, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000012c0)=r1, 0x4) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001300)=@id, &(0x7f0000001340)=0x10, 0x800) sendmsg$tipc(r2, &(0x7f0000001640)={&(0x7f0000001380)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x1}}, 0x10, &(0x7f0000001540)=[{&(0x7f00000013c0)="0c9c25776c4eb686e61c64ea798409e82c2205b1933da4d82147cc1075514b7eb3d9af9481ad494fa546a2f42032d69f25fa0b64afefa277420b6e75432172566cc87961f0c31d2cf0dd59d5b1b8e0c12ad027cec9", 0x55}, {&(0x7f0000001440)="377657d1553d2b0feb0dfc04a1ca706bafba49c6a0ff6d2f1309d347b65d7e06b0420efe9b4682c6dd644a8f4e5cfac51b379c8b83bdd72f19ea685122a27d13d52c5fbcc3024b0c9f64866635009076acf0943fe8631cbf1fd86d77bf0f67e73cf5f45bf6a5f15af0117c0643142d52c91cfee8f9e54a14e777d9eb870e59b1a56eab024285e2cc6eaa62ebe1cd5ca14fa5ed1eb87300d62fadd4dc5b1dea6c7e08f39111b50d27b2dcc5d1fe177a13b37161543262adb62014dacdb729152013b5d769ec676a3ba438078e093c4be33b785831bc95e08458a8f41634220f98ff5c04eaf80d88fe6c941664c481", 0xee}], 0x2, &(0x7f0000001580)="b90d01fef32b54f182a50afa7412ac2d0fdbb13162ad45972f50b6e8ebcb45f35340f752b80e773b994a459a1b4de7a63b36b8b54fcb2429ae30ea39dff87b8d7e9d57b21f1d98c276bff55a09de26d18d1ccc75b3b208c0aaaf123d38fcbac9a0578740793c6c51efe07dc39813430fea5f8c5ece432179f9ac6f763b3f1854f194d6a4ccc416d59af1b062064556347e6afcaf282483671807dccee84923235b525f1fbef9692a23141e1386ceb875d966337313b688", 0xb7}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000001680)={0x14}) epoll_create1(0x80000) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000016c0)) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000001700)=@hopopts={0x3c, 0x28, '\x00', [@generic={0x5, 0xc1, "815a2f10188860bb1a8fd04a49c28e5bc00c121203c99142d06ce726d01bf78ee9c0938a9b5b688f5575c6308d5e208cb02104ea03c1bfc9088ce5112466831287f9bc80a63fd4ac36de82308f74fc892c6f73119bf595b350644a685690aaee2e47ce8dd68a5efa8ee24cf4c1af0aed7dec8126528ddb596baa286165e94daa28217cf2c00227d4de410febb83ba95ae1bd7683df1f54aa2b5d5eef905914af8a32bf4db4c2ca5032338ff5ac70e136cef26a53ee7f2815f0d9ea63961d67fadb"}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x71, "03e84f1caf5b493087ac2aa8db3c7552995c2d8fc4f122a95957c0998539c0565634fbf3108d86c2b24ccb374b65d26928f42d366ca9edc8e8087414a248201709e2940f077a04efcaf7bfc7d7d952fed93efb846b44c05e72c72815dc3d043d0726e91d97749468f18dc10adc9452dfbb"}, @ra={0x5, 0x2, 0xb8}]}, 0x150) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xf4, 0x13, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xe0, 0x8, "b39b2ac63b16ee09c38e3faec6b20bfb25abe8e9e6f97900c4a93ffa76036d9f215a4457894ff30a0e8d77db86e702b99acb78e1579b8716db6660cee798af4dd00e1dadc3cd42a9ad4121989354ac89a21ce71c76e7465ce8c524f5d907ae8454477f6e4031ab7ad84a487a933c4cc97ccff6594d0c727801ba69ee811655ccef5b88d96815a2692a2495bd0fe0f54a5808a70dcc938d7c93b11caa8b325c119e335b17086492d5dacd91c621a47bb504f257c1b8e6ee17b11fe5acc96f0f5b5c160ddbc314ceeea19d41ef5e78857a16aaccbaf243e592a41ab881"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000001a40)={0x4, {0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x7}}) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001ac0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, 0x42, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001a80)='virt_wifi0\x00', 0x4, 0x80000001, 0xfe00}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001b40), 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b80)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001bc0)={0x0, 0x7, 0x1, [0x1df7]}, &(0x7f0000001c00)=0xa) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001c40)={r8, 0xc0000000}, 0x8) connect$pppoe(r7, &(0x7f0000001c80)={0x18, 0x0, {0x3, @remote, 'geneve1\x00'}}, 0x1e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000001f80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d80)={0x188, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xae, 0xe}}, @random={0xa, 0x3, "aa16b4"}, @challenge={0x10, 0x1, 0xc}, @chsw_timing={0x68, 0x4, {0xb5, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa2, 0x7f, [@challenge={0x10, 0x1, 0xaf}, @chsw_timing={0x68, 0x4, {0x7, 0xee9e}}, @measure_req={0x26, 0x81, {0x8, 0x0, 0x2, "0882749fd96ab9f7244c2dfa2ed6f542b1cde14ed20f994c8d081d9c2877bda356b65d4693cf4220b2a01432faea3aae746e693a7eac2ab7a7d086f89c953ed4cf434c844d9703cacf28a82d3d3aa75989187fabbc04e5a6070679a44256c7e27acd934362e72435115737a996ffee0cae738c198d2d6e14b23b04037d63"}}, @mic={0x8c, 0x10, {0x68f, "ef4f7a5aea5f", @short="f4e766746568deb4"}}]}, @NL80211_ATTR_FTM_RESPONDER={0xb0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xa9, 0x3, "94e3360b2fd5506ac0ac0c97b91e9282f93379cc0dd897e9257cea1878b048efe742b964e60646e1bff2ef2ea679a671129a1b22e38b6b7a846845155fca1dc807026c014ac508de8f441f35b451bba0dc4300bc56b67045f1a99ea72eda7d4cc1c61c111534a396ae265089592623594d22c2e5dbd3a8577e2e000c52f28ea65f3c67051bd5fc08e8660b6124c7095fae6bdf7d9361b152a37d46698d2c56032b8da6fbac"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40104000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x5c, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffe00}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1000}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000814) r11 = epoll_create1(0x80000) epoll_pwait(r11, &(0x7f0000002100)=[{}, {}, {}, {}], 0x4, 0xa, &(0x7f0000002140)={[0xffffffff]}, 0x8) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f0000002180)=0x7, 0x4) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f00000021c0)) 1.07784466s ago: executing program 0 (id=1597): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000000)={'vlan1\x00'}) (async) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000000)={'vlan1\x00'}) 585.797893ms ago: executing program 0 (id=1598): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x8000) 397.171131ms ago: executing program 0 (id=1599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b0000000f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xa, [@datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x6, 0x10}, {0x3, 0x5, 0x5}], "8de5"}, @datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x5, 0xb4, 0xfff}, {0x4, 0x8, 0x10000}, {0x4, 0x0, 0x2}, {0x5, 0x99, 0x1}], "d77f"}]}, {0x0, [0x61, 0x30, 0x61, 0x0, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000d00)=""/148, 0x86, 0x94, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000f80)={&(0x7f0000000e00)=""/210, 0xd2, 0x0, &(0x7f0000000f00)=""/127, 0x7f}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xa, 0x11, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='syzkaller\x00', 0x5b1, 0xe1, &(0x7f0000001100)=""/225, 0x41100, 0x7b, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x2, 0x8, 0x3, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001280)=[{0x1, 0x3, 0xa, 0x4}, {0x4, 0x4, 0xd, 0x4}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1d, 0x1f, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x57cc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x10}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x7f, &(0x7f0000000980)=""/127, 0x40f00, 0x3a, '\x00', r2, @lsm=0x2b, r3, 0x8, &(0x7f0000000dc0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x6, &(0x7f0000001380)=[r0, r0, r0, r0, r0], &(0x7f00000013c0)=[{0x0, 0x3, 0x3, 0xb}, {0x1, 0x5, 0xc, 0xb}, {0x3, 0x4, 0x1, 0x1}, {0x3, 0x1, 0xe, 0x9}, {0x4, 0x3, 0xa, 0x3}, {0x0, 0x5, 0xe, 0x4}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310d26bd7000ffdbdf252500000008000300", @ANYRES32=r8, @ANYBLOB="0a00060015ae2137238e000014006e80050002000300000008000700010000000a0034000101010101010000080035003b6d2671080026"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000079777eec04a7e6d8002400000003000000010000000000000700000000000000000100000500000000000010000100000000800000005f00"], 0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) getsockopt$inet6_buf(r10, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x9f, &(0x7f0000000740)={@remote, @remote, @void, {@x25={0x805, {0x2, 0x4d, 0x0, "285a7570ff28a7a1c7399a9daf383b8cf8074b7787ff871d6d22f3a2531ac4c78b1b0da0eb8f8b1b794ef736b5c65f9ab4b9e9c149e64789b73187a948586fe239aca7e6d08aadc46bda85a53324539652b39022ea6d39e9f56c815b5dd022faae4ac71c3f72e08bfb76bec96bc0314963d384e485b596c4b049ad363f10ce2feef29d7e8caff33352ae35e3cd9d"}}}}, &(0x7f00000002c0)={0x1, 0x1, [0x538, 0xb07, 0x9ba, 0x4a7]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r0}, 0x38) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xcd, &(0x7f00000004c0)=""/205, 0x41000, 0x4a, '\x00', r12, @fallback=0x14, r9, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x2, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 0s ago: executing program 0 (id=1600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.stat\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f, 0x7}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept$alg(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x800) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r8 = socket(0x2000000015, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x114, 0x71, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=r8], 0x80}, 0x1, 0x7}, 0x8840) kernel console output (not intermixed with test programs): 6] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.250041][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.263209][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.270760][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.297682][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.355366][ T9346] hsr_slave_0: entered promiscuous mode [ 200.362198][ T9346] hsr_slave_1: entered promiscuous mode [ 200.368752][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.376337][ T9346] Cannot create hsr debugfs directory [ 200.401185][ T2963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.483148][ T2963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.671387][ T2963] bridge_slave_1: left allmulticast mode [ 200.677715][ T2963] bridge_slave_1: left promiscuous mode [ 200.683578][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.700381][ T2963] bridge_slave_0: left allmulticast mode [ 200.706070][ T2963] bridge_slave_0: left promiscuous mode [ 200.715852][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.082038][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.093729][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.104462][ T2963] bond0 (unregistering): Released all slaves [ 201.587913][ T2963] hsr_slave_0: left promiscuous mode [ 201.594180][ T2963] hsr_slave_1: left promiscuous mode [ 201.608947][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.616395][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.631498][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.641563][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.683522][ T2963] veth1_macvtap: left promiscuous mode [ 201.695968][ T2963] veth0_macvtap: left promiscuous mode [ 201.704679][ T2963] veth1_vlan: left promiscuous mode [ 201.714051][ T2963] veth0_vlan: left promiscuous mode [ 201.747732][ T5852] Bluetooth: hci4: command tx timeout [ 202.250532][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 202.293149][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 202.437643][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 202.465328][ T9375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'. [ 202.487309][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 203.098296][ T9375] veth3: entered allmulticast mode [ 203.215743][ T9395] x_tables: duplicate underflow at hook 4 [ 203.252442][ T9346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.350167][ T9346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.429475][ T9346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.497022][ T9405] bond0: (slave batadv0): Releasing backup interface [ 203.588633][ T9405] bridge_slave_0: left allmulticast mode [ 203.617389][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.670394][ T9405] bridge_slave_1: left allmulticast mode [ 203.676162][ T9405] bridge_slave_1: left promiscuous mode [ 203.683226][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.739872][ T9405] bond0: (slave bond_slave_0): Releasing backup interface [ 203.833103][ T5852] Bluetooth: hci4: command tx timeout [ 203.845593][ T9405] bond0: (slave bond_slave_1): Releasing backup interface [ 203.885473][ T9405] team0: Port device team_slave_0 removed [ 203.902951][ T9422] netlink: 9 bytes leftover after parsing attributes in process `syz.1.814'. [ 203.912455][ T9405] team0: Port device team_slave_1 removed [ 203.913607][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.935118][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.956558][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.966006][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.969869][ T9424] netlink: 25 bytes leftover after parsing attributes in process `syz.1.814'. [ 204.019408][ T9405] bond1: (slave gretap1): Releasing active interface [ 204.064724][ T9405] bond4: (slave vcan1): Releasing backup interface [ 204.085843][ T9346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.241135][ T9422] bridge0: port 3(gretap0) entered disabled state [ 204.630034][ T9440] tap0: tun_chr_ioctl cmd 2148553947 [ 204.762408][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.839933][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.913305][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.920582][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.921124][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 204.989464][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 205.024046][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.031369][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.079394][ T9455] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.086919][ T9455] tipc: Enabled bearer , priority 10 [ 205.227672][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.368229][ T9462] netlink: 96 bytes leftover after parsing attributes in process `syz.4.828'. [ 205.447488][ T9465] batadv_slave_0: entered promiscuous mode [ 205.465076][ T9465] batadv_slave_0: entered allmulticast mode [ 205.497361][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.846691][ T9480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.833'. [ 205.859132][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.871877][ T9482] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 205.902181][ T9480] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 205.911330][ T5852] Bluetooth: hci4: command tx timeout [ 205.923234][ T9480] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 205.946119][ T9485] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 206.027596][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.082162][ T9491] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 206.177085][ T9482] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 206.219172][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 206.233031][ T9482] bond1 (unregistering): Released all slaves [ 206.300072][ T9346] veth0_vlan: entered promiscuous mode [ 206.393621][ T9346] veth1_vlan: entered promiscuous mode [ 206.522419][ T9346] veth0_macvtap: entered promiscuous mode [ 206.545229][ T9346] veth1_macvtap: entered promiscuous mode [ 206.642817][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.684436][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.721482][ T9346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.739693][ T9346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.768573][ T9346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.795623][ T9346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.862923][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.994011][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.013192][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.033724][ T9524] netlink: 'syz.0.846': attribute type 2 has an invalid length. [ 207.048045][ T9524] netlink: 'syz.0.846': attribute type 8 has an invalid length. [ 207.065494][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.074522][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.107807][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.528668][ T8664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.716227][ T8664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.805794][ T8664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.900169][ T8664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.147520][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.175882][ T8664] bridge_slave_1: left allmulticast mode [ 208.183577][ T8664] bridge_slave_1: left promiscuous mode [ 208.189677][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.204914][ T8664] bridge_slave_0: left allmulticast mode [ 208.211435][ T8664] bridge_slave_0: left promiscuous mode [ 208.217237][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.519582][ T8664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.533743][ T8664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.545690][ T8664] bond0 (unregistering): Released all slaves [ 208.633821][ T9547] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 208.657968][ T9543] __nla_validate_parse: 4 callbacks suppressed [ 208.657991][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 209.187594][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.527798][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 209.797732][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.809892][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.818891][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.830698][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.838690][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.146223][ T8664] hsr_slave_0: left promiscuous mode [ 210.178264][ T8664] hsr_slave_1: left promiscuous mode [ 210.194381][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.222965][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.227513][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.260079][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.286496][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.371236][ T8664] veth1_macvtap: left promiscuous mode [ 210.385194][ T8664] veth0_macvtap: left promiscuous mode [ 210.399629][ T8664] veth1_vlan: left promiscuous mode [ 210.421212][ T8664] veth0_vlan: left promiscuous mode [ 211.166141][ T8664] team0 (unregistering): Port device team_slave_1 removed [ 211.214989][ T8664] team0 (unregistering): Port device team_slave_0 removed [ 211.267452][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.682056][ T9607] veth1_macvtap: left promiscuous mode [ 211.691307][ T9607] macsec0: entered promiscuous mode [ 211.700522][ T9610] veth1_macvtap: entered promiscuous mode [ 211.706476][ T9610] macsec0: left promiscuous mode [ 211.915233][ T5852] Bluetooth: hci4: command tx timeout [ 211.951599][ T9631] sctp: [Deprecated]: syz.2.869 (pid 9631) Use of int in maxseg socket option. [ 211.951599][ T9631] Use struct sctp_assoc_value instead [ 212.307293][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.410380][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 212.543122][ T9649] netlink: 'syz.1.873': attribute type 12 has an invalid length. [ 212.574127][ T9649] netlink: 'syz.1.873': attribute type 29 has an invalid length. [ 212.603777][ T9649] netlink: 148 bytes leftover after parsing attributes in process `syz.1.873'. [ 212.673483][ T9649] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 212.700289][ T9649] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 212.717322][ T9649] netlink: 39 bytes leftover after parsing attributes in process `syz.1.873'. [ 212.765272][ T2960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.774194][ T2960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.797697][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.057739][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.073912][ T9592] chnl_net:caif_netlink_parms(): no params data found [ 213.347580][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.682763][ T5898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.953928][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.961219][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.987760][ T5852] Bluetooth: hci4: command tx timeout [ 214.007409][ T9592] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.014645][ T9592] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.082969][ T9592] bridge_slave_0: entered allmulticast mode [ 214.084280][ T9727] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 214.125672][ T9592] bridge_slave_0: entered promiscuous mode [ 214.239656][ T9592] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.246885][ T9592] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.284374][ T9592] bridge_slave_1: entered allmulticast mode [ 214.284870][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 214.309912][ T9736] netlink: 27 bytes leftover after parsing attributes in process `syz.4.891'. [ 214.320740][ T9592] bridge_slave_1: entered promiscuous mode [ 214.338176][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 214.385812][ T9592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.387744][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.403938][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 214.424030][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 214.427034][ T9592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.435445][ T9733] netdevsim netdevsim1: Direct firmware load for . [ 214.435445][ T9733] failed with error -2 [ 214.455180][ T9733] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 214.455180][ T9733] [ 214.611057][ T9731] team0 (unregistering): Port device team_slave_0 removed [ 214.624480][ T9731] team0 (unregistering): Port device team_slave_1 removed [ 214.679974][ T9592] team0: Port device team_slave_0 added [ 214.691435][ T9592] team0: Port device team_slave_1 added [ 214.840137][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.857580][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.948536][ T9592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.987118][ T9592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.004643][ T9592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.068163][ T9592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.366527][ T9592] hsr_slave_0: entered promiscuous mode [ 215.388960][ T9592] hsr_slave_1: entered promiscuous mode [ 215.422087][ T9592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.427589][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.450429][ T9592] Cannot create hsr debugfs directory [ 215.511422][ T9769] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 215.573475][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'. [ 215.770324][ T9782] x_tables: duplicate underflow at hook 3 [ 215.796289][ T9782] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 215.975102][ T9789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.907'. [ 216.073851][ T5852] Bluetooth: hci4: command tx timeout [ 216.406080][ T9808] xt_hashlimit: invalid rate [ 216.455175][ T9809] openvswitch: netlink: Flow actions attr not present in new flow. [ 216.467558][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.474331][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 216.515612][ T9814] netlink: 'syz.4.914': attribute type 3 has an invalid length. [ 216.560514][ T9816] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 216.571175][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.611026][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.701219][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.744801][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.797976][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.214652][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.919'. [ 217.284345][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 217.487333][ T9852] netlink: 'syz.2.920': attribute type 1 has an invalid length. [ 217.507611][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.680509][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 218.028480][ T9873] netlink: 'syz.2.927': attribute type 1 has an invalid length. [ 218.056321][ T9873] netlink: 'syz.2.927': attribute type 3 has an invalid length. [ 218.072542][ T9873] NCSI netlink: No device for ifindex 0 [ 218.151206][ T5851] Bluetooth: hci4: command tx timeout [ 218.151233][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 218.161639][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 218.262510][ T9592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.315254][ T9592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.388946][ T9592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.504879][ T9592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.541548][ T9897] ipt_REJECT: TCP_RESET invalid for non-tcp [ 218.547649][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.583631][ T9893] IPVS: set_ctl: invalid protocol: 87 127.0.0.1:20002 [ 218.604120][ T9897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.617764][ T9897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.638440][ T9897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.655717][ T9897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.066831][ T9592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.176690][ T9592] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.229374][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.236553][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.312028][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.319391][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.362648][ T9929] __nla_validate_parse: 7 callbacks suppressed [ 219.362673][ T9929] netlink: 512 bytes leftover after parsing attributes in process `syz.1.938'. [ 219.414444][ T9927] netlink: 'syz.0.941': attribute type 24 has an invalid length. [ 219.587390][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.690861][ T9592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.790905][ T9937] netlink: 164 bytes leftover after parsing attributes in process `syz.0.944'. [ 219.848895][ T9940] syzkaller1: entered promiscuous mode [ 219.854484][ T9940] syzkaller1: entered allmulticast mode [ 219.887265][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 219.919868][ T9947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.010714][ T9940] netlink: 'syz.4.946': attribute type 1 has an invalid length. [ 220.310888][ T9960] netlink: 76 bytes leftover after parsing attributes in process `syz.2.951'. [ 220.489492][ T9971] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 220.627741][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.644676][ T9971] IPVS: ip_vs_add_dest(): server weight less than zero [ 220.647918][ T48] IPVS: starting estimator thread 0... [ 220.663063][ T9971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.953'. [ 220.677851][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'. [ 220.691294][ T9973] netlink: 80 bytes leftover after parsing attributes in process `syz.4.954'. [ 220.696851][ T9592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.768417][ T9981] IPVS: using max 28 ests per chain, 67200 per kthread [ 220.992237][ T9592] veth0_vlan: entered promiscuous mode [ 221.023958][ T9991] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.957'. [ 221.069020][ T9592] veth1_vlan: entered promiscuous mode [ 221.230602][ T9592] veth0_macvtap: entered promiscuous mode [ 221.266086][ T9592] veth1_macvtap: entered promiscuous mode [ 221.300588][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.960'. [ 221.331983][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 221.383509][T10003] erspan0: entered promiscuous mode [ 221.428119][T10003] erspan0: left promiscuous mode [ 221.485203][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.589432][ T9592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.619157][T10010] x_tables: duplicate underflow at hook 3 [ 221.630530][ T9592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.657903][ T9592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.667604][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.686389][ T9592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.695505][ T9592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.025086][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.072395][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.207085][ T8664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.234315][T10023] can: request_module (can-proto-0) failed. [ 222.246825][ T8664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.458741][T10039] netlink: 'syz.0.972': attribute type 32 has an invalid length. [ 222.500237][T10037] syzkaller0: entered allmulticast mode [ 222.615163][T10047] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 222.670280][T10047] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 222.707292][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.394385][ T8664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.547755][ T8664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.747555][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.806321][ T8664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.926306][ T8664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.154438][ T8664] bridge_slave_1: left allmulticast mode [ 224.163437][ T8664] bridge_slave_1: left promiscuous mode [ 224.170009][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.186241][ T8664] bridge_slave_0: left allmulticast mode [ 224.194192][ T8664] bridge_slave_0: left promiscuous mode [ 224.202023][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.493901][T10107] x_tables: duplicate underflow at hook 1 [ 224.787424][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.877539][T10121] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 225.002440][T10123] netlink: 'syz.4.984': attribute type 142 has an invalid length. [ 225.027519][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.028097][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 120 seconds [ 225.205695][ T8664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.225737][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.238153][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.246725][ T8664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.257049][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.271149][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.273426][ T8664] bond0 (unregistering): Released all slaves [ 225.287597][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.775773][T10146] xt_bpf: check failed: parse error [ 225.802342][T10152] netlink: 'syz.0.987': attribute type 7 has an invalid length. [ 225.824293][T10152] netlink: 'syz.0.987': attribute type 8 has an invalid length. [ 225.827415][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.072013][T10156] nbd: must specify a device to reconfigure [ 226.237403][T10170] __nla_validate_parse: 8 callbacks suppressed [ 226.237425][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 226.841201][T10196] netlink: 'syz.0.998': attribute type 49 has an invalid length. [ 226.864907][ T8664] hsr_slave_0: left promiscuous mode [ 226.870468][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.917035][ T8664] hsr_slave_1: left promiscuous mode [ 226.934222][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.951489][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.992803][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.014695][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.110278][ T8664] veth1_macvtap: left promiscuous mode [ 227.137592][ T8664] veth0_macvtap: left promiscuous mode [ 227.145111][ T8664] veth1_vlan: left promiscuous mode [ 227.177430][ T8664] veth0_vlan: left promiscuous mode [ 227.347556][ T5838] Bluetooth: hci4: command tx timeout [ 227.380006][T10213] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1000'. [ 227.605024][T10220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1001'. [ 227.910177][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.059236][ T8664] team0 (unregistering): Port device team_slave_1 removed [ 228.113583][ T8664] team0 (unregistering): Port device team_slave_0 removed [ 