last executing test programs: 4.290119557s ago: executing program 1 (id=3819): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000fb0100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095e3fe0ea3d44ce637401229a91e872b418258f11eeccbcd4729f1c8a1a5ce08d52e92d61d1a8251af5b05e71a33c2ee05f7d2d4e63ae10a5d662854ccf2b06df3850632fd83665f488aebb8dacde0b1583739ad47d2f2fd3cdd2e7bf674184bd8d2147a1eb0e76fe829e2a9ddbaf9aaa7"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="210f5232e8e2027402267b437c73f82032c5adfc23b09121e0a8e233f667442789a1f27385755fb28a57409148767fa9a80cbbf6c9296212a8553bf06c289b17"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, 0x0, 0x0, 0x400d4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 4.058792612s ago: executing program 1 (id=3820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="020100020e00000000000000fcdbdf2505000600331000000a004e2300000006fe8000000000000000000000000000aa050000000000000005000500320000000a004e2000000008fc0000000000000000000000fcffffff00000000000000000200130041"], 0x70}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x6400, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcaf", "d0e077bf945c40399aeb88c150a72ed1", {"3b6de13637349f05f524bbde1d772edc", "6e545f1b3d4836bdea89c2b3c01c59e4"}}}}}}}}, 0x8a) 3.798389318s ago: executing program 3 (id=3825): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000140)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x1f00, 0x2e}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) socket(0x2, 0x3, 0xff) socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1800000002070101200000004fbe25575d1710d61b271035000000000a0000070400078095de482c57038b3fc8d1d1627d7d5d052c71cc26ff767617745811ee36708fa050c8564ac54565371a6b525cd7eba508ea02bba711282da77abbbd76e45bdede6567b67c1629f8915d2dd4201c942248c8b39d2a52a7a7d6930a36743814329b6c50bcd8fae6bd24a591bbf0186a1c0488bbe2b2b458911b05faca8f1e0e8a24044045643201b304"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3c, 0x1, 0x9}) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x6a, &(0x7f00000000c0)=[{&(0x7f0000000400)="81c2", 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x60, &(0x7f0000000100)=ANY=[], 0x40}, 0x2404c800) 3.511061491s ago: executing program 1 (id=3826): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="86d1f922b5f15cb5763b5f1ae6199fc4876df8d796933cc56a6952c48620573c2e6410ef", @ANYRESHEX=r1], 0xfc}, 0x1, 0x0, 0x0, 0x2404c040}, 0x20048010) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4084) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x5, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x9, 0x40000, {{0xd, 0x4, 0x0, 0x12, 0x34, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x1c, 0x88, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x4}, {@private=0xa010102, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x7, 0x80, 0x6b2, 0x6, {{0x18, 0x4, 0x3, 0x21, 0x60, 0x68, 0x0, 0x40, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x24, 0x70, 0x1, 0x0, [{@remote, 0x5}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb385}, {@multicast1, 0x2}]}, @end, @generic={0x44, 0x6, "e5a543cd"}, @generic={0x82, 0xe, "dc05b972035320fe20965f4b"}, @timestamp={0x44, 0x10, 0xc, 0x0, 0x2, [0x9, 0x2, 0x108d]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r14, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x0, 0x1b, @multicast1}]}}]}, 0x3c}}, 0x2000c800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r14, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x0, 0x1b, @multicast1}]}}]}, 0x3c}}, 0x2000c800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x5, 0x4, {{0x22, 0x4, 0x0, 0x32, 0x88, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0x2b, 0x63, [@rand_addr=0x64010102, @broadcast, @remote, @multicast1, @remote, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0xd, "13a7d421e6d58cdb08aef3"}, @ssrr={0x89, 0x1f, 0xf6, [@multicast2, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @broadcast, @multicast2]}, @rr={0x7, 0x1b, 0x56, [@multicast2, @remote, @loopback, @empty, @local, @rand_addr=0x64010100]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x5, 0x4, {{0x22, 0x4, 0x0, 0x32, 0x88, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0x2b, 0x63, [@rand_addr=0x64010102, @broadcast, @remote, @multicast1, @remote, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0xd, "13a7d421e6d58cdb08aef3"}, @ssrr={0x89, 0x1f, 0xf6, [@multicast2, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @broadcast, @multicast2]}, @rr={0x7, 0x1b, 0x56, [@multicast2, @remote, @loopback, @empty, @local, @rand_addr=0x64010100]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2c8, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbb}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7529}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x35}}, {0x8}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x84}, 0x84) 3.51076595s ago: executing program 4 (id=3827): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x3ff) (async) r3 = epoll_create(0x3ff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000001480)={0x4000000a}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000001480)={0x4000000a}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10}) setsockopt$inet_opts(r1, 0x0, 0x14, &(0x7f0000000200)="c2", 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8008a}], 0x1, 0x40000002, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8008a}], 0x1, 0x40000002, 0x0) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) 3.046362746s ago: executing program 1 (id=3829): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 2.907272803s ago: executing program 3 (id=3830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x4, @empty, 0x4c5}, @in6={0xa, 0x4e22, 0xb65d, @loopback, 0x8}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff7}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0xa4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0x10}, {0xffff, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x9}]}, 0xaa}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 2.56310336s ago: executing program 4 (id=3834): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x8, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@gettaction={0x30, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x55, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xf}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {0x7, 0xfff1}, {0xb, 0x3}}, ["", ""]}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000480)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cc7a0000020103000000000000000000020000047d6d00000000000008000100e0000002080002000a0101000c0002800500010088000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000001740)=ANY=[@ANYBLOB="401a7894e0f6a24c2c4c443200", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b0000e0ffff0600110000080000"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f00000001c0)=0x10, 0x80000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000204000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 2.540408968s ago: executing program 3 (id=3835): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x806, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x10004040) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) 2.355854444s ago: executing program 2 (id=3836): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet6(0xa, 0x80000, 0x3825) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)="577802e0d94fe180752041748d6e9806", 0x10}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f00000007c0)=ANY=[], 0xc0}, 0x800) 2.303372348s ago: executing program 0 (id=3837): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d53", 0x2e, 0x840, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 2.204542065s ago: executing program 0 (id=3838): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x1000, 0x5, 0x6}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x735, 0x4, 0x8, 0x84, 0xffff, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="3c02010700000001000000000000004225eb4b9e21184f42"], 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=r2, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x12284ee2ce82c448) 2.177657006s ago: executing program 3 (id=3839): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75620a29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd9af61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44b80cd7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541c86e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78dc1452}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x8891) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000680000000020000a000000b5adee1c0000040004c73d000100020000000000000000"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'nicvf0\x00'}) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r6) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delchain={0x68, 0x65, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {0xb, 0xffff}, {0x17, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x97}}, @TCA_CHAIN={0x8, 0xb, 0x130}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75620a29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd9af61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44b80cd7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x541c86e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78dc1452}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x8891) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x48}}, 0x3000c000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000680000000020000a000000b5adee1c0000040004c73d000100020000000000000000"], 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @private}, &(0x7f0000000040)=0xc) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'nicvf0\x00'}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) close(r6) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@delchain={0x68, 0x65, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {0xb, 0xffff}, {0x17, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x97}}, @TCA_CHAIN={0x8, 0xb, 0x130}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) 2.058341892s ago: executing program 4 (id=3840): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000b40)=@bloom_filter={0x1e, 0xfffffc00, 0x8000, 0x0, 0x30, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r9}, 0x38) 2.057999948s ago: executing program 0 (id=3841): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0", 0x89}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ffffffff0000"], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000300)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) (async) socket$igmp(0x2, 0x3, 0x2) recvmsg(r7, 0x0, 0x0) (async) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935", 0x8d}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) (async) r8 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) (async, rerun: 32) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) (rerun: 64) 1.96675932s ago: executing program 1 (id=3842): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2100}, {r0, 0x2048}, {r1, 0x202}, {r0, 0xa}, {r0, 0x400}, {r0, 0x10}, {r0, 0x10}, {0xffffffffffffffff, 0x2010}], 0x8, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2]}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x75, 0xe}, @const]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000640)=""/48, 0x54, 0x30, 0x0, 0x78ac}, 0x28) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x2, 0x8001, 0x3, 0x6c800, r9, 0x7, '\x00', r7, r10, 0x1, 0x1, 0x1, 0x0, @value=r11}, 0x50) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000900)={{r6}, r8, 0x14, @inherit={0x58, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x1, {0x1, 0xee4, 0x7db8, 0x10, 0x6}, [0x2, 0x7]}}, @name="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"}) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6300ffdf", @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008006d616373656330000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.886282205s ago: executing program 3 (id=3843): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/61, 0x3d}, {&(0x7f00000008c0)=""/152, 0x98}], 0x5, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000780)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/240, 0xf0}], 0x1, &(0x7f0000000cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d00)=""/142, 0x8e}, {&(0x7f0000000dc0)=""/83, 0x53}, {&(0x7f0000000e40)=""/149, 0x95}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/33, 0x21}], 0x5, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x4, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x28, 