228.551249][T10130] chnl_net:caif_netlink_parms(): no params data found [ 228.570316][T10215] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 228.778256][T10231] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1003'. [ 228.805335][T10231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 228.947321][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.018132][T10234] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.199608][T10241] bond1: entered promiscuous mode [ 229.203575][T10256] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 229.204863][T10241] bond1: entered allmulticast mode [ 229.213322][T10256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1009'. [ 229.219619][T10241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.394068][T10234] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.419151][T10256] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 229.437450][ T5838] Bluetooth: hci4: command tx timeout [ 229.649985][T10234] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.715367][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.724837][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.736716][T10130] bridge_slave_0: entered allmulticast mode [ 229.771280][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 229.783684][T10272] netlink: 'syz.2.1013': attribute type 7 has an invalid length. [ 229.794283][T10130] bridge_slave_0: entered promiscuous mode [ 229.846453][T10272] netlink: 'syz.2.1013': attribute type 8 has an invalid length. [ 229.879385][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 229.893691][T10234] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.987455][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.998087][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.006944][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.030738][T10130] bridge_slave_1: entered allmulticast mode [ 230.085566][T10130] bridge_slave_1: entered promiscuous mode [ 230.282738][T10272] erspan0: entered promiscuous mode [ 230.306571][T10272] gretap0: entered promiscuous mode [ 230.328962][T10272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.344335][T10272] Cannot create hsr debugfs directory [ 230.771434][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.783574][ T30] audit: type=1804 audit(1747523508.461:2): pid=10288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1019" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1229 res=1 errno=0 [ 230.834792][ T30] audit: type=1800 audit(1747523508.521:3): pid=10288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1019" name="cgroup.controllers" dev="tmpfs" ino=1229 res=0 errno=0 [ 230.844840][T10291] netlink: 'syz.4.1018': attribute type 2 has an invalid length. [ 230.904616][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.926299][T10286] xt_l2tp: wrong L2TP version: 0 [ 230.947742][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 231.027313][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.206277][T10234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.286107][T10130] team0: Port device team_slave_0 added [ 231.337611][T10234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.393421][T10130] team0: Port device team_slave_1 added [ 231.517713][ T5838] Bluetooth: hci4: command tx timeout [ 231.676428][T10234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.703764][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.723307][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.791135][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.853335][T10234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.896734][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.941113][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.003867][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.067337][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.202098][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 232.485033][T10350] openvswitch: netlink: Missing key (keys=40, expected=100) [ 232.503799][T10349] xfrm0: entered promiscuous mode [ 232.509578][T10349] xfrm0: entered allmulticast mode [ 232.560723][T10130] hsr_slave_0: entered promiscuous mode [ 232.571829][T10130] hsr_slave_1: entered promiscuous mode [ 232.581553][T10130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.593779][T10130] Cannot create hsr debugfs directory [ 232.843208][T10361] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 232.858315][T10361] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 232.895360][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1034'. [ 232.947368][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 232.952138][T10361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1034'. [ 233.025008][T10364] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 233.064296][T10364] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 233.107552][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.533068][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 233.594881][ T5838] Bluetooth: hci4: command tx timeout [ 233.699108][T10398] xt_cgroup: invalid path, errno=-2 [ 233.718327][T10392] bridge3: entered allmulticast mode [ 233.904281][T10413] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1045'. [ 233.986103][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 234.084397][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 234.147280][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.504619][T10437] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 234.646105][T10442] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 234.721665][T10437] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1051'. [ 234.821872][T10437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.832113][ T2960] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 235.003828][T10130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.037650][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 235.095862][T10130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.187496][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.200228][T10130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.225347][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 235.232741][T10130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.573431][T10486] syzkaller0: entered promiscuous mode [ 235.604635][T10486] syzkaller0: entered allmulticast mode [ 235.646103][T10486] netlink: 'syz.0.1061': attribute type 21 has an invalid length. [ 235.914267][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.095705][T10130] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.180662][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.187962][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.227307][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.419592][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.426899][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.505608][T10530] gretap2: entered allmulticast mode [ 236.580611][T10536] trusted_key: syz.2.1072 sent an empty control message without MSG_MORE. [ 236.999688][T10556] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 237.267496][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.524656][T10575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.566974][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.795858][T10130] veth0_vlan: entered promiscuous mode [ 237.899619][T10130] veth1_vlan: entered promiscuous mode [ 237.921439][T10588] __nla_validate_parse: 7 callbacks suppressed [ 237.921461][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 238.027819][T10130] veth0_macvtap: entered promiscuous mode [ 238.072710][T10130] veth1_macvtap: entered promiscuous mode [ 238.144455][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.199437][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.275466][T10130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.307448][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 238.327389][T10130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.356031][T10130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.376219][T10130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.682143][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 238.784442][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.833133][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.834421][T10628] netlink: 'syz.2.1090': attribute type 7 has an invalid length. [ 238.972515][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 238.994521][T10628] : entered promiscuous mode [ 239.103591][ T8660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.170514][ T8660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.347316][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.372816][T10653] xt_recent: Unsupported userspace flags (00000061) [ 239.649546][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'. [ 239.686841][T10662] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 240.014730][ T8661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.062634][T10672] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 240.183638][ T8661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.359693][ T8661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.387420][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.387423][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.429085][ T8661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.602186][ T8661] bridge_slave_1: left allmulticast mode [ 240.608178][ T8661] bridge_slave_1: left promiscuous mode [ 240.615477][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.632941][ T8661] bridge_slave_0: left allmulticast mode [ 240.639121][ T8661] bridge_slave_0: left promiscuous mode [ 240.644868][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.973433][ T8661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.986503][ T8661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.997626][ T8661] bond0 (unregistering): Released all slaves [ 241.333323][T10690] netlink: 'syz.0.1104': attribute type 10 has an invalid length. [ 241.400899][T10695] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1107'. [ 241.427353][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.607728][T10705] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 241.681623][T10690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 241.904461][ T8661] hsr_slave_0: left promiscuous mode [ 241.939353][ T8661] hsr_slave_1: left promiscuous mode [ 241.962884][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.995984][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.037984][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.045503][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.106065][T10724] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.126730][ T8661] veth1_macvtap: left promiscuous mode [ 242.141088][ T8661] veth0_macvtap: left promiscuous mode [ 242.156824][ T8661] veth1_vlan: left promiscuous mode [ 242.167894][ T8661] veth0_vlan: left promiscuous mode [ 242.331188][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 242.350801][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.362120][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.370810][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.379393][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.389398][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.477299][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.875361][ T8661] team0 (unregistering): Port device team_slave_1 removed [ 242.916507][ T8661] team0 (unregistering): Port device team_slave_0 removed [ 243.322405][T10712] netlink: 'syz.2.1110': attribute type 6 has an invalid length. [ 243.486069][T10739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1115'. [ 243.507294][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.533348][T10740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1115'. [ 243.925939][T10753] batman_adv: batadv0: Adding interface: dummy0 [ 243.955934][T10756] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1120'. [ 243.976913][T10753] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.061677][T10753] batman_adv: batadv0: Interface activated: dummy0 [ 244.471371][ T5844] Bluetooth: hci4: command tx timeout [ 244.557288][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.625298][T10731] chnl_net:caif_netlink_parms(): no params data found [ 244.710725][T10796] Cannot find del_set index 4 as target [ 244.741380][T10796] Cannot find del_set index 4 as target [ 244.777806][T10796] Cannot find del_set index 4 as target [ 244.808535][T10796] Cannot find del_set index 4 as target [ 244.858167][T10796] Cannot find del_set index 4 as target [ 244.874758][T10796] Cannot find del_set index 4 as target [ 244.894166][T10796] Cannot find del_set index 4 as target [ 244.911301][T10796] Cannot find del_set index 4 as target [ 244.941973][T10796] Cannot find del_set index 4 as target [ 244.979136][T10796] Cannot find del_set index 4 as target [ 245.016322][T10807] netlink: 'syz.4.1129': attribute type 2 has an invalid length. [ 245.240114][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.252946][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.260440][T10731] bridge_slave_0: entered allmulticast mode [ 245.268808][T10731] bridge_slave_0: entered promiscuous mode [ 245.292747][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.335397][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.358782][T10731] bridge_slave_1: entered allmulticast mode [ 245.367065][T10731] bridge_slave_1: entered promiscuous mode [ 245.509248][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 245.542712][T10731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.572811][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 245.587417][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.765311][T10731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.957408][T10731] team0: Port device team_slave_0 added [ 245.980240][T10731] team0: Port device team_slave_1 added [ 246.212814][T10860] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 246.310886][T10731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.331930][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.428676][T10731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.464172][T10877] netlink: 'syz.2.1148': attribute type 11 has an invalid length. [ 246.539481][T10731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.548110][ T5844] Bluetooth: hci4: command tx timeout [ 246.577100][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.627423][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.712958][T10731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.753409][T10889] x_tables: duplicate entry at hook 3 [ 247.072405][T10901] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 247.397506][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 247.406554][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 247.424105][T10731] hsr_slave_0: entered promiscuous mode [ 247.436592][T10731] hsr_slave_1: entered promiscuous mode [ 247.451540][T10731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.460830][T10731] Cannot create hsr debugfs directory [ 247.502806][T10918] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 247.524484][T10918] netlink: 'syz.2.1158': attribute type 2 has an invalid length. [ 247.529068][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 247.541909][T10918] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1158'. [ 247.566287][T10911] veth5: entered allmulticast mode [ 247.667324][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 247.819284][T10923] ip6t_srh: unknown srh invflags 4449 [ 247.884612][T10927] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.893747][T10927] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.943312][T10923] syzkaller0: entered promiscuous mode [ 247.949790][T10923] syzkaller0: entered allmulticast mode [ 248.035972][T10939] netlink: 'syz.1.1164': attribute type 32 has an invalid length. [ 248.631554][ T5844] Bluetooth: hci4: command tx timeout [ 248.707626][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.874490][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.036817][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 249.046333][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 249.160611][T10981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1175'. [ 249.333188][T10978] syzkaller0: entered promiscuous mode [ 249.338894][T10978] syzkaller0: entered allmulticast mode [ 249.339801][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1177'. [ 249.747300][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.711064][ T5844] Bluetooth: hci4: command tx timeout [ 250.787297][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.992248][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.004952][T11007] batadv_slave_0: entered promiscuous mode [ 251.288966][T11024] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1183'. [ 251.363780][T10731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 251.543290][T10731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 251.628131][T10731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 251.827427][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.907856][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.945606][T10731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.022092][T11044] nbd: couldn't find a device at index 2 [ 252.053769][T11014] delete_channel: no stack [ 252.094131][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 252.281471][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 252.327680][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1191'. [ 252.381681][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 252.514570][T10731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.654791][T10731] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.686716][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.694014][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.738420][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.745678][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.803855][T11080] sctp: [Deprecated]: syz.0.1199 (pid 11080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.803855][T11080] Use struct sctp_sack_info instead [ 252.867394][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.962330][T11084] x_tables: ip_tables: osf match: only valid for protocol 6 [ 253.398233][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1206'. [ 253.493630][T11108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.506746][T10731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.559371][T11112] vlan2: entered allmulticast mode [ 253.578165][T11112] bond2: entered allmulticast mode [ 253.834350][T10731] veth0_vlan: entered promiscuous mode [ 253.863207][T10731] veth1_vlan: entered promiscuous mode [ 253.907409][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 254.035374][T10731] veth0_macvtap: entered promiscuous mode [ 254.078907][T10731] veth1_macvtap: entered promiscuous mode [ 254.161814][T10731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.210500][T10731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.250309][T10731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.280665][T10731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.307518][T10731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.326614][T10731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.401276][T11152] netlink: 'syz.0.1217': attribute type 1 has an invalid length. [ 254.584480][T11152] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.714760][T11156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.722391][T11156] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.734553][T11156] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 254.795782][T11152] veth7: entered promiscuous mode [ 254.811760][T11152] bond6: (slave veth7): Enslaving as an active interface with a down link [ 254.832538][T11160] erspan0: entered allmulticast mode [ 254.856704][T11160] bond6: (slave erspan0): making interface the new active one [ 254.896727][T11160] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 254.947605][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 254.968085][T11168] __nla_validate_parse: 1 callbacks suppressed [ 254.968110][T11168] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1219'. [ 255.108004][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 150 seconds [ 255.134372][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.146293][T11179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1222'. [ 255.174589][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.203574][T11179] sctp: [Deprecated]: syz.0.1222 (pid 11179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.203574][T11179] Use struct sctp_sack_info instead [ 255.354651][T11191] netlink: 'syz.1.1224': attribute type 16 has an invalid length. [ 255.363181][T11191] netlink: 'syz.1.1224': attribute type 17 has an invalid length. [ 255.400235][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.408878][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.518081][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.570293][ T8660] bond1: (slave ip6gretap1): link status up again after 0 ms [ 255.592331][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.757406][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 255.778256][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 255.794313][T11206] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1229'. [ 255.830124][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.958911][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 255.987418][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 256.048809][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.125121][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 256.134108][ T8660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.221383][ T6101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 256.314493][ T8660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.686249][ T8660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.829882][ T8660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.918304][ T36] net_ratelimit: 3 callbacks suppressed [ 256.918331][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.033978][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.034210][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.147660][ T8661] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.191946][ T8660] bridge_slave_1: left allmulticast mode [ 257.202926][ T8660] bridge_slave_1: left promiscuous mode [ 257.209292][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.222600][ T8660] bridge_slave_0: left allmulticast mode [ 257.229081][ T8660] bridge_slave_0: left promiscuous mode [ 257.234949][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.589743][ T8660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.603674][ T8660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.615240][ T8660] bond0 (unregistering): Released all slaves [ 257.697525][ T6101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.736565][T11228] netlink: 'syz.1.1235': attribute type 11 has an invalid length. [ 257.795077][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1235'. [ 257.817403][ T8661] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 257.831917][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 257.891594][T11237] netlink: 'syz.1.1235': attribute type 11 has an invalid length. [ 257.927592][T11240] x_tables: duplicate underflow at hook 2 [ 257.937729][T11237] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1235'. [ 258.067268][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 258.099401][ T2960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.334547][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 258.368496][ T2960] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 258.502630][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.514035][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.524238][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.539669][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.555682][T11247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.566535][T11247] bond0: (slave bond7): Enslaving as an active interface with an up link [ 258.576559][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.641658][ T8660] hsr_slave_0: left promiscuous mode [ 258.664769][ T8660] hsr_slave_1: left promiscuous mode [ 258.676979][ T8660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.685614][ T8660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.696893][ T8660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.704841][ T8660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.732472][ T8660] veth1_macvtap: left promiscuous mode [ 258.738301][ T8660] veth0_macvtap: left promiscuous mode [ 258.743956][ T8660] veth1_vlan: left promiscuous mode [ 258.749458][ T8660] veth0_vlan: left promiscuous mode [ 259.112299][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.300148][ T8660] team0 (unregistering): Port device team_slave_1 removed [ 259.344014][ T8660] team0 (unregistering): Port device team_slave_0 removed [ 259.758416][ T8661] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 259.922994][T11281] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 259.972769][T11283] sctp: [Deprecated]: syz.4.1250 (pid 11283) Use of int in maxseg socket option. [ 259.972769][T11283] Use struct sctp_assoc_value instead [ 259.998144][T11285] __nla_validate_parse: 2 callbacks suppressed [ 259.998167][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 260.047085][T11285] bridge_slave_1 (unregistering): left promiscuous mode [ 260.059317][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.146589][T11290] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 260.175439][T11292] netlink: 'syz.0.1253': attribute type 21 has an invalid length. [ 260.461313][T11306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1254'. [ 260.639623][ T5838] Bluetooth: hci4: command tx timeout [ 260.742087][T11260] chnl_net:caif_netlink_parms(): no params data found [ 261.031621][T11325] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1259'. [ 261.032245][T11260] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.049793][T11260] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.057490][T11260] bridge_slave_0: entered allmulticast mode [ 261.065356][T11260] bridge_slave_0: entered promiscuous mode [ 261.070018][T11328] IPVS: length: 151 != 8 [ 261.075014][T11260] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.082780][T11260] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.097735][T11260] bridge_slave_1: entered allmulticast mode [ 261.121819][T11260] bridge_slave_1: entered promiscuous mode [ 261.227568][T11260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.260294][T11260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.377045][T11260] team0: Port device team_slave_0 added [ 261.400571][T11260] team0: Port device team_slave_1 added [ 261.501812][T11260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.512327][T11260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.554037][T11260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.593181][T11260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.613840][T11260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.673112][T11260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.909393][T11371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1268'. [ 262.227351][ C0] net_ratelimit: 5 callbacks suppressed [ 262.227379][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 262.719605][T11364] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 262.738794][ T5838] Bluetooth: hci4: command tx timeout [ 263.047807][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 263.124086][T11260] hsr_slave_0: entered promiscuous mode [ 263.181294][T11260] hsr_slave_1: entered promiscuous mode [ 263.234788][T11260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.267420][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.331216][T11260] Cannot create hsr debugfs directory [ 263.409325][T11376] batadv0: entered promiscuous mode [ 263.469306][T11376] team0: entered promiscuous mode [ 263.497702][T11376] team_slave_0: entered promiscuous mode [ 263.558229][T11376] team_slave_1: entered promiscuous mode [ 263.622658][T11376] hsr1: entered promiscuous mode [ 263.640547][T11376] hsr1: entered allmulticast mode [ 263.655715][T11376] batadv0: entered allmulticast mode [ 263.688658][T11376] team0: entered allmulticast mode [ 263.704214][T11376] team_slave_0: entered allmulticast mode [ 263.722190][T11376] team_slave_1: entered allmulticast mode [ 263.752882][T11393] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 263.802878][T11380] veth1_to_team: entered promiscuous mode [ 263.978001][ T8661] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 264.307264][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.578425][T11408] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.1283'. [ 264.632986][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 264.789674][ T5838] Bluetooth: hci4: command tx timeout [ 265.055088][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 265.347601][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.599880][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 265.853097][T11436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.387276][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 266.867397][ T5838] Bluetooth: hci4: command tx timeout [ 267.427300][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.908450][ T5203] udevd[5203]: worker [5892] /devices/virtual/block/nbd0 is taking a long time [ 268.467295][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.717603][ T8661] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 268.973544][T11449] xt_hashlimit: size too large, truncated to 1048576 [ 269.251547][T11458] Cannot find set identified by id 752 to match [ 269.508044][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.719928][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 269.806973][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 269.836920][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.013268][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 270.092657][T11446] netlink: 'syz.1.1293': attribute type 5 has an invalid length. [ 270.117503][T11463] lo: entered promiscuous mode [ 270.122881][ T6101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.547270][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 270.692047][T11479] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 270.719725][ T6101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 270.905314][T11462] lo: left promiscuous mode [ 270.917413][ T6101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.410621][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 271.587383][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.883185][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 271.903796][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 271.924425][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 271.944147][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 271.956801][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 272.588224][ T6094] net_ratelimit: 1 callbacks suppressed [ 272.588254][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.627260][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 272.778980][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 272.876133][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 272.917241][ C1] sched: DL replenish lagged too much [ 273.205838][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 273.230732][T11524] netlink: 'syz.4.1309': attribute type 7 has an invalid length. [ 273.252930][T11524] netlink: 'syz.4.1309': attribute type 8 has an invalid length. [ 273.288839][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 273.667437][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 274.117682][T11518] hsr_slave_1 (unregistering): left promiscuous mode [ 