0x5, 0x0) unshare(0xc010400) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, 0x0, 0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0xfc, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xec, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3"]}]}, 0xfc}, {0x0}], 0x2}, 0x84) 1.594897106s ago: executing program 0 (id=3844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$isdn(0x22, 0x3, 0x2) read(r1, &(0x7f0000000380)=""/46, 0x2e) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.230542265s ago: executing program 0 (id=3845): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000700)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000300)={0x2c, 0x8, r5, 0x17, r2}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f0000000080)={{0x8, @rand_addr, 0x0, 0x0, 'wrr\x00'}, {@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000018000000ffdbdf2502180000ff0000080000000208000400", @ANYRES32=r5, @ANYBLOB="08001e00ffffffff"], 0x2c}}, 0x8090) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x13, 0x1, 0xc, [{@remote, 0x7}, {@local, 0x9}, {@private=0xa010102, 0x9}]}]}}}], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r10, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9a77}, 0x50) r12 = socket$inet6(0xa, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000c40)=ANY=[@ANYBLOB="900400003e00000129bd7000fcdbdf2500000000fb002100c3eee930ac26bfa165ffbf5f2a67a926a9a0b5df1219773ee8e8a60cd4922809dbc240c1b17884eb51d5cebec21acbef4aa495abac7bce6b3eeefbe0815ff343b924914b8604a1d741ee1eddb6c3805fa5d41ea7e1b9109cb067fa86865fc14e5ad1e0f717591ccda477140e7760b9af5e42d26e39dd536859acfd52d4d82402affb89896aae6377fa6587dd755aa5a290f022b8d72972bf022e6f6e35829ad272230fb34dd225e7a76c9ce5f64f689627367981bd5e6aa92abf69ea6e99136ccbd7339687418359160e1ceef7206f0288e417b47812420ec2880a031825d01903863a0a171376fd0a1af378036ba7e971ccb23b8a20110083b5e25abe4cdc3ea8dcf83388a1d5730cc78fe28bc250c669d3dd3a33388110055e38e387466e53883baa5d931be69601f56fdcaf1451c9f93d814807300f73110568648f8ebbd4b2d688b393556408ba018a77d9cf2c330e04c17c812e964eff1372c7aa22942c7fcb8d80d1ab6aefd7a000080e1da24f94ec1f5ea0a9a9f932723b49495c528b7b5ef8ea95905a508b65b33a71b320e063b11e192758ad144e78c0838d8f67f41d8ba7c0ecb47b571bf0bcbdefd2c7021b806e871e3a8f3a3e7932c27d34fccaa6d556626d85de7abe58e3420fd269c15e0f9cb2307f53602fb7340ad0e1cb8a080720be62cdc73a1e06d405a4b034a5d1fa34904fb54be8436edb7ae0b44629a3be84c4000696dbf2c0ac5c2e903a73d53db5492a5a30446a4970576aa22a5782f4a8206cfed241e9e6e55148d38edddbb0c1458bff58a468d59d8c9579f06a0636d3da7a37bf3d95a9d77eb821604d28f7a432379d99719132ce64ebe42a5440efb4f285e022607d1426d76112f9b545b11761b2819308f42562abe1786c98f39dc81ee7c518c89079763f7a4a88d413741cb1393f138a8ed5dca7b852e86d20a13d9e2c175c18122e1fad02d628fbe7d4170b9f56bb781a578a3d1c6c09b8ddc1fc8df794eb7684965559ff7aa15ee0cd1ce8567524e0c1b869780c514f31548a59f213635e27a340537b9efd2c17d30b34f3afe28aa2b9fbf418cbcd0774b64ead20f5130260629988c7b2f57bf11a4c428aeff201dc9b0400278006001900740000000400458004006c8022000d004badf1c5e8f030b3b9f5f9a07176abc56b4f74f1426338c73523450d1ccd00000c002e00030000000000000014003f00fe88000000000000000000000000000102012e000f0373f5b7655b34cbc4d1caabe3e999e3d98a9cd9762904f6f1ba5b3443dbd6bb0034364fdf4502261d4e1973f2e3611a27afa98ae0559952813cc9b92642f9e811168c5ac90fb5e119c1e630ee05e78ff4ced3b9ede9d5c3dee63712ee6bcd3d6802dfb23b8e92f1dde85f6f45c5dd9696536d884cdd5fa02abd4848d644eb6ebe0f5e4c986c85e9159dcbf63bfd24543b1b7b4c7bc79081ffba92d51f097e0e89584c738439b2b21b9353e78d583ec90142d391498982b6affe06771e7a793d2c39be2ee5fde4502ae5dcbf1b1cd6f19f48c557e0e7a221174e06b4a362789177c8d5407880abf3696b3b327ebe3b24a37d8d167ed37f646db41596520000000000"], 0x490}, 0x1, 0x0, 0x0, 0x20000000}, 0x851) syz_emit_ethernet(0x76, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_mreq(r9, 0x29, 0x0, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x23}, r13}, 0x14) 1.228209508s ago: executing program 2 (id=3846): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0xae6c, 0x7fc8}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xc0000000, 0x100000, 0x8, 0x1, 0x3, 0x3}, {0x8, 0x4, 0x0, 0x7, 0x0, 0xfffff80000000000}], ['\x00']}) r1 = socket$inet6(0xa, 0x800, 0xfffff382) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x2, 0x3, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_prespec={0x44, 0x34, 0xbc, 0x3, 0x1, [{@local, 0x4}, {@broadcast}, {@multicast1, 0x1}, {@private=0xa010100, 0x80000000}, {@remote, 0x1ff}, {@multicast2, 0xaf}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x101, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x48}}, 0x1) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000600)={r1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0xb8882, 0x0) bind$inet6(r6, &(0x7f0000000680)={0xa, 0x4e21, 0x7, @loopback, 0x2}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000007c0)=0xe8) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000800)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000940)={0x1, 0x0, 0x81, 0x8, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000980)={'dummy0\x00', 0x100}) connect$vsock_stream(r6, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r2) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x24004044) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000b40)=0x4, 0x4) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r2) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r10, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x800) tee(0xffffffffffffffff, r0, 0x1, 0xf) bind$llc(r0, &(0x7f0000000cc0)={0x1a, 0x104, 0x6, 0x7, 0x9, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) socket$netlink(0x10, 0x3, 0x8) 1.118548296s ago: executing program 3 (id=3847): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000000000000", 0x1d}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x8, 0x8, 0x8, @empty, @dev={0xfe, 0x80, '\x00', 0x42}, 0x80, 0x20, 0x401, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x100, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc, 0x3}}}]}, 0x24}}, 0xc0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000000100000240012800b0001006d616373"], 0x44}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x0}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 774.573303ms ago: executing program 2 (id=3848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x36, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0xda}}}}]}, 0x38}}, 0x0) 753.119318ms ago: executing program 0 (id=3849): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) (async) r3 = getpid() (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x38}}, 0x4000850) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2e, 0x300, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="02ac0f00"}, @typed={0x8, 0x1e, 0x0, 0x0, @pid=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a804}, 0x0) 605.724227ms ago: executing program 4 (id=3850): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x891e) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 526.384458ms ago: executing program 2 (id=3851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000e38ae7410a3185112c75e12a641024b1458473d57164dbcc4bf61d8490aed5c00ab04e53e6552b3d281094cc3c7f73a4c6ad2a680e82b21fdca3d6a87996dabff007b52435db67d15fb15ee1fa7709397a918f4dd0bd60c90683fcef029fe019239b94df6fa9e74a534358236bbc1762595d7e10bb40d9171a482a9bb16b28eba47e5b8e5bc702ff41830326eee47feaecd5908f13484ecea0", @ANYRES16=r2, @ANYBLOB="080027bd7000fedbdf250b000000080002000100000005000500ff000000240006800600010002000000080006000100000008000300ac1414bb080006000a00000008000400000100000800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x4000044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 309.7076ms ago: executing program 2 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000033c0)=ANY=[@ANYBLOB="fc100000100081020000000003000000fc0000000000000000000000000000fd2001000000000000000000000000000100000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010101000000000000000000000000000004d22b0000002001000000000000000000000000000003000000000000000400000000000000000000000000000001000080ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000a1000000000000000c1008"], 0x10fc}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000033c0)=ANY=[@ANYBLOB="fc100000100081020000000003000000fc0000000000000000000000000000fd2001000000000000000000000000000100000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010101000000000000000000000000000004d22b0000002001000000000000000000000000000003000000000000000400000000000000000000000000000001000080ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000a1000000000000000c1008"], 0x10fc}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1000) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf251400000018000180140002006e657464657673696d30000000000000050018000100000008000600990000000800100002000000080006008708000008000a00a604000005000b0001"], 0x5c}, 0x1, 0x0, 0x0, 0x24000817}, 0x80d0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="3800000005000000edff000002210200000018110000", @ANYRESDEC=r0, @ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRES8=r3], &(0x7f0000000200)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b4e}, 0x94) socket$inet6(0xa, 0x1, 0x0) (async) r8 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fd9611ae6ed127ab99164d712eb", 0xe}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2c, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r10, 0x1) recvfrom(r10, 0x0, 0x0, 0x2, 0x0, 0x0) (async) recvfrom(r10, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) 224.150237ms ago: executing program 4 (id=3853): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="1400000010000100000000005641d7c30000000a28001188bf97200000000a1d0100000000246a2463ae12a6ba80a64cd41c4600000000020000000900010073797a"], 0xfc}}, 0x200000c0) r2 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004ec6"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000002c0)={0x0, 0x8, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'vcan0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095", @ANYRESDEC=r5], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socket$key(0xf, 0x3, 0x2) 3.126215ms ago: executing program 2 (id=3854): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010625bd7000fbcb"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6, 0x0, 0x3}, 0x18) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f00000003c0)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30", &(0x7f0000000180)=""/9, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300683a69700025000400030074580900020073797a320000000005000500020000000500010006000000000000"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="0500000405140100eafffeff8e65cdd6b570bfe57ca4b571a2a3fd928bb686e70160a2036d769c49588431be7b925c66d3efab89ed2a5c1983ce739891d9690d6ff49fae55dbdd06ec597b298d0bf9f61445d17466dff962b32ff904c24fe84f832c52c199772aedd0f244721aaa8fc79b3682dabdd8c346340000000000000009f0d7329dfd1d0ce45067d8fd9d267172740808c6e4c44ba2a30ecbdf694faf7490a4799a704377b3afeb5e4569275e4cbedb00545b27ef503b45568abf1b23322b39d79db88b157ab9a84e3f1e04e1116808e2d5ab59b0f3618319441487b988dd"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) 344.318µs ago: executing program 1 (id=3855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x80, 0x5], 0x8}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x4}}, @common=@mh={{0x28}, {"9328", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x401, 0x3, 0x8d3, 'syz1\x00', 'syz1\x00', {0x9e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x69f06aa6893a4301, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'pimreg1\x00'}) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xbce}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4008088) (async) r3 = socket$netlink(0x10, 0x3, 0x13) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde96}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040840) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl0\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x8, 0x40, 0x3, 0x3, {{0x20, 0x4, 0x0, 0x13, 0x80, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, {[@end, @noop, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x6, [{@loopback, 0x9}, {@loopback, 0x1}]}, @noop, @timestamp={0x44, 0x18, 0xd3, 0x0, 0xc, [0x8, 0xfffffff7, 0xfffffff8, 0xe, 0x1]}, @lsrr={0x83, 0x7, 0x93, [@dev={0xac, 0x14, 0x14, 0x2b}]}, @rr={0x7, 0xf, 0xbb, [@loopback, @multicast2, @local]}, @lsrr={0x83, 0x17, 0x32, [@loopback, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @cipso={0x86, 0xf, 0x3, [{0x1, 