274.707466][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.258908][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.458458][T11544] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 275.487409][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 275.614475][T11260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.664614][T11546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1317'. [ 275.721487][T11260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.747319][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 275.865694][T11260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.982489][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1318'. [ 276.787268][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.827285][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 278.867257][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 279.907288][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 280.947284][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 281.987391][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 283.027260][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.067272][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 284.967543][ T5203] udevd[5203]: worker [5892] /devices/virtual/block/nbd0 timeout; kill it [ 284.982777][ T5203] udevd[5203]: seq 11114 '/devices/virtual/block/nbd0' killed [ 285.107276][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.187848][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 180 seconds [ 285.236506][T11260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.437328][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.487601][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 285.576749][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 285.898603][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 286.068044][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 286.098082][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 286.147287][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 286.189049][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 286.358639][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.498527][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.021058][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 287.081962][T11260] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.376116][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.383421][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.416843][T11589] netlink: 'syz.0.1331': attribute type 21 has an invalid length. [ 287.654344][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.830903][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.838214][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.906713][T11589] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1331'. [ 288.194232][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.289896][ T6104] net_ratelimit: 2 callbacks suppressed [ 288.289934][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 288.585173][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.699577][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.091865][T11616] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 289.122726][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.559813][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 289.809936][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.057485][ T30] audit: type=1107 audit(1747523567.731:4): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 290.244089][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.254297][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.267640][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.276009][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.299629][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.398937][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.748783][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 290.807860][T11639] netlink: 'syz.0.1343': attribute type 5 has an invalid length. [ 290.815712][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'. [ 291.004956][T11641] sctp: [Deprecated]: syz.0.1343 (pid 11641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.004956][T11641] Use struct sctp_sack_info instead [ 291.228775][ T13] batadv2: left allmulticast mode [ 291.234013][ T13] batadv2: left promiscuous mode [ 291.249642][ T13] bridge0: port 4(batadv2) entered disabled state [ 291.318232][ T13] batadv1: left allmulticast mode [ 291.323366][ T13] batadv1: left promiscuous mode [ 291.387624][ T13] bridge0: port 3(batadv1) entered disabled state [ 291.469348][ T13] bridge_slave_1: left allmulticast mode [ 291.493974][ T13] bridge_slave_1: left promiscuous mode [ 291.517557][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.565674][T11655] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1347'. [ 291.605850][ T13] bridge_slave_0: left allmulticast mode [ 291.616463][ T13] bridge_slave_0: left promiscuous mode [ 291.623398][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.795438][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 292.001140][T11665] netlink: 'syz.0.1350': attribute type 4 has an invalid length. [ 292.019447][T11665] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1350'. [ 292.547476][ T5844] Bluetooth: hci0: command tx timeout [ 293.141755][ T13] dvmrp0 (unregistering): left allmulticast mode [ 293.639099][ T13] bond0 (unregistering): Released all slaves [ 293.999548][ T13] bond1 (unregistering): Released all slaves [ 294.322882][ T13] bond2 (unregistering): Released all slaves [ 294.372577][T11260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.644833][ T5844] Bluetooth: hci0: command tx timeout [ 295.765345][ T13] tipc: Disabling bearer [ 295.778381][ T13] tipc: Left network mode [ 295.786902][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 295.831237][T11670] netlink: 'syz.1.1351': attribute type 3 has an invalid length. [ 295.939114][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.658412][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 296.707568][ T5844] Bluetooth: hci0: command tx timeout [ 297.101512][T11700] x_tables: duplicate underflow at hook 1 [ 297.325964][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 297.464647][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 297.480497][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1360'. [ 297.706730][T11702] xt_CT: No such helper "snmp" [ 297.719265][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.014221][T11260] veth0_vlan: entered promiscuous mode [ 298.120530][ T6104] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.280267][T11719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1361'. [ 298.309757][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 298.357668][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 298.490957][T11260] veth1_vlan: entered promiscuous mode [ 298.787402][ T5844] Bluetooth: hci0: command tx timeout [ 299.848702][T11719] veth9: entered allmulticast mode [ 299.868407][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 299.896733][T11631] chnl_net:caif_netlink_parms(): no params data found [ 300.060611][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 300.235718][T11753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1370'. [ 300.347950][ T13] hsr_slave_0: left promiscuous mode [ 300.401039][ T13] hsr_slave_1: left promiscuous mode [ 300.484492][ T13] veth1_vlan: left promiscuous mode [ 300.555764][ T13] veth0_vlan: left promiscuous mode [ 301.003948][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 305.398283][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 305.675711][T11781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1379'. [ 306.268284][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.479570][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.629624][T11260] veth0_macvtap: entered promiscuous mode [ 306.637750][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 306.786847][T11631] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.806985][T11631] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.876029][T11631] bridge_slave_0: entered allmulticast mode [ 306.900700][T11631] bridge_slave_0: entered promiscuous mode [ 306.931727][T11789] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1382'. [ 306.962521][T11260] veth1_macvtap: entered promiscuous mode [ 307.025729][T11631] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.048691][T11631] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.102575][T11631] bridge_slave_1: entered allmulticast mode [ 307.163622][T11631] bridge_slave_1: entered promiscuous mode [ 307.421667][T11804] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 307.692233][T11812] sock: sock_timestamping_bind_phc: sock not bind to device [ 307.705288][T11813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.865821][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 307.902184][T11260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.954552][T11631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.060155][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.093076][ T13] IPVS: stop unused estimator thread 0... [ 308.126347][T11260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.159057][T11815] pimreg: left allmulticast mode [ 308.273797][T11631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.505787][T11817] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 308.515033][T11817] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 308.527460][T11817] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 308.539555][T11817] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 308.550947][T11817] geneve2: entered promiscuous mode [ 308.556405][T11817] geneve2: entered allmulticast mode [ 308.751737][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 308.779856][T11260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.827559][T11260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.877515][T11260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.947844][T11260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.985228][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1393'. [ 309.015636][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1393'. [ 309.065700][T11631] team0: Port device team_slave_0 added [ 309.209665][T11631] team0: Port device team_slave_1 added [ 309.661372][T11631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.703356][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.771239][T11631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.910087][T11631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.937962][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.075844][T11631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.166758][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'. [ 310.198387][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 310.514552][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 310.545023][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 311.056926][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 312.951053][T11631] hsr_slave_0: entered promiscuous mode [ 312.979071][T11631] hsr_slave_1: entered promiscuous mode [ 312.985609][T11631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.034790][T11631] Cannot create hsr debugfs directory [ 313.058244][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.865573][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.876939][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 313.931765][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.374410][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.595821][T11911] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 314.698091][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 314.781508][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.818507][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1414'. [ 314.847231][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.937417][T11916] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 315.087826][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.220504][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.244509][T11921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1416'. [ 315.277612][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 210 seconds [ 315.619400][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 315.991366][T11929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1418'. [ 316.535424][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 316.572824][T11928] delete_channel: no stack [ 316.608229][T11932] macvlan5: entered promiscuous mode [ 316.632074][T11932] macvlan5: entered allmulticast mode [ 316.662706][T11932] batadv0: entered promiscuous mode [ 316.700218][T11932] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 316.742445][T11932] bond0: (slave macvlan5): Enslaving as an active interface with an up link [ 316.780651][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 316.964649][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.214447][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.765477][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.777477][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.795814][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.806028][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.814181][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.826806][T11963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.631050][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.688449][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 319.877434][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 320.161734][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.216422][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 321.313597][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 322.235556][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.246202][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.265852][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.277103][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.287956][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.824504][T12000] x_tables: duplicate underflow at hook 1 [ 324.390770][ T5844] Bluetooth: hci4: command tx timeout [ 326.473107][ T5844] Bluetooth: hci4: command tx timeout [ 326.959993][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.131732][T11631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 327.290844][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 327.335870][T11631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 327.449595][T11631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 327.648652][T11631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.174868][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.357649][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.548234][ T5844] Bluetooth: hci4: command tx timeout [ 328.623770][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 328.714500][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.816685][ T12] bridge_slave_1: left allmulticast mode [ 328.826426][ T12] bridge_slave_1: left promiscuous mode [ 328.832553][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.889199][ T12] bridge_slave_0: left allmulticast mode [ 328.895209][ T12] bridge_slave_0: left promiscuous mode [ 328.912046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.973272][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.010063][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.030664][ T12] bond0 (unregistering): Released all slaves [ 330.066072][T12032] tipc: Enabling of bearer rejected, media not registered [ 330.139798][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.275026][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 330.376158][T11631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.628399][ T5844] Bluetooth: hci4: command tx timeout [ 330.643292][T12051] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1444'. [ 330.989422][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 331.092222][T11631] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.209344][T12060] netlink: 