0x9, "e2b0ff0c9faab2"}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000d40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd0, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x4c884) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r3) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe4, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x74, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x59}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r8, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r9, 0x0, 0xa, &(0x7f0000001000)=0x4, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r11 = socket(0xb, 0x5, 0x200) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001140), &(0x7f0000001180)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x91, 0x31}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x40) getsockopt$X25_QBITINCL(r11, 0x106, 0x1, &(0x7f0000001300), &(0x7f0000001340)=0x4) socket$netlink(0x10, 0x3, 0xc) (async) getsockname$packet(r11, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000013c0)=0x14) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'batadv0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}}) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000001440)={'bond_slave_0\x00'}) 0s ago: executing program 4 (id=3856): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)="512eef09012085e79a4020d763d1d0ad038f6a98d244de5f6ecf67f70b74ffd25b8784fd87b4248cfefdea269dd839a7562320518cdc8e3e168dd913bbe253bab38607be4ce91baf356863699f3254bdbdbea1a3c6065232d40d5a9edb30b31767c73efbcf3f73a80b75571dfceee3c4e33bcf83a4baa80cb85f956df27db8c63685c7a68429b03b11d73ade2c32cf76d9e06e2f2705e46e7acd87e5edaeca6dc0b63d59318f6b12ac8c497245cd5864c9a2fea278c797d5e14da6c5128955ce3fc2e6", 0xc3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x7, 0xf4f, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @remote, {[@generic={0x88, 0x6, "53c2dc2e"}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): t permitted [ 347.577419][T15373] tipc: Enabling of bearer rejected, failed to enable media [ 347.688170][T15382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2345'. [ 347.688610][T15378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2344'. [ 347.698934][T15380] syzkaller1: entered promiscuous mode [ 347.713996][T15380] syzkaller1: entered allmulticast mode [ 347.936358][T15395] sctp: [Deprecated]: syz.3.2348 (pid 15395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.936358][T15395] Use struct sctp_sack_info instead [ 348.040867][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 348.054605][ T9921] udevd[9921]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 348.126166][T15395] team0: Port device dummy0 removed [ 348.401042][T15411] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2351'. [ 348.966513][T15434] wg1 speed is unknown, defaulting to 1000 [ 349.169597][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 349.840630][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 350.509990][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 350.754845][T15487] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.772646][T15487] tipc: Enabled bearer , priority 10 [ 350.891746][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.989230][T15497] xt_bpf: check failed: parse error [ 351.070153][T15505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.161421][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.600133][T15525] tipc: Enabled bearer , priority 0 [ 351.650591][T15527] tipc: Disabling bearer [ 351.691435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.898068][T15546] batman_adv: batadv0: Adding interface: vlan2 [ 351.913041][T15546] batman_adv: batadv0: The MTU of interface vlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 351.993969][T15546] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 352.020559][T15563] __nla_validate_parse: 7 callbacks suppressed [ 352.020579][T15563] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2388'. [ 352.220429][T15551] wg1 speed is unknown, defaulting to 1000 [ 352.316339][T15573] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2390'. [ 352.375369][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'. [ 352.621853][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 352.663498][T15587] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 352.675820][T15587] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.741638][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.918952][T15578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2392'. [ 352.964015][T15578] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2392'. [ 353.040123][T15605] wg1 speed is unknown, defaulting to 1000 [ 353.426599][T15634] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2406'. [ 353.781605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.961824][T15652] bond0: entered promiscuous mode [ 353.978804][T15652] bond_slave_0: entered promiscuous mode [ 354.006020][T15652] bond_slave_1: entered promiscuous mode [ 354.122131][T15656] bond8: (slave erspan0): Releasing active interface [ 354.209492][T15656] bond0: (slave bond_slave_0): Releasing backup interface [ 354.259154][T15656] bond0: (slave bond_slave_1): Releasing backup interface [ 354.300149][T15656] team0: Port device team_slave_0 removed [ 354.322622][T15656] team0: Port device team_slave_1 removed [ 354.339677][T15656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.358645][T15660] x_tables: duplicate underflow at hook 3 [ 354.483843][T15664] wg1 speed is unknown, defaulting to 1000 [ 354.821558][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.487637][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2425'. [ 355.506546][T15699] netlink: 'syz.3.2425': attribute type 7 has an invalid length. [ 355.524431][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2426'. [ 355.529804][T15699] netlink: 'syz.3.2425': attribute type 8 has an invalid length. [ 355.575475][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2425'. [ 355.861710][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.187944][T15727] netlink: zone id is out of range [ 356.564290][T15742] netlink: 'syz.4.2436': attribute type 39 has an invalid length. [ 356.577128][T15743] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 356.744016][T15752] sctp: [Deprecated]: syz.0.2439 (pid 15752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.744016][T15752] Use struct sctp_sack_info instead [ 356.767323][T15754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.780614][T15756] netlink: 'syz.4.2441': attribute type 12 has an invalid length. [ 356.854681][T15760] syzkaller0: entered promiscuous mode [ 356.866291][T15760] syzkaller0: entered allmulticast mode [ 356.901724][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.245141][T15773] __nla_validate_parse: 1 callbacks suppressed [ 357.245161][T15773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2446'. [ 357.345727][T15783] syz.0.2445 (15783) used obsolete PPPIOCDETACH ioctl [ 357.363023][T15779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2445'. [ 357.376469][T15782] Cannot find add_set index 2 as target [ 357.484907][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 357.756574][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 357.804686][T15811] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 357.941634][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.966994][T15826] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.773610][T15867] tipc: Enabled bearer , priority 0 [ 358.789101][T15867] syzkaller0: entered promiscuous mode [ 358.811517][T15867] syzkaller0: entered allmulticast mode [ 358.854886][T15867] tipc: Resetting bearer [ 358.879979][T15874] tipc: Enabling of bearer rejected, already enabled [ 358.912502][T15879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2471'. [ 358.953638][T15867] tipc: Resetting bearer [ 358.981610][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.023427][T15867] tipc: Disabling bearer [ 359.187868][T15895] batadv_slave_0: entered promiscuous mode [ 359.256260][T15890] wg1 speed is unknown, defaulting to 1000 [ 359.415040][T15893] batadv_slave_0: left promiscuous mode [ 359.502294][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2480'. [ 359.625889][T15910] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 359.671809][T15910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 359.718555][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2482'. [ 360.021713][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.064239][T15932] batadv_slave_1: entered promiscuous mode [ 360.158565][T15937] netlink: 'syz.2.2490': attribute type 29 has an invalid length. [ 360.167625][T15937] netlink: 'syz.2.2490': attribute type 29 has an invalid length. [ 360.177880][T15937] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2490'. [ 360.290074][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2492'. [ 360.567070][T15931] batadv_slave_1: left promiscuous mode [ 360.716901][T15953] tc_dump_action: action bad kind [ 361.061690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.167723][T15972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.322977][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'. [ 361.345235][T15977] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 361.353276][T15977] block nbd2: Unsupported socket: should be TCP or UNIX. [ 361.392587][ T6791] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.410102][ T6791] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.444070][ T6791] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.482742][ T6791] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.525342][T15985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.806122][T15989] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 362.056374][T16008] openvswitch: netlink: Message has 8 unknown bytes. [ 362.101561][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.981004][T16059] x_tables: duplicate underflow at hook 1 [ 363.141538][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.243740][T16066] Cannot find del_set index 4 as target [ 363.475494][T16076] __nla_validate_parse: 10 callbacks suppressed [ 363.475540][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 363.514733][T16075] syzkaller0: entered promiscuous mode [ 363.520399][T16075] syzkaller0: entered allmulticast mode [ 363.535008][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2528'. [ 363.703964][T16079] xt_l2tp: v2 sid > 0xffff: 16776960 [ 363.831690][T16089] netlink: 'syz.1.2533': attribute type 12 has an invalid length. [ 363.863479][T16089] netlink: 'syz.1.2533': attribute type 11 has an invalid length. [ 363.887263][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'. [ 363.919520][T16093] macvlan1: entered promiscuous mode [ 363.930455][T16093] bond0: entered promiscuous mode [ 363.952862][T16093] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 364.181513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.190880][T16111] tipc: Enabled bearer , priority 0 [ 364.203807][T16111] syzkaller0: entered promiscuous mode [ 364.217138][T16111] syzkaller0: entered allmulticast mode [ 364.249325][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 364.275234][T16109] 8021q: adding VLAN 0 to HW filter on device bond10 [ 364.294250][T16109] team0: Port device bond10 added [ 364.434927][T16114] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2543'. [ 364.448875][T16130] tipc: Resetting bearer [ 364.469092][T16110] tipc: Resetting bearer [ 364.503332][T16110] tipc: Disabling bearer [ 364.533068][T16134] macsec0: left allmulticast mode [ 364.538238][T16134] macsec0: left promiscuous mode [ 364.543506][T16134] bridge0: port 1(macsec0) entered disabled state [ 364.823155][T16151] netlink: 'syz.0.2553': attribute type 16 has an invalid length. [ 365.006108][T16154] wg1 speed is unknown, defaulting to 1000 [ 365.048965][T16157] wg1 speed is unknown, defaulting to 1000 [ 365.183314][T16165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'. [ 365.221650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.237298][T16214] IPVS: stopping backup sync thread 13199 ... [ 366.261612][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.372939][T16222] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 366.394000][T16222] veth1_macvtap: left promiscuous mode [ 366.422526][T16222] team0: Device veth1_macvtap failed to register rx_handler [ 366.529164][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2574'. [ 366.729491][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 366.751038][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 366.790551][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 