'syz.2.1447': attribute type 142 has an invalid length. [ 331.292962][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 331.387096][T12063] openvswitch: netlink: Multiple metadata blocks provided [ 331.651088][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.658381][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.723627][T11990] chnl_net:caif_netlink_parms(): no params data found [ 331.882247][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 331.946006][ T12] hsr_slave_0: left promiscuous mode [ 331.969991][ T12] hsr_slave_1: left promiscuous mode [ 331.989740][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.023357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.082792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.147780][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.275999][ T12] veth1_macvtap: left promiscuous mode [ 332.306283][ T12] veth0_macvtap: left promiscuous mode [ 332.323916][ T12] veth1_vlan: left promiscuous mode [ 332.336444][ T12] veth0_vlan: left promiscuous mode [ 334.061856][ T12] team0 (unregistering): Port device team_slave_1 removed [ 334.226200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 336.009227][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.016462][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.049957][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.327858][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.473858][T12098] xt_hashlimit: max too large, truncated to 1048576 [ 336.531609][T12100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.548001][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.790901][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 336.881526][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 336.897675][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 337.032861][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.327685][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.371538][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.442474][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.478886][T11990] bridge_slave_0: entered allmulticast mode [ 337.539769][T11990] bridge_slave_0: entered promiscuous mode [ 337.607379][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 337.755955][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.783182][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.816129][T11990] bridge_slave_1: entered allmulticast mode [ 337.844427][T11990] bridge_slave_1: entered promiscuous mode [ 338.350732][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.519712][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.633959][T11990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.774403][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 338.806084][T11990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.919610][T12104] infiniband syz2: set active [ 338.941119][T12104] infiniband syz2: added team_slave_0 [ 338.966301][T12104] syz2: rxe_create_cq: returned err = -12 [ 338.974532][T12104] infiniband syz2: Couldn't create ib_mad CQ [ 338.983324][T12104] infiniband syz2: Couldn't open port 1 [ 339.081739][T12104] RDS/IB: syz2: added [ 339.097527][T12104] smc: adding ib device syz2 with port count 1 [ 339.104028][T12104] smc: ib device syz2 port 1 has pnetid [ 339.555629][T11990] team0: Port device team_slave_0 added [ 339.643132][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 339.709876][T11631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.752056][T11990] team0: Port device team_slave_1 added [ 340.380337][T11990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.397263][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.427414][T11990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.487274][T11990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.514772][T11990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.608172][T11990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.189489][ T12] net_ratelimit: 4 callbacks suppressed [ 341.189514][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.235527][T11990] hsr_slave_0: entered promiscuous mode [ 341.254570][T11990] hsr_slave_1: entered promiscuous mode [ 341.273374][T11990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.297469][T11990] Cannot create hsr debugfs directory [ 341.567366][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 341.840351][T11631] veth0_vlan: entered promiscuous mode [ 341.964547][T11631] veth1_vlan: entered promiscuous mode [ 342.247481][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.689837][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.807532][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 342.918203][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.061667][T11631] veth0_macvtap: entered promiscuous mode [ 343.113426][T11631] veth1_macvtap: entered promiscuous mode [ 343.250195][T12184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1469'. [ 343.263500][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1469'. [ 343.348415][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.514809][T11631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.558183][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 343.566144][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 343.584426][T11631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.619865][T12188] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1470'. [ 343.654569][T11631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.697255][T11631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.706084][T11631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.767271][T11631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.868528][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 344.027788][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 344.454135][T11990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.547623][ T8660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.555531][ T8660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.581025][T11990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.666304][T11990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.815729][T11990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.878937][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.914913][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.351249][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 240 seconds [ 345.452803][T11990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.568814][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.579709][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.588644][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.606946][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.615010][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.048105][ T8660] net_ratelimit: 7 callbacks suppressed [ 351.048131][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 351.273346][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 351.667345][ T5838] Bluetooth: hci0: command tx timeout [ 352.208512][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 352.249825][T11990] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.333467][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 352.546258][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.555092][T12227] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.747471][ T5838] Bluetooth: hci0: command tx timeout [ 353.854909][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.866527][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.875421][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.885597][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.895354][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.032581][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.080184][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 354.133401][T12243] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 354.168420][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.210850][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.218120][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.398268][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 354.516687][T12254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1490'. [ 354.569701][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1490'. [ 354.657660][T12256] Cannot find add_set index 4 as target [ 355.829162][ T5851] Bluetooth: hci0: command tx timeout [ 355.987598][ T5851] Bluetooth: hci5: command tx timeout [ 356.353664][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.395113][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.402409][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.448379][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.642748][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.767342][ T37] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 357.917395][ T5851] Bluetooth: hci0: command tx timeout [ 358.067747][ T5851] Bluetooth: hci5: command tx timeout [ 358.079373][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.207569][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.337790][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.728512][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.944969][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 358.999062][T12307] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1501'. [ 359.118779][T12220] chnl_net:caif_netlink_parms(): no params data found [ 359.351970][T11990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.390062][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 360.148427][ T5851] Bluetooth: hci5: command tx timeout [ 362.229572][ T5851] Bluetooth: hci5: command tx timeout [ 368.291193][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 368.344178][T12249] chnl_net:caif_netlink_parms(): no params data found [ 368.586749][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.612911][T12315] netlink: 'syz.2.1503': attribute type 25 has an invalid length. [ 369.118356][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 369.164953][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.184418][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.210179][T12220] bridge_slave_0: entered allmulticast mode [ 369.230604][T12220] bridge_slave_0: entered promiscuous mode [ 369.348724][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.385504][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.415516][T12220] bridge_slave_1: entered allmulticast mode [ 369.430336][T12220] bridge_slave_1: entered promiscuous mode [ 369.812530][T12249] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.837643][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.863307][T12249] bridge_slave_0: entered allmulticast mode [ 369.872572][T12249] bridge_slave_0: entered promiscuous mode [ 369.905292][T12220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.949127][T12249] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.956628][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.971074][T12249] bridge_slave_1: entered allmulticast mode [ 369.981739][T12249] bridge_slave_1: entered promiscuous mode [ 370.075829][T11990] veth0_vlan: entered promiscuous mode [ 370.109613][T12220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.283979][T12249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.373706][ T12] bridge_slave_1: left allmulticast mode [ 370.387301][ T12] bridge_slave_1: left promiscuous mode [ 370.395243][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.475898][ T12] bridge_slave_0: left allmulticast mode [ 370.493688][ T12] bridge_slave_0: left promiscuous mode [ 370.502488][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.316623][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.328138][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1512'. [ 372.417770][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.454284][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.486078][ T12] bond0 (unregistering): Released all slaves [ 372.524274][T12249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.709708][ T37] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 373.013090][T12220] team0: Port device team_slave_0 added [ 373.566238][T12249] team0: Port device team_slave_0 added [ 373.591843][T12220] team0: Port device team_slave_1 added [ 373.608431][T12371] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 373.628929][T11990] veth1_vlan: entered promiscuous mode [ 373.649459][T12249] team0: Port device team_slave_1 added [ 373.657927][T12370] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 373.738151][T12371] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1516'. [ 374.388992][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.409138][T12220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.425387][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.461903][T12220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.568658][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 374.638171][T12220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.662891][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.725818][T12220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.763491][T12249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.783139][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.855562][T12249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.933057][T12249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.977595][T12249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.040828][T12249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.078612][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.253400][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 375.377385][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.429449][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 270 seconds [ 375.901762][ T12] hsr_slave_0: left promiscuous mode [ 375.956965][ T12] hsr_slave_1: left promiscuous mode [ 375.969598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.981330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.035905][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.054199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.123480][ T12] veth1_macvtap: left promiscuous mode [ 376.132615][ T12] veth0_macvtap: left promiscuous mode [ 376.142499][ T12] veth1_vlan: left promiscuous mode [ 376.153004][ T12] veth0_vlan: left promiscuous mode [ 376.448953][T12400] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1525'. [ 377.811258][ T12] team0 (unregistering): Port device team_slave_1 removed [ 377.943618][ T12] team0 (unregistering): Port device team_slave_0 removed [ 379.464346][T12220] hsr_slave_0: entered promiscuous mode [ 379.497631][T12220] hsr_slave_1: entered promiscuous mode [ 379.504299][T12220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.517467][T12220] Cannot create hsr debugfs directory [ 379.523483][T12398] netlink: 'syz.2.1525': attribute type 29 has an invalid length. [ 379.548568][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 379.650901][T12249] hsr_slave_0: entered promiscuous mode [ 379.661465][T12249] hsr_slave_1: entered promiscuous mode [ 379.683666][T12249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.700637][T12249] Cannot create hsr debugfs directory [ 380.024751][T11990] veth0_macvtap: entered promiscuous mode [ 380.153360][T11990] veth1_macvtap: entered promiscuous mode [ 380.418364][T11990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.532954][T11990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.618118][T11990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.626921][T11990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.642243][T11990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.652830][T11990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.732546][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.917322][ T6094] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 381.288287][T12249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 381.323440][T12249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 381.513899][T12249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 381.603699][T12249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.856745][ T6094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.083429][ T6094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.614698][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.624745][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.644738][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.655158][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.669767][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.843308][ T6094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.890098][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.071309][ T6094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.109657][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.422888][T12220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.525360][T12249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.574153][T12220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.634046][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.709741][T12220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.764966][T12220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.900732][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.935574][T12249] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.961640][ T6094] bridge_slave_1: left allmulticast mode [ 383.973877][ T6094] bridge_slave_1: left promiscuous mode [ 383.980783][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.021964][ T6094] bridge_slave_0: left allmulticast mode [ 384.031968][ T6094] bridge_slave_0: left promiscuous mode [ 384.040595][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.707577][ T5838] Bluetooth: hci1: command tx timeout [ 386.788024][ T5838] Bluetooth: hci1: command tx timeout [ 388.868423][ T5838] Bluetooth: hci1: command tx timeout [ 390.147484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.947663][ T5838] Bluetooth: hci1: command tx timeout [ 397.446143][T12410] Bluetooth: MGMT ver 1.23 [ 401.891940][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.962070][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.015419][ T6094] bond0 (unregistering): Released all slaves [ 402.098214][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.119030][T12409] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 402.161650][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.168982][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.184262][T12409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 402.257370][T12409] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 402.319953][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.327284][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.420505][ T356] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.588892][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.757657][ T356] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.908251][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.155435][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.169284][T12425] netlink: 'syz.2.1533': attribute type 4 has an invalid length. [ 403.247525][T12425] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1533'. [ 403.311940][T12220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.357833][T12425] netlink: 'syz.2.1533': attribute type 21 has an invalid length. [ 403.451665][T12425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'. [ 403.678277][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.849929][ T6094] hsr_slave_0: left promiscuous mode [ 403.864579][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 404.043407][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 404.105386][ T6094] hsr_slave_1: left promiscuous mode [ 404.129694][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.166094][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.214271][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.243349][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.384588][ T6094] veth1_macvtap: left promiscuous mode [ 404.409731][ T6094] veth0_macvtap: left promiscuous mode [ 404.420176][ T6094] veth1_vlan: left promiscuous mode [ 404.425863][ T6094] veth0_vlan: left promiscuous mode [ 405.511019][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 300 seconds [ 405.956305][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 406.074309][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 407.514985][T12220] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.608570][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.649418][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.656669][ T8660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.672677][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.679975][ T8660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.717919][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.792944][T12249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.908508][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.973139][T12405] chnl_net:caif_netlink_parms(): no params data found [ 408.084588][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.124253][T12442] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 408.152943][T12442] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1537'. [ 408.984951][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1538'. [ 409.177401][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.447968][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.037580][T12405] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.044884][T12405] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.153461][T12405] bridge_slave_0: entered allmulticast mode [ 410.219718][T12405] bridge_slave_0: entered promiscuous mode [ 410.264815][ T37] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.429841][T12405] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.527556][T12405] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.563811][T12405] bridge_slave_1: entered allmulticast mode [ 410.730796][T12405] bridge_slave_1: entered promiscuous mode [ 411.174722][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.185012][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.193981][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.202308][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.223365][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.457406][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.708164][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 411.861733][T12405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.935898][T12405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.098544][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.150404][T12405] team0: Port device team_slave_0 added [ 412.233530][T12405] team0: Port device team_slave_1 added [ 412.690902][T12249] veth0_vlan: entered promiscuous mode [ 412.697496][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.775403][T12405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.820417][T12405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.909379][T12405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.030320][T12405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.057394][T12405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.147709][T12405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.248561][T12516] netlink: 'syz.0.1550': attribute type 4 has an invalid length. [ 413.275666][ T5851] Bluetooth: hci0: command tx timeout [ 413.286795][T12516] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1550'. [ 413.321009][T12518] netlink: 'syz.0.1550': attribute type 4 has an invalid length. [ 413.338342][T12518] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1550'. [ 413.796852][T12249] veth1_vlan: entered promiscuous mode [ 413.910159][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.477083][T12405] hsr_slave_0: entered promiscuous mode [ 414.484180][T12405] hsr_slave_1: entered promiscuous mode [ 414.528325][T12405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.535966][T12405] Cannot create hsr debugfs directory [ 415.295020][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.305707][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.316088][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.327557][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.335468][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.350130][ T5838] Bluetooth: hci0: command tx timeout [ 415.520295][T12531] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1553'. [ 415.577412][ T2954] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 417.427534][ T5851] Bluetooth: hci0: command tx timeout [ 417.435991][ T5838] Bluetooth: hci4: command tx timeout [ 418.828564][T12619] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 418.848007][T12619] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1561'. [ 419.507845][ T5851] Bluetooth: hci0: command tx timeout [ 419.513374][ T5838] Bluetooth: hci4: command tx timeout [ 419.557344][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.678551][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.823922][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.995758][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 420.021218][T12629] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 420.062436][T12629] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 420.112952][T12629] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 420.121447][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.143180][T12629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1564'. [ 420.358409][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 420.474239][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 421.587532][ T5838] Bluetooth: hci4: command tx timeout [ 421.832204][T12646] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 421.876030][T12646] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1570'. [ 421.915394][T12646] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 422.482580][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 422.597475][ T6094] bridge_slave_1: left allmulticast mode [ 422.607502][ T6094] bridge_slave_1: left promiscuous mode [ 422.635966][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.727655][ T6094] bridge_slave_0: left allmulticast mode [ 422.764043][ T6094] bridge_slave_0: left promiscuous mode [ 422.775466][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.667510][ T5838] Bluetooth: hci4: command tx timeout [ 424.594007][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.635682][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.658402][ T6094] bond0 (unregistering): Released all slaves [ 424.701938][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'. [ 424.967475][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.127706][T12494] chnl_net:caif_netlink_parms(): no params data found [ 425.198346][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.515587][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 425.973221][T12700] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1584'. [ 426.025847][T12701] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 426.043190][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.091096][T12701] netlink: 'syz.2.1583': attribute type 2 has an invalid length. [ 426.228974][T12699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1583'. [ 426.261706][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.454092][ T6094] hsr_slave_0: left promiscuous mode [ 426.463304][ T6094] hsr_slave_1: left promiscuous mode [ 426.503079][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.556460][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.396196][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 427.554973][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 428.748638][T12541] chnl_net:caif_netlink_parms(): no params data found [ 428.827797][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.116142][T12494] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.154350][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.174794][T12494] bridge_slave_0: entered allmulticast mode [ 429.225044][T12494] bridge_slave_0: entered promiscuous mode [ 429.242601][ T8660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.421002][T12494] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.451170][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.482964][T12494] bridge_slave_1: entered allmulticast mode [ 429.507738][T12494] bridge_slave_1: entered promiscuous mode [ 429.964846][T12494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.049742][T12494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.636387][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.654301][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.674969][T12541] bridge_slave_0: entered allmulticast mode [ 430.700718][T12541] bridge_slave_0: entered promiscuous mode [ 430.725972][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.750762][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.765584][T12541] bridge_slave_1: entered allmulticast mode [ 430.780357][T12541] bridge_slave_1: entered promiscuous mode [ 430.891142][T12405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.123311][T12494] team0: Port device team_slave_0 added [ 431.163815][T12494] team0: Port device team_slave_1 added [ 431.176552][T12738] ipt_REJECT: ECHOREPLY no longer supported. [ 431.242646][T12405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.294677][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.449686][ T8664] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 431.484551][T12739] ipip0: entered promiscuous mode [ 431.505438][T12405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.546596][T12405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.570831][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.671006][T12494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.682970][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.718514][T12494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.904073][T12541] team0: Port device team_slave_0 added [ 431.933121][T12494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.962660][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.006745][T12494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.042443][ T2963] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.090324][T12541] team0: Port device team_slave_1 added [ 432.311343][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 432.723502][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.757388][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.857254][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.986030][T12494] hsr_slave_0: entered promiscuous mode [ 433.048501][T12494] hsr_slave_1: entered promiscuous mode [ 433.054968][T12494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.152813][T12494] Cannot create hsr debugfs directory [ 433.516485][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.535690][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.575481][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.308941][ T31] INFO: task udevd:5892 blocked for more than 143 seconds. [ 434.327224][ T31] Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 [ 434.345066][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.355803][ T31] task:udevd state:D stack:22184 pid:5892 tgid:5892 ppid:1 task_flags:0x400140 flags:0x00004006 [ 434.385625][ T31] Call Trace: [ 434.393808][ T31] [ 434.405038][ T31] __schedule+0x16e2/0x4cd0 [ 434.497543][ T31] ? schedule+0x165/0x360 [ 434.527238][ T31] ? __lock_acquire+0xaac/0xd20 [ 434.554470][ T31] ? __pfx___schedule+0x10/0x10 [ 434.625180][ T31] ? schedule+0x91/0x360 [ 434.662654][ T31] schedule+0x165/0x360 [ 434.666917][ T31] io_schedule+0x81/0xe0 [ 434.701347][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 434.706871][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 434.721438][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 434.728783][ T31] ? __filemap_get_folio+0x6a0/0xaf0 [ 434.734125][ T31] ? do_read_cache_folio+0x4ed/0x590 [ 434.743557][ T31] do_read_cache_folio+0x1ae/0x590 [ 434.750407][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 434.755971][ T31] read_part_sector+0xb6/0x270 [ 434.764864][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 434.772018][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 434.781765][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 434.793412][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 434.802816][ T31] bdev_disk_changed+0x75c/0x14b0 [ 434.809613][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 434.815114][ T31] ? wait_on_inode+0xc0/0x230 [ 434.824204][ T31] blkdev_get_whole+0x380/0x510 [ 434.830785][ T31] bdev_open+0x31e/0xd30 [ 434.835112][ T31] blkdev_open+0x3a8/0x510 [ 434.843617][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 434.850198][ T31] do_dentry_open+0xdf0/0x1970 [ 434.855035][ T31] vfs_open+0x3b/0x340 [ 434.863100][ T31] ? path_openat+0x2ecd/0x3830 [ 434.870081][ T31] path_openat+0x2ee5/0x3830 [ 434.874705][ T31] ? arch_stack_walk+0xfc/0x150 [ 434.883643][ T31] ? __pfx_path_openat+0x10/0x10 [ 434.890149][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.896310][ T31] do_filp_open+0x1fa/0x410 [ 434.907324][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 434.912430][ T31] ? _raw_spin_unlock+0x28/0x50 [ 434.922270][ T31] ? alloc_fd+0x64c/0x6c0 [ 434.926669][ T31] do_sys_openat2+0x121/0x1c0 [ 434.931519][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.936769][ T31] __x64_sys_openat+0x138/0x170 [ 434.949013][ T31] do_syscall_64+0xf6/0x210 [ 434.953611][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.964827][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.970498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.976451][ T31] RIP: 0033:0x7f65aaea7407 [ 434.985985][ T31] RSP: 002b:00007ffe0d543b30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 434.995425][ T31] RAX: ffffffffffffffda RBX: 00007f65ab694880 RCX: 00007f65aaea7407 [ 435.013395][ T31] RDX: 00000000000a0800 RSI: 000055704c3f9280 RDI: ffffffffffffff9c [ 435.024911][ T31] RBP: 000055704c3b3910 R08: 0000000000000000 R09: 0000000000000000 [ 435.036313][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055704c3d8b00 [ 435.057349][ T31] R13: 000055704c3cb3e0 R14: 0000000000000000 R15: 000055704c3d8b00 [ 435.065411][ T31] [ 435.092994][ T31] [ 435.092994][ T31] Showing all locks held in the system: [ 435.103098][ T31] 1 lock held by khungtaskd/31: [ 435.116352][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 435.162263][ T31] 3 locks held by kworker/u8:5/356: [ 435.170906][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.185149][ T31] #1: ffffc90003107c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.206202][ T31] #2: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 435.215509][ T31] 3 locks held by kworker/u8:7/2954: [ 435.226592][ T31] #0: ffff88814cd19948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.244468][ T31] #1: ffffc9000b987c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.264441][ T31] #2: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 435.286409][ T31] 2 locks held by getty/5594: [ 435.291255][ T31] #0: ffff88814d05a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.306696][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 435.322803][ T31] 1 lock held by udevd/5892: [ 435.327595][ T31] #0: ffff888025072358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 435.337040][ T31] 5 locks held by kworker/1:3/5893: [ 435.347743][ T31] 6 locks held by kworker/u8:12/6094: [ 435.353151][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.371022][ T31] #1: ffffc90005007c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.384903][ T31] #2: ffffffff8f2ea8d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 435.402310][ T31] #3: ffff88806910e0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 435.413409][ T31] #4: ffff88806910a250 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 435.446804][ T31] #5: ffffffff8df43680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 435.462959][ T31] 1 lock held by syz-executor/12405: [ 435.468457][ T31] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 435.478461][ T31] 2 locks held by syz-executor/12494: [ 435.483878][ T31] #0: ffffffff8f80fb10 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 435.501272][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 435.524467][ T31] 3 locks held by syz-executor/12541: [ 435.529990][ T31] #0: ffffffff8ea90ce0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 435.545194][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 435.554527][ T31] #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 435.575545][ T31] 3 locks held by kworker/0:41/12587: [ 435.582316][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 435.595419][ T97] block nbd0: Possible stuck request ffff8880250c0000: control (read@0,4096B). Runtime 330 seconds [ 435.617254][ T31] #1: ffffc90003a8fc60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 435.638092][ T31] #2: ffffffff8df43680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 435.652502][ T31] 2 locks held by syz.2.1585/12711: [ 435.659553][ T31] #0: ffffffff8f2ea8d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 435.674225][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: ip6mr_net_exit_batch+0x20/0x90 [ 435.685566][ T31] 2 locks held by syz.0.1600/12761: [ 435.694663][ T31] #0: ffffffff8f7f3eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 435.705997][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 435.723700][ T31] [ 435.726089][ T31] ============================================= [ 435.726089][ T31] [ 435.745062][ T31] NMI backtrace for cpu 0 [ 435.745164][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 435.745208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.745230][ T31] Call Trace: [ 435.745243][ T31] [ 435.745260][ T31] dump_stack_lvl+0x189/0x250 [ 435.745303][ T31] ? __wake_up_klogd+0xd9/0x110 [ 435.745335][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.745368][ T31] ? __pfx__printk+0x10/0x10 [ 435.745405][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 435.745436][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 435.745456][ T31] ? _printk+0xcf/0x120 [ 435.745483][ T31] ? __pfx__printk+0x10/0x10 [ 435.745507][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 435.745536][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 435.745563][ T31] watchdog+0xfee/0x1030 [ 435.745596][ T31] ? watchdog+0x1de/0x1030 [ 435.745635][ T31] kthread+0x711/0x8a0 [ 435.745680][ T31] ? __pfx_watchdog+0x10/0x10 [ 435.745705][ T31] ? __pfx_kthread+0x10/0x10 [ 435.745732][ T31] ? __pfx_kthread+0x10/0x10 [ 435.745757][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.745781][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.745808][ T31] ? __pfx_kthread+0x10/0x10 [ 435.745832][ T31] ret_from_fork+0x4b/0x80 [ 435.745854][ T31] ? __pfx_kthread+0x10/0x10 [ 435.745879][ T31] ret_from_fork_asm+0x1a/0x30 [ 435.745916][ T31] [ 435.745923][ T31] Sending NMI from CPU 0 to CPUs 1: [ 435.894600][ C1] NMI backtrace for cpu 1 [ 435.894621][ C1] CPU: 1 UID: 0 PID: 5893 Comm: kworker/1:3 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 435.894645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.894660][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 435.894696][ C1] RIP: 0010:validate_chain+0x2b6/0x2140 [ 435.894724][ C1] Code: 03 89 c3 e8 dc 9a ff ff 85 db 0f 85 56 02 00 00 83 3d 9d a4 e0 0d 00 0f 84 a2 17 00 00 b8 01 00 00 00 65 48 8b 0d 5a 07 d7 10 <48> 3b 8c 24 d8 00 00 00 0f 85 43 1c 00 00 48 81 c4 e0 00 00 00 5b [ 435.894740][ C1] RSP: 0018:ffffc90000a07d40 EFLAGS: 00000002 [ 435.894755][ C1] RAX: 0000000000000001 RBX: 0000000000000007 RCX: 6c28e1c52b6be700 [ 435.894768][ C1] RDX: 0000000000000000 RSI: ffff88802f93aa08 RDI: ffff88802f939e00 [ 435.894780][ C1] RBP: ffff88802f93a8f0 R08: 0000000000000000 R09: 0000000000000000 [ 435.894797][ C1] R10: 0000000000000000 R11: ffffffff8171ca05 R12: 00000000ea55169a [ 435.894815][ C1] R13: de82e5593b7e50ca R14: 000000002ae12dae R15: de82e5593b7e50ca [ 435.894829][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 435.894843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.894855][ C1] CR2: 00002000000001c0 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 435.894872][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.894882][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.894894][ C1] Call Trace: [ 435.894901][ C1] [ 435.894913][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.894941][ C1] ? __lock_acquire+0xaac/0xd20 [ 435.894968][ C1] ? __lock_acquire+0xaac/0xd20 [ 435.894997][ C1] __lock_acquire+0xaac/0xd20 [ 435.895024][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895045][ C1] lock_acquire+0x120/0x360 [ 435.895070][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895097][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895117][ C1] ? canfd_rcv+0x145/0x270 [ 435.895140][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895161][ C1] unwind_next_frame+0xc2/0x2390 [ 435.895182][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895206][ C1] ? unwind_next_frame+0xa5/0x2390 [ 435.895228][ C1] ? can_receive+0x312/0x450 [ 435.895249][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 435.895272][ C1] arch_stack_walk+0x11c/0x150 [ 435.895299][ C1] ? canfd_rcv+0x145/0x270 [ 435.895320][ C1] stack_trace_save+0x9c/0xe0 [ 435.895338][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 435.895360][ C1] ? kasan_save_track+0x4f/0x80 [ 435.895384][ C1] kasan_save_track+0x3e/0x80 [ 435.895403][ C1] ? kasan_save_track+0x3e/0x80 [ 435.895421][ C1] ? kasan_save_free_info+0x46/0x50 [ 435.895437][ C1] ? __kasan_slab_free+0x62/0x70 [ 435.895456][ C1] ? kmem_cache_free+0x192/0x3f0 [ 435.895480][ C1] ? vxcan_xmit+0x210/0x780 [ 435.895504][ C1] ? dev_hard_start_xmit+0x302/0x880 [ 435.895530][ C1] ? __dev_queue_xmit+0x1adf/0x3a70 [ 435.895556][ C1] ? can_send+0x905/0xd00 [ 435.895573][ C1] ? can_can_gw_rcv+0xc45/0xf20 [ 435.895598][ C1] ? can_rcv_filter+0x123/0x7d0 [ 435.895616][ C1] ? can_receive+0x312/0x450 [ 435.895634][ C1] ? canfd_rcv+0x145/0x270 [ 435.895675][ C1] ? vxcan_xmit+0x210/0x780 [ 435.895696][ C1] kasan_save_free_info+0x46/0x50 [ 435.895711][ C1] __kasan_slab_free+0x62/0x70 [ 435.895733][ C1] kmem_cache_free+0x192/0x3f0 [ 435.895758][ C1] vxcan_xmit+0x210/0x780 [ 435.895785][ C1] ? vxcan_xmit+0x49/0x780 [ 435.895814][ C1] dev_hard_start_xmit+0x302/0x880 [ 435.895848][ C1] __dev_queue_xmit+0x1adf/0x3a70 [ 435.895880][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 435.895920][ C1] ? stack_depot_save_flags+0x40/0x910 [ 435.895942][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 435.895964][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 435.895989][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 435.896008][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 435.896029][ C1] ? skb_clone+0x212/0x3a0 [ 435.896054][ C1] ? can_can_gw_rcv+0x455/0xf20 [ 435.896097][ C1] ? can_rcv_filter+0x123/0x7d0 [ 435.896115][ C1] ? can_receive+0x312/0x450 [ 435.896133][ C1] ? canfd_rcv+0x145/0x270 [ 435.896164][ C1] ? __netif_receive_skb+0x161/0x380 [ 435.896180][ C1] ? process_backlog+0x60e/0x14f0 [ 435.896199][ C1] ? __napi_poll+0xc4/0x480 [ 435.896214][ C1] ? net_rx_action+0x6ea/0xdf0 [ 435.896231][ C1] ? handle_softirqs+0x283/0x870 [ 435.896247][ C1] ? do_softirq+0xec/0x180 [ 435.896279][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 435.896294][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 435.896313][ C1] ? process_scheduled_works+0xade/0x17a0 [ 435.896329][ C1] ? worker_thread+0x8a0/0xda0 [ 435.896345][ C1] ? kthread+0x711/0x8a0 [ 435.896365][ C1] ? ret_from_fork+0x4b/0x80 [ 435.896384][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 435.896414][ C1] ? __copy_skb_header+0xa7/0x550 [ 435.896440][ C1] can_send+0x905/0xd00 [ 435.896458][ C1] ? __skb_clone+0x63/0x7a0 [ 435.896486][ C1] ? __pfx_can_send+0x10/0x10 [ 435.896506][ C1] ? skb_clone+0x246/0x3a0 [ 435.896531][ C1] ? can_can_gw_rcv+0x448/0xf20 [ 435.896558][ C1] can_can_gw_rcv+0xc45/0xf20 [ 435.896588][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 435.896613][ C1] can_rcv_filter+0x123/0x7d0 [ 435.896633][ C1] ? can_receive+0x1a9/0x450 [ 435.896652][ C1] can_receive+0x312/0x450 [ 435.896674][ C1] canfd_rcv+0x145/0x270 [ 435.896693][ C1] ? __pfx_canfd_rcv+0x10/0x10 [ 435.896711][ C1] __netif_receive_skb+0x161/0x380 [ 435.896732][ C1] ? process_backlog+0x2d5/0x14f0 [ 435.896760][ C1] process_backlog+0x60e/0x14f0 [ 435.896787][ C1] ? __pfx_process_backlog+0x10/0x10 [ 435.896815][ C1] ? __lock_acquire+0xaac/0xd20 [ 435.896843][ C1] __napi_poll+0xc4/0x480 [ 435.896868][ C1] ? net_rx_action+0x447/0xdf0 [ 435.896889][ C1] net_rx_action+0x6ea/0xdf0 [ 435.896917][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 435.896955][ C1] handle_softirqs+0x283/0x870 [ 435.896974][ C1] ? do_softirq+0xec/0x180 [ 435.896993][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 435.897012][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 435.897033][ C1] do_softirq+0xec/0x180 [ 435.897048][ C1] [ 435.897054][ C1] [ 435.897061][ C1] ? __pfx_do_softirq+0x10/0x10 [ 435.897082][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 435.897106][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.897138][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 435.897166][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 435.897183][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 435.897200][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 435.897221][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 435.897242][ C1] neigh_periodic_work+0xb41/0xd60 [ 435.897266][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 435.897284][ C1] process_scheduled_works+0xade/0x17a0 [ 435.897328][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 435.897389][ C1] worker_thread+0x8a0/0xda0 [ 435.897407][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 435.897432][ C1] ? __kthread_parkme+0x7b/0x200 [ 435.897455][ C1] kthread+0x711/0x8a0 [ 435.897478][ C1] ? __pfx_worker_thread+0x10/0x10 [ 435.897495][ C1] ? __pfx_kthread+0x10/0x10 [ 435.897517][ C1] ? __pfx_kthread+0x10/0x10 [ 435.897537][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.897556][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.897578][ C1] ? __pfx_kthread+0x10/0x10 [ 435.897598][ C1] ret_from_fork+0x4b/0x80 [ 435.897616][ C1] ? __pfx_kthread+0x10/0x10 [ 435.897637][ C1] ret_from_fork_asm+0x1a/0x30 [ 435.897662][ C1] [ 436.662065][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 436.669116][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 436.680982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.691158][ T31] Call Trace: [ 436.694468][ T31] [ 436.697426][ T31] dump_stack_lvl+0x99/0x250 [ 436.702074][ T31] ? __asan_memcpy+0x40/0x70 [ 436.706703][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.711935][ T31] ? __pfx__printk+0x10/0x10 [ 436.716569][ T31] panic+0x2db/0x790 [ 436.720507][ T31] ? __pfx_panic+0x10/0x10 [ 436.724974][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 436.730377][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 436.735785][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 436.741977][ T31] watchdog+0x102d/0x1030 [ 436.746347][ T31] ? watchdog+0x1de/0x1030 [ 436.750806][ T31] kthread+0x711/0x8a0 [ 436.754931][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.759645][ T31] ? __pfx_kthread+0x10/0x10 [ 436.764275][ T31] ? __pfx_kthread+0x10/0x10 [ 436.768899][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 436.774129][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.779368][ T31] ? __pfx_kthread+0x10/0x10 [ 436.784079][ T31] ret_from_fork+0x4b/0x80 [ 436.788525][ T31] ? __pfx_kthread+0x10/0x10 [ 436.793233][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.798067][ T31] [ 436.801605][ T31] Kernel Offset: disabled [ 436.805995][ T31] Rebooting in 86400 seconds..