366.862884][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.873390][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.888070][T16237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 367.043549][T16259] netlink: 'syz.1.2584': attribute type 10 has an invalid length. [ 367.162882][T16268] netlink: 'syz.2.2589': attribute type 2 has an invalid length. [ 367.301645][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.383042][T16288] netlink: 'syz.1.2595': attribute type 3 has an invalid length. [ 367.405956][T16288] netlink: 'syz.1.2595': attribute type 3 has an invalid length. [ 367.549916][T16296] batadv_slave_1: entered promiscuous mode [ 367.681528][T16294] batadv_slave_1: left promiscuous mode [ 368.341632][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.466786][T16345] m1Ie5n: entered promiscuous mode [ 368.500878][T16345] openvswitch: netlink: Invalid VLAN frame [ 368.550765][T16347] vlan3: entered promiscuous mode [ 368.556234][T16347] team0: entered promiscuous mode [ 368.617223][T16342] wg1 speed is unknown, defaulting to 1000 [ 368.776587][T16362] bridge_slave_1: left allmulticast mode [ 368.785003][T16362] bridge_slave_1: left promiscuous mode [ 368.791045][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.831835][T16362] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 368.893652][ T6791] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.909449][ T6791] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.990386][ T6791] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.006413][ T6791] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.059813][T16376] netlink: 'syz.1.2620': attribute type 2 has an invalid length. [ 369.101295][T16376] !: entered promiscuous mode [ 369.132841][T16376] __nla_validate_parse: 21 callbacks suppressed [ 369.132863][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2620'. [ 369.381665][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.427013][T16392] batadv0: entered promiscuous mode [ 369.544058][T16392] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2624'. [ 369.864346][T16392] wg1 speed is unknown, defaulting to 1000 [ 370.133979][T16412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2626'. [ 370.322061][T16425] nbd2: detected capacity change from 0 to 127 [ 370.389675][ T5842] block nbd2: Receive control failed (result -104) [ 370.421596][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.452148][T16436] No such timeout policy "syz0" [ 370.572894][T16443] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 370.772140][T16448] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2635'. [ 370.799869][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2635'. [ 371.058297][T16462] wg1 speed is unknown, defaulting to 1000 [ 371.126785][T16466] netlink: 'syz.1.2642': attribute type 3 has an invalid length. [ 371.188878][T16466] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 371.278128][T16466] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2642'. [ 371.310982][T16466] netlink: 'syz.1.2642': attribute type 9 has an invalid length. [ 371.333656][T16466] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2642'. [ 371.344234][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2642'. [ 371.461642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.654210][T16500] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 371.785356][T16508] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 371.960000][T16508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 372.062833][T16518] bond8: (slave ip6gretap0): making interface the new active one [ 372.074318][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 372.103391][T16518] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 372.125706][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 372.208451][T16523] veth5: entered promiscuous mode [ 372.225429][T16523] bond8: (slave veth5): Enslaving as an active interface with a down link [ 372.282120][T16508] erspan0: entered allmulticast mode [ 372.326277][T16508] bond8: (slave erspan0): Enslaving as an active interface with an up link [ 372.402765][T16541] netlink: 'syz.1.2660': attribute type 1 has an invalid length. [ 372.501560][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.516702][T16541] 8021q: adding VLAN 0 to HW filter on device bond9 [ 372.528671][T16545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.582947][T16546] veth3: entered promiscuous mode [ 372.657641][T16540] erspan0: entered allmulticast mode [ 372.775550][T16552] bridge0: entered promiscuous mode [ 373.412119][T16584] wg1 speed is unknown, defaulting to 1000 [ 373.541675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.961033][T16617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.170030][T16626] __nla_validate_parse: 7 callbacks suppressed [ 374.170050][T16626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2679'. [ 374.359295][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 374.359295][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 374.581707][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.678944][T16641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2683'. [ 374.737889][T16643] syzkaller0: entered promiscuous mode [ 374.744701][T16643] syzkaller0: entered allmulticast mode [ 374.835222][T16646] netlink: 'syz.3.2685': attribute type 3 has an invalid length. [ 374.973315][T16649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 374.982891][T16649] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2686'. [ 374.998145][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 375.018995][T16651] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2686'. [ 375.077507][T16655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.102504][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 150 seconds [ 375.282227][T16662] bridge8: entered promiscuous mode [ 375.295769][T16662] bridge8: entered allmulticast mode [ 375.581123][T16677] nbd: must specify at least one socket [ 375.621588][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.816458][T16694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2699'. [ 375.847191][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2699'. [ 375.881808][T16694] netlink: 'syz.4.2699': attribute type 1 has an invalid length. [ 376.661506][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.690277][T16765] wg1 speed is unknown, defaulting to 1000 [ 377.701584][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.729553][T16821] ip6gretap3: entered allmulticast mode [ 378.741646][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.896322][T16832] vlan0: entered promiscuous mode [ 378.918666][T16836] xt_hashlimit: overflow, rate too high: 0 [ 378.946810][T16833] xt_hashlimit: overflow, rate too high: 0 [ 378.966443][T16832] bridge_slave_0: entered promiscuous mode [ 379.021240][T16840] x_tables: duplicate underflow at hook 1 [ 379.456698][T16865] __nla_validate_parse: 3 callbacks suppressed [ 379.456717][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 379.465820][T16852] wg1 speed is unknown, defaulting to 1000 [ 379.566220][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 379.647298][T16854] wg1 speed is unknown, defaulting to 1000 [ 379.773097][T16877] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2746'. [ 379.781936][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.909728][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 380.144821][T16897] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 380.669555][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 380.821889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.016725][T16921] tipc: Enabled bearer , priority 0 [ 381.029306][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'. [ 381.160979][T16925] bond10: option ad_actor_sys_prio: invalid value (0) [ 381.210158][T16925] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 381.236406][T16925] bond10 (unregistering): Released all slaves [ 381.392744][T16921] tipc: Disabling bearer [ 381.515940][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'. [ 381.532726][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 381.554655][T16943] netlink: 'syz.3.2762': attribute type 14 has an invalid length. [ 381.570965][T16943] netlink: 'syz.3.2762': attribute type 12 has an invalid length. [ 381.861608][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.113092][T16963] netlink: 'syz.4.2769': attribute type 1 has an invalid length. [ 382.287852][T16963] 8021q: adding VLAN 0 to HW filter on device bond12 [ 382.349354][T16965] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 382.383940][T16965] bond12: (slave batadv2): making interface the new active one [ 382.413608][T16965] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 382.901631][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.910136][T16995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 382.987475][T16997] wg1 speed is unknown, defaulting to 1000 [ 383.125159][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 383.173868][T17008] bond0: Device is already in use. [ 383.270443][T17008] tipc: Enabling of bearer rejected, failed to enable media [ 383.716226][T17023] wg1 speed is unknown, defaulting to 1000 [ 383.941526][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.999729][T17038] ip6tnl1: entered allmulticast mode [ 384.027121][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.116243][T17037] bond7 (unregistering): Released all slaves [ 384.981642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.142518][T17070] __nla_validate_parse: 5 callbacks suppressed [ 385.142536][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 385.158366][T17070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2794'. [ 385.220730][T17070] x_tables: duplicate underflow at hook 1 [ 386.021534][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.066426][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.355429][T17094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2798'. [ 387.486714][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 387.875841][T17118] netlink: 'syz.3.2802': attribute type 3 has an invalid length. [ 387.884350][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 387.903332][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 388.101603][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.289200][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 388.510900][T17137] batman_adv: batadv0: Adding interface: dummy0 [ 388.517355][T17137] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 388.572286][T17137] batman_adv: batadv0: Interface activated: dummy0 [ 388.631130][T17137] batadv0: mtu less than device minimum [ 388.660420][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.677193][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.689219][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.701212][T17137] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.996230][T17145] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 389.141520][ C1] net_ratelimit: 15 callbacks suppressed [ 389.141540][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.363897][T17166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.908715][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 390.180477][T17195] team0 (unregistering): Port device bond10 removed [ 390.181914][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.364823][T17203] netlink: 'syz.3.2828': attribute type 1 has an invalid length. [ 390.390226][T17203] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 390.584957][T17206] wg1 speed is unknown, defaulting to 1000 [ 390.751075][T17218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2833'. [ 390.810771][T17218] smc: net device bond0 applied user defined pnetid SYZ0 [ 390.834503][T17221] smc: net device bond0 erased user defined pnetid SYZ0 [ 390.979154][T17224] netlink: 'syz.1.2835': attribute type 1 has an invalid length. [ 391.166432][T17229] netlink: 'syz.1.2837': attribute type 32 has an invalid length. [ 391.215676][T17229] netlink: 'syz.1.2837': attribute type 29 has an invalid length. [ 391.222357][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.293020][T17235] netlink: 'syz.1.2837': attribute type 29 has an invalid length. [ 391.304394][T17229] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2837'. [ 391.672035][T17247] syzkaller0: entered promiscuous mode [ 391.686882][T17247] syzkaller0: entered allmulticast mode [ 391.892113][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 391.906123][T17253] erspan0: left allmulticast mode [ 391.927078][T17253] bond0: left promiscuous mode [ 391.941625][T17253] bond_slave_0: left promiscuous mode [ 391.947384][T17253] bond_slave_1: left promiscuous mode [ 391.978737][T17253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.990903][T17253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.108112][T17260] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 392.138565][T17260] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2843'. [ 392.161264][T17260] tipc: Enabling of bearer rejected, failed to enable media [ 392.261641][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.364857][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 392.466927][T17278] netlink: 'syz.4.2850': attribute type 2 has an invalid length. [ 392.480435][T17281] netlink: 'syz.3.2849': attribute type 11 has an invalid length. [ 392.519753][T17278] : entered promiscuous mode [ 392.840844][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 392.928784][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 392.956188][T17306] tipc: Enabled bearer , priority 0 [ 392.977209][T17306] syzkaller0: entered promiscuous mode [ 392.994014][T17306] syzkaller0: entered allmulticast mode [ 393.111147][T17306] tipc: Resetting bearer [ 393.137406][T17305] tipc: Resetting bearer [ 393.212448][T17305] tipc: Disabling bearer [ 393.269236][T17327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2861'. [ 393.301514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.560432][T17340] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:8213 [ 393.653553][T17342] xt_CONNSECMARK: invalid mode: 0 [ 393.692909][T17344] xt_cgroup: invalid path, errno=-2 [ 393.710761][T17344] xt_TPROXY: Can be used only with -p tcp or -p udp [ 394.039689][T17370] netlink: 'syz.0.2873': attribute type 12 has an invalid length. [ 394.092001][T17367] syzkaller0: entered promiscuous mode [ 394.097562][T17367] syzkaller0: entered allmulticast mode [ 394.186121][T17378] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 394.229390][T17367] netlink: 640 bytes leftover after parsing attributes in process `syz.4.2874'. [ 394.260075][T17367] netlink: 640 bytes leftover after parsing attributes in process `syz.4.2874'. [ 394.277930][T17376] wg1 speed is unknown, defaulting to 1000 [ 394.341585][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.875761][T17406] syzkaller0: entered promiscuous mode [ 394.943318][T17406] syzkaller0: entered allmulticast mode [ 395.073783][T17411] netlink: 'syz.3.2885': attribute type 13 has an invalid length. [ 395.149407][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.159906][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.168328][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.177541][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.185923][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.381640][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.639459][T17412] wg1 speed is unknown, defaulting to 1000 [ 395.990439][T17434] wg1 speed is unknown, defaulting to 1000 [ 396.245315][T17412] chnl_net:caif_netlink_parms(): no params data found [ 396.421697][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.604337][T17467] dummy0: entered promiscuous mode [ 396.630223][T17467] dummy0: left promiscuous mode [ 396.648951][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.660053][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.667987][T17412] bridge_slave_0: entered allmulticast mode [ 396.676518][T17412] bridge_slave_0: entered promiscuous mode [ 396.685817][T17412] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.693386][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.700834][T17412] bridge_slave_1: entered allmulticast mode [ 396.715273][T17412] bridge_slave_1: entered promiscuous mode [ 396.849602][T17412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.872631][T17412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.226567][ T5837] Bluetooth: hci5: command tx timeout [ 397.464418][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.488345][T17412] team0: Port device team_slave_0 added [ 398.500574][T17412] team0: Port device team_slave_1 added [ 398.506553][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.642799][T17412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.649808][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.677080][T17490] __nla_validate_parse: 7 callbacks suppressed [ 398.677102][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 398.711258][T17412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.729314][T17412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.738931][T17494] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 398.747626][T17412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.792322][T17412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.903709][T17412] hsr_slave_0: entered promiscuous mode [ 398.910777][T17412] hsr_slave_1: entered promiscuous mode [ 398.918026][T17412] debugfs: 'hsr0' already exists in 'hsr' [ 398.924129][T17412] Cannot create hsr debugfs directory [ 399.109777][T17511] Cannot find del_set index 3 as target [ 399.301661][ T5837] Bluetooth: hci5: command tx timeout [ 399.448345][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2916'. [ 399.514904][T17412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.541581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.556349][T17534] tipc: Failed to remove unknown binding: 66,1,1/0:667892929/667892931 [ 399.566953][T17526] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2914'. [ 399.568316][T17534] tipc: Failed to remove unknown binding: 66,1,1/0:667892929/667892931 [ 399.590143][T17533] ip6gretap0: entered promiscuous mode [ 399.597381][T17533] ip6gretap0: entered allmulticast mode [ 399.688905][T17536] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2918'. [ 399.706361][T17412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.853603][T17412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.956665][T17412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.016150][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 400.025413][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2925'. [ 400.037789][T17552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2925'. [ 400.077303][T17554] syzkaller0: entered promiscuous mode [ 400.096659][T17554] syzkaller0: entered allmulticast mode [ 400.122645][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 400.320879][T17412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.453592][T17412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.568447][T17412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.579720][T17412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.581966][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.673606][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 30 seconds [ 400.685088][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 30 seconds [ 400.696852][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 30 seconds [ 400.708036][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 30 seconds [ 400.766755][T17588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2931'. [ 400.899814][T17412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.953454][T17412] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.985469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.992776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.038873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.046143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.165105][T17596] gre0: entered promiscuous mode [ 401.175271][T17596] gre0: entered allmulticast mode [ 401.381602][ T5837] Bluetooth: hci5: command tx timeout [ 401.419972][T17610] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 401.471085][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 401.486696][T17610] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.501213][T17412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.623417][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.893090][T17412] veth0_vlan: entered promiscuous mode [ 401.934605][T17412] veth1_vlan: entered promiscuous mode [ 402.021178][T17412] veth0_macvtap: entered promiscuous mode [ 402.059191][T17412] veth1_macvtap: entered promiscuous mode [ 402.114201][T17412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.133393][T17646] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 402.154330][T17412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.187221][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.205374][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.218543][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.237971][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.247383][T17651] xt_cgroup: invalid path, errno=-2 [ 402.308692][T17650] veth0: entered promiscuous mode [ 402.357071][T17650] veth0 (unregistering): left promiscuous mode [ 402.661577][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.763743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.787742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.889169][ T6789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.907716][ T6789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.923918][T17665] tipc: Enabled bearer , priority 0 [ 402.987002][T17664] tipc: Disabling bearer [ 403.461458][ T5837] Bluetooth: hci5: command tx timeout [ 403.605355][T17702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 403.612406][T17702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 403.655669][T17704] netlink: 'syz.4.2958': attribute type 1 has an invalid length. [ 403.701692][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.933621][T17717] __nla_validate_parse: 5 callbacks suppressed [ 403.991541][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2960'. [ 404.402087][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 404.502601][T17742] batman_adv: batadv0: Adding interface: bond1 [ 404.510042][T17742] batman_adv: batadv0: The MTU of interface bond1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.537207][T17742] batman_adv: batadv0: Not using interface bond1 (retrying later): interface not active [ 404.558000][T17745] netlink: 'syz.4.2967': attribute type 1 has an invalid length. [ 404.741706][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.757834][T17745] 8021q: adding VLAN 0 to HW filter on device bond13 [ 404.939214][T17740] 8021q: adding VLAN 0 to HW filter on device bond13 [ 404.994352][T17740] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 405.042921][T17740] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 405.151956][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 180 seconds [ 405.220506][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.234047][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.242638][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.252546][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.260507][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.781542][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.175552][T17787] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 406.208712][T17779] bond11: entered allmulticast mode [ 406.228957][T17779] 8021q: adding VLAN 0 to HW filter on device bond11 [ 406.247237][T17787] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2975'. [ 406.356435][T17761] wg1 speed is unknown, defaulting to 1000 [ 406.502868][T17783] bond1: (slave ip6gretap2): making interface the new active one [ 406.539541][T17783] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 406.589739][T17796] tipc: Started in network mode [ 406.601410][T17796] tipc: Node identity 4, cluster identity 4711 [ 406.607690][T17796] tipc: Node number set to 4 [ 406.622568][T17791] syzkaller0: entered promiscuous mode [ 406.628952][T17791] syzkaller0: entered allmulticast mode [ 406.720745][T17795] wg1 speed is unknown, defaulting to 1000 [ 407.394422][ T6795] veth0_to_bridge: left allmulticast mode [ 407.400565][ T6795] veth0_to_bridge: left promiscuous mode [ 407.457391][ T6795] bridge0: port 3(veth0_to_bridge) entered disabled state [ 407.484026][ T6795] bridge_slave_0: left allmulticast mode [ 407.497618][ T6795] bridge_slave_0: left promiscuous mode [ 407.510349][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.600608][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'. [ 407.699013][ T6795] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 407.797327][ T5837] Bluetooth: hci2: command tx timeout [ 407.918039][ T6795] batman_adv: batadv0: Removing interface: gretap1 [ 408.569162][ T6795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.579481][ T6795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.590558][ T6795] bond0 (unregistering): Released all slaves [ 408.606453][ T6795] bond1 (unregistering): Released all slaves [ 408.706967][ T6795] bond2 (unregistering): Released all slaves [ 408.810059][ T6795] bond3 (unregistering): Released all slaves [ 408.826033][ T6795] bond4 (unregistering): (slave veth5): Releasing active interface [ 408.836153][ T6795] bond4 (unregistering): Released all slaves [ 408.941916][ T6795] bond5 (unregistering): Released all slaves [ 408.956399][ T6795] bond6 (unregistering): Released all slaves [ 408.979550][T17761] chnl_net:caif_netlink_parms(): no params data found [ 409.130912][T17841] openvswitch: netlink: Multiple metadata blocks provided [ 409.213368][ T6795] tipc: Disabling bearer [ 409.236557][ T6795] tipc: Disabling bearer [ 409.255669][ T6795] tipc: Left network mode [ 409.513446][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.521003][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.534033][T17761] bridge_slave_0: entered allmulticast mode [ 409.555028][T17761] bridge_slave_0: entered promiscuous mode [ 409.597334][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.613886][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.631619][T17761] bridge_slave_1: entered allmulticast mode [ 409.651210][T17761] bridge_slave_1: entered promiscuous mode [ 409.804086][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.849245][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.861650][ T5837] Bluetooth: hci2: command tx timeout [ 409.939365][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 409.960343][T17761] team0: Port device team_slave_0 added [ 409.973803][T17761] team0: Port device team_slave_1 added [ 410.087039][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.096552][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.124320][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.145630][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.161868][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.221464][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.306467][T17877] wg1 speed is unknown, defaulting to 1000 [ 410.465874][T17761] hsr_slave_0: entered promiscuous mode [ 410.483546][T17761] hsr_slave_1: entered promiscuous mode [ 410.490251][T17761] debugfs: 'hsr0' already exists in 'hsr' [ 410.496833][T17761] Cannot create hsr debugfs directory [ 410.528737][T17882] tipc: Enabled bearer , priority 0 [ 410.547830][T17882] syzkaller0: entered promiscuous mode [ 410.553546][T17882] syzkaller0: entered allmulticast mode [ 410.640375][T17885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 410.787039][T17882] tipc: Resetting bearer [ 410.828626][T17881] tipc: Resetting bearer [ 410.878317][T17881] tipc: Disabling bearer [ 410.912749][T17898] xt_TCPMSS: Only works on TCP SYN packets [ 410.936905][ T6795] hsr_slave_0: left promiscuous mode [ 410.952201][ T6795] hsr_slave_1: left promiscuous mode [ 410.958875][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.972751][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.531175][ T6795] team0 (unregistering): Port device team_slave_1 removed [ 411.588197][ T6795] team0 (unregistering): Port device C removed [ 411.941691][ T5837] Bluetooth: hci2: command tx timeout [ 412.055862][T17898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.132729][T17909] netlink: 'syz.4.3001': attribute type 10 has an invalid length. [ 412.179326][T17887] wg1 speed is unknown, defaulting to 1000 [ 413.002256][T17929] syzkaller0: entered promiscuous mode [ 413.007936][T17929] syzkaller0: entered allmulticast mode [ 413.035234][ T6795] IPVS: stop unused estimator thread 0... [ 413.323908][T17939] dummy0: mtu less than device minimum [ 413.560499][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 413.571929][T17947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3012'. [ 413.614067][T17761] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 413.661055][ T30] audit: type=1800 audit(1766988291.996:7): pid=17940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3010" name="cgroup.controllers" dev="tmpfs" ino=2953 res=0 errno=0 [ 413.693836][T17761] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.732769][T17952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3013'. [ 413.750962][T17761] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.779919][T17761] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.022279][ T5837] Bluetooth: hci2: command tx timeout [ 414.116078][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.196922][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.295420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.302683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.396883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.404186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.824868][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 414.859804][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 414.896171][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 414.922994][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 415.103794][T18018] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.123168][T18018] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 415.154936][T18018] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 415.212330][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 415.234703][T18029] netlink: 'syz.4.3029': attribute type 15 has an invalid length. [ 415.243552][T18029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3029'. [ 415.303431][T18028] bond0: (slave bond_slave_1): Releasing backup interface [ 415.423451][T17761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.598274][T17761] veth0_vlan: entered promiscuous mode [ 415.610268][T17761] veth1_vlan: entered promiscuous mode [ 415.735874][T17761] veth0_macvtap: entered promiscuous mode [ 415.770968][T17761] veth1_macvtap: entered promiscuous mode [ 415.798615][T17761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.835636][T17761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.870476][ T6795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.880879][ T6795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.895147][ T6795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.911174][ T6795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.138459][ T6792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.172268][ T6792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.317882][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.325967][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.359376][T18064] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 416.426012][T18072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3041'. [ 416.499172][T18072] pim6reg: entered allmulticast mode [ 416.511663][T18079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3043'. [ 416.551974][T18072] pim6reg: left allmulticast mode [ 416.562951][T18077] netlink: 'syz.4.3041': attribute type 6 has an invalid length. [ 416.592803][T18077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3041'. [ 416.655037][T18072] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3041'. [ 416.858578][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.869392][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.879311][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.900171][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.918371][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.960932][T18092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2965'. [ 416.971237][T18092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2965'. [ 417.028196][T18095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2965'. [ 417.055675][T18095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2965'. [ 417.221874][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 417.654427][T18099] chnl_net:caif_netlink_parms(): no params data found [ 417.718090][T18132] netlink: 'syz.1.3053': attribute type 3 has an invalid length. [ 418.145573][T18099] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.161562][T18099] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.172412][T18099] bridge_slave_0: entered allmulticast mode [ 418.190838][T18099] bridge_slave_0: entered promiscuous mode [ 418.212119][T18160] netlink: 'syz.1.3060': attribute type 15 has an invalid length. [ 418.220232][T18099] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.238680][T18099] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.253796][T18161] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 418.258051][T18099] bridge_slave_1: entered allmulticast mode [ 418.283272][T18099] bridge_slave_1: entered promiscuous mode [ 418.526252][T18173] bond12: Removing last ns target with arp_interval on [ 418.565296][T18099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.595315][T18099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.929916][T18099] team0: Port device team_slave_0 added [ 418.972378][T18099] team0: Port device team_slave_1 added [ 418.984458][ T5837] Bluetooth: hci4: command tx timeout [ 419.059594][T18099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.076117][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.123312][T18099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.151989][T18207] xt_hashlimit: size too large, truncated to 1048576 [ 419.153264][T18099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.167578][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.196906][T18099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.492522][T18099] hsr_slave_0: entered promiscuous mode [ 419.512750][T18099] hsr_slave_1: entered promiscuous mode [ 419.902075][T18099] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.959164][T18099] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.034885][T18099] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.081966][T18245] netlink: 'syz.3.3075': attribute type 28 has an invalid length. [ 420.090080][T18245] netlink: 'syz.3.3075': attribute type 3 has an invalid length. [ 420.353986][T18251] __nla_validate_parse: 12 callbacks suppressed [ 420.354005][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 420.534489][T18099] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.686145][T18258] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3079'. [ 420.724659][ T8968] IPVS: starting estimator thread 0... [ 420.732326][T18249] IPVS: rr: FWM 3 0x00000003 - no destination available [ 420.757184][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 420.830162][T18261] IPVS: using max 33 ests per chain, 79200 per kthread [ 420.907500][T18242] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 421.061899][ T5837] Bluetooth: hci4: command tx timeout [ 422.289129][T18292] syzkaller0: entered promiscuous mode [ 422.294787][T18292] syzkaller0: entered allmulticast mode [ 422.582144][T18099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.655474][T18099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.668603][T18303] tipc: Enabled bearer , priority 0 [ 422.676529][T18099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.700668][T18099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.728947][T18303] tipc: Disabling bearer [ 423.085344][T18329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 423.142361][ T5837] Bluetooth: hci4: command tx timeout [ 423.340787][T18335] netlink: 'syz.1.3096': attribute type 39 has an invalid length. [ 423.590049][T18099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.651155][T18099] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.728563][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.735801][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.789035][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.796312][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.530623][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'. [ 424.792743][T18390] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 424.806355][T18390] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 424.877798][T18392] macvlan3: entered promiscuous mode [ 424.883684][T18392] macvlan3: entered allmulticast mode [ 424.900683][T18392] bond13: (slave macvlan3): Error -98 calling set_mac_address [ 425.225589][ T5837] Bluetooth: hci4: command tx timeout [ 425.334059][T18099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.758986][T18099] veth0_vlan: entered promiscuous mode [ 425.772215][T18417] syzkaller0: entered promiscuous mode [ 425.780050][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3115'. [ 425.790996][T18417] syzkaller0: entered allmulticast mode [ 425.820552][T18422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3115'. [ 425.922404][T18099] veth1_vlan: entered promiscuous mode [ 425.961903][T18419] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3112'. [ 426.076441][T18433] syzkaller0: entered promiscuous mode [ 426.090259][T18433] syzkaller0: entered allmulticast mode [ 426.175877][T18440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 426.352293][T18099] veth0_macvtap: entered promiscuous mode [ 426.394375][T18099] veth1_macvtap: entered promiscuous mode [ 426.658530][T18099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.769795][T18099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.859936][ T6776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.889334][ T6776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.159914][ T6776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.193026][ T6776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.301859][ T5837] Bluetooth: hci4: command tx timeout [ 427.733719][ T6793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.743512][ T6793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.825263][ T6765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.847942][ T6765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.948340][T18492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.126442][T18492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.259183][T18492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.432337][T18492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.579768][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.592708][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.603675][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.617953][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.625989][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.019951][ T6776] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.144599][T18504] chnl_net:caif_netlink_parms(): no params data found [ 429.224890][ T6776] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.285482][ T6765] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.468763][ T6793] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.721720][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.732998][T18525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.742897][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.769107][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.787690][T18504] bridge_slave_0: entered allmulticast mode [ 429.803442][T18504] bridge_slave_0: entered promiscuous mode [ 429.839104][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.913852][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.921231][T18504] bridge_slave_1: entered allmulticast mode [ 429.940869][T18504] bridge_slave_1: entered promiscuous mode [ 430.079067][T18504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.117710][T18504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.252915][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 430.264287][T18504] team0: Port device team_slave_0 added [ 430.311748][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 430.362241][T18533] bond1: entered promiscuous mode [ 430.393119][T18533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.420509][T18504] team0: Port device team_slave_1 added [ 430.453999][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3137'. [ 430.565335][T18544] bridge_slave_0: default FDB implementation only supports local addresses [ 430.586201][T18504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.602135][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.652141][T18546] netlink: 'syz.1.3139': attribute type 2 has an invalid length. [ 430.661432][ T5837] Bluetooth: hci0: command tx timeout [ 430.675006][T18504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.696613][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'. [ 430.736213][T18504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.745934][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 60 seconds [ 430.757306][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 60 seconds [ 430.768499][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 60 seconds [ 430.779657][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 60 seconds [ 430.780829][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.866039][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3141'. [ 430.961093][T18504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.003784][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3141'. [ 431.248764][T18504] hsr_slave_0: entered promiscuous mode [ 431.283676][T18504] hsr_slave_1: entered promiscuous mode [ 431.315806][T18504] debugfs: 'hsr0' already exists in 'hsr' [ 431.330533][T18504] Cannot create hsr debugfs directory [ 431.719842][T18563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.915295][T18573] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 431.942594][T18573] netlink: 'syz.1.3144': attribute type 2 has an invalid length. [ 431.951786][T18573] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 431.977995][T18574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3142'. [ 432.080783][T18563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.108648][T18578] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 432.117610][T18578] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3145'. [ 432.127936][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'. [ 432.186570][T18563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.294030][T18563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.329284][ T5200] udevd[5200]: worker [9880] /devices/virtual/block/nbd1 timeout; kill it [ 432.339124][ T5200] udevd[5200]: seq 16918 '/devices/virtual/block/nbd1' killed [ 432.347922][ T5200] udevd[5200]: worker [9921] /devices/virtual/block/nbd2 is taking a long time [ 432.418630][ T6791] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.479295][ T6791] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.545025][ T6794] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.579587][ T6794] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.651985][T18504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 432.683298][T18504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 432.699041][T18504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 432.733617][T18504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 432.742822][ T5837] Bluetooth: hci0: command tx timeout [ 432.986834][T18504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.055562][T18504] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.094286][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.101555][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.141140][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.148417][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.579115][T18504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.600245][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 433.616451][T18617] netlink: 'syz.2.3155': attribute type 2 has an invalid length. [ 434.013127][T18628] syz_tun: entered promiscuous mode [ 434.179784][T18634] bond1 (unregistering): Released all slaves [ 434.308172][T18642] syzkaller0: entered promiscuous mode [ 434.323403][T18642] syzkaller0: entered allmulticast mode [ 434.420284][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 434.439474][T18504] veth0_vlan: entered promiscuous mode [ 434.527362][T18504] veth1_vlan: entered promiscuous mode [ 434.537171][T18646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'. [ 434.587558][T18646] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3159'. [ 434.613848][T18504] veth0_macvtap: entered promiscuous mode [ 434.652695][T18504] veth1_macvtap: entered promiscuous mode [ 434.717822][T18504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.744837][T18655] netlink: 'syz.0.3161': attribute type 1 has an invalid length. [ 434.780106][T18504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.823236][ T5837] Bluetooth: hci0: command tx timeout [ 434.834051][ T6793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.868490][ T6793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.991146][T18658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.026279][ T6793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.068060][ T6793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.077732][T18669] netlink: 'syz.3.3163': attribute type 1 has an invalid length. [ 435.104996][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 435.114080][T18669] netlink: 'syz.3.3163': attribute type 1 has an invalid length. [ 435.152636][T18672] netlink: 'syz.1.3164': attribute type 1 has an invalid length. [ 435.228286][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 210 seconds [ 435.367892][T18678] tipc: Started in network mode [ 435.381954][T18678] tipc: Node identity 0675060aea04, cluster identity 4711 [ 435.399667][T18678] tipc: Enabled bearer , priority 0 [ 435.460243][T18683] syzkaller0: entered promiscuous mode [ 435.477890][T18683] syzkaller0: entered allmulticast mode [ 435.503943][ T313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.515404][ T313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.625352][T18678] tipc: Resetting bearer [ 435.631415][T18678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.695977][T18676] tipc: Resetting bearer [ 435.722283][T18676] tipc: Disabling bearer [ 435.777944][ T6795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.797313][ T6795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.034228][T18709] __nla_validate_parse: 3 callbacks suppressed [ 436.034247][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3131'. [ 436.047692][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'. [ 436.210193][T18721] openvswitch: netlink: Duplicate or invalid key (type 0). [ 436.251200][T18721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.901757][ T5837] Bluetooth: hci0: command tx timeout [ 438.417175][T18766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3186'. [ 438.656026][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.667437][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.684810][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.694226][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.710629][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.916151][ T5904] IPVS: starting estimator thread 0... [ 438.974303][T18781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 438.998378][T18780] tipc: Started in network mode [ 439.004893][T18780] tipc: Node identity 56c80bc768be, cluster identity 4711 [ 439.013570][T18780] tipc: Enabled bearer , priority 0 [ 439.023920][T18783] IPVS: using max 32 ests per chain, 76800 per kthread [ 439.049022][T18785] syzkaller0: entered promiscuous mode [ 439.056804][T18785] syzkaller0: entered allmulticast mode [ 439.088705][ T6765] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.213526][ T6765] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.249080][T18780] tipc: Resetting bearer [ 439.266516][T18778] tipc: Resetting bearer [ 439.321762][T18778] tipc: Disabling bearer [ 439.344686][ T6765] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.428404][ T6765] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.662031][T18770] chnl_net:caif_netlink_parms(): no params data found [ 439.909256][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3198'. [ 440.678598][ T5830] Bluetooth: hci0: command 0x0405 tx timeout [ 440.741468][ T5837] Bluetooth: hci1: command tx timeout [ 440.772836][ T6765] dvmrp1 (unregistering): left allmulticast mode [ 440.813765][ T6765] dvmrp0 (unregistering): left allmulticast mode [ 441.150751][ T6765] bond4 (unregistering): (slave bridge0): Releasing active interface [ 441.159356][ T6765] bond4 (unregistering): (slave bridge0): the permanent HWaddr of slave - 46:4a:7f:76:b9:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 441.177640][T18847] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3206'. [ 441.416524][ T6765] bond4 (unregistering): (slave bridge5): Releasing active interface [ 441.830004][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.844229][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.855439][ T6765] bond0 (unregistering): Released all slaves [ 441.878640][T18858] Bluetooth: MGMT ver 1.23 [ 441.887961][ T6765] bond1 (unregistering): Released all slaves [ 441.930664][ T6765] bond2 (unregistering): Released all slaves [ 441.959038][ T6765] bond3 (unregistering): Released all slaves [ 441.978909][ T6765] bond4 (unregistering): Released all slaves [ 442.125023][ T6765] bond5 (unregistering): Released all slaves [ 442.261044][ T6765] bond6 (unregistering): Released all slaves [ 442.392720][ T6765] bond7 (unregistering): Released all slaves [ 442.411794][ T6765] bond8 (unregistering): Released all slaves [ 442.551221][ T6765] bond9 (unregistering): Released all slaves [ 442.681885][ T6765] bond10 (unregistering): Released all slaves [ 442.809636][ T6765] bond11 (unregistering): Released all slaves [ 442.821533][ T5837] Bluetooth: hci1: command tx timeout [ 442.835766][ T6765] bond12 (unregistering): Released all slaves [ 442.856369][ T6765] bond13 (unregistering): Released all slaves [ 443.052864][T18770] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.060139][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.088033][T18770] bridge_slave_0: entered allmulticast mode [ 443.119678][T18770] bridge_slave_0: entered promiscuous mode [ 443.147306][ T6765] : left promiscuous mode [ 443.152452][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 443.278507][T18770] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.289637][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.307402][T18770] bridge_slave_1: entered allmulticast mode [ 443.326359][T18770] bridge_slave_1: entered promiscuous mode [ 443.343153][T18865] tipc: Started in network mode [ 443.350144][T18865] tipc: Node identity 12c33e48c78b, cluster identity 4711 [ 443.370492][T18865] tipc: Enabled bearer , priority 0 [ 443.401565][ T6765] !: left promiscuous mode [ 443.459432][T18865] tipc: Disabling bearer [ 443.565422][ T6765] tipc: Left network mode [ 443.577350][T18770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.605953][T18770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.632752][ T6765] IPVS: stopping backup sync thread 7565 ... [ 443.713178][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 443.779035][T18770] team0: Port device team_slave_0 added [ 443.794935][T18770] team0: Port device team_slave_1 added [ 443.813960][T18883] netlink: 'syz.0.3215': attribute type 21 has an invalid length. [ 443.913674][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 443.997379][T18770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.017041][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.067180][T18770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.095556][T18889] netlink: 'syz.4.3217': attribute type 1 has an invalid length. [ 444.104190][T18889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3217'. [ 444.119849][T18770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.146323][T18770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.205621][T18770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.503224][T18770] hsr_slave_0: entered promiscuous mode [ 444.513153][T18770] hsr_slave_1: entered promiscuous mode [ 444.535473][T18770] debugfs: 'hsr0' already exists in 'hsr' [ 444.541275][T18770] Cannot create hsr debugfs directory [ 444.620184][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 444.651946][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.662552][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.679131][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.694996][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.719226][ T6765] veth1_vlan: left promiscuous mode [ 444.734357][ T6765] veth0_vlan: left promiscuous mode [ 444.901432][ T5837] Bluetooth: hci1: command tx timeout [ 445.250369][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 445.655638][T18904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3219'. [ 445.667040][T18904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3219'. [ 445.678194][T18909] tipc: Enabled bearer , priority 0 [ 445.690849][T18898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3219'. [ 445.746850][T18916] syzkaller0: entered promiscuous mode [ 445.752981][T18916] syzkaller0: entered allmulticast mode [ 445.763589][T18923] syzkaller0: entered promiscuous mode [ 445.769165][T18923] syzkaller0: entered allmulticast mode [ 445.888540][T18932] tipc: Resetting bearer [ 445.918190][T18932] tipc: Disabling bearer [ 445.973874][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 446.030337][T18938] vlan2: entered allmulticast mode [ 446.047843][T18938] dummy0: entered allmulticast mode [ 446.054876][T18929] delete_channel: no stack [ 446.329343][ T6765] IPVS: stop unused estimator thread 0... [ 446.383175][T18965] __nla_validate_parse: 3 callbacks suppressed [ 446.383194][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 446.434031][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 446.448403][T18965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3233'. [ 446.473120][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 446.485367][T18965] netlink: 540 bytes leftover after parsing attributes in process `syz.2.3233'. [ 446.618256][T18970] netlink: 'syz.4.3234': attribute type 11 has an invalid length. [ 446.749226][T18977] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 446.877616][T18977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.981709][ T5837] Bluetooth: hci1: command tx timeout [ 446.993632][T18980] ipvlan2: entered allmulticast mode [ 446.999902][T18980] bond3: entered allmulticast mode [ 447.047785][T18986] bond3: (slave gretap1): making interface the new active one [ 447.058900][T18986] gretap1: entered allmulticast mode [ 447.068856][T18986] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 447.104149][T18991] netlink: 'syz.4.3239': attribute type 3 has an invalid length. [ 447.162774][T18991] netlink: 'syz.4.3239': attribute type 3 has an invalid length. [ 447.414584][T18770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.458839][T19012] geneve2: entered promiscuous mode [ 447.466824][T18770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.504546][ T6765] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 34322 - 0 [ 447.518313][ T6765] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 34322 - 0 [ 447.538084][ T6765] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 34322 - 0 [ 447.624743][T18770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.659881][ T6765] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 34322 - 0 [ 447.684796][T18770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.905029][T18770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.939460][T18770] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.961366][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.968695][ T6793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.030272][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.037525][ T6765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.088944][T19038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.219801][T19044] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3254'. [ 448.232438][T19044] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3254'. [ 448.263953][T19042] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 448.489275][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 448.541199][T19057] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 448.730268][T18770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.797861][T19063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.917411][T18770] veth0_vlan: entered promiscuous mode [ 448.937250][T18770] veth1_vlan: entered promiscuous mode [ 448.979398][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3262'. [ 449.018664][T19075] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3262'. [ 449.046006][T18770] veth0_macvtap: entered promiscuous mode [ 449.059393][T18770] veth1_macvtap: entered promiscuous mode [ 449.154767][T19084] veth2: entered allmulticast mode [ 449.207657][T18770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.230057][T18770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.262688][ T6764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.279531][ T6764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.317413][ T6764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.337469][ T6764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.455985][ T6791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.478448][ T6791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.566235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.576605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.856412][ T6793] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.877428][ T6793] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.912429][ T6793] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.949250][ T6793] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.177742][T19132] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 450.692897][T19153] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 450.765567][T19153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.802641][T19160] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 450.918449][T19153] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 451.071411][ T6765] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 451.211598][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.261569][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.304453][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.361485][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.413692][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.452284][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.501819][ T6791] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.531971][ T6791] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.705941][T19198] __nla_validate_parse: 9 callbacks suppressed [ 451.705963][T19198] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3291'. [ 451.758904][T19195] netlink: 'syz.2.3290': attribute type 2 has an invalid length. [ 451.860754][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3292'. [ 452.207172][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 452.290762][T19215] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3294'. [ 452.553952][T19244] batman_adv: batadv0: Adding interface: dummy0 [ 452.572260][T19244] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.626956][T19244] batman_adv: batadv0: Interface activated: dummy0 [ 452.689422][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3304'. [ 452.758909][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3304'. [ 452.896595][T19264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3306'. [ 453.027621][T19264] siw: device registration error -23 [ 453.073986][T19275] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3310'. [ 453.181492][ T61] net_ratelimit: 48 callbacks suppressed [ 453.181513][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.232076][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.261437][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.291445][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.315264][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.351886][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.371128][ T6792] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.501769][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.521495][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.554163][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.649645][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3317'. [ 453.747075][T19309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3320'. [ 454.152720][T19327] tc_dump_action: action bad kind [ 454.160898][T19327] tipc: Enabled bearer , priority 0 [ 454.168729][T19327] syzkaller0: entered promiscuous mode [ 454.174532][T19327] syzkaller0: entered allmulticast mode [ 454.273683][T19326] tipc: Resetting bearer [ 454.313685][T19326] tipc: Disabling bearer [ 455.043506][T19363] netlink: 'syz.4.3333': attribute type 58 has an invalid length. [ 455.426089][T19383] hsr_slave_0: left promiscuous mode [ 455.433437][T19383] hsr_slave_1: left promiscuous mode [ 455.988200][T19413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.033786][T19395] : entered promiscuous mode [ 456.984524][T19411] bond1 (unregistering): Released all slaves [ 457.008156][T19431] netlink: 'syz.2.3343': attribute type 12 has an invalid length. [ 457.447275][T19463] __nla_validate_parse: 7 callbacks suppressed [ 457.447296][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 457.484031][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 457.964351][ T8965] IPVS: starting estimator thread 0... [ 458.051421][T19491] IPVS: using max 28 ests per chain, 67200 per kthread [ 458.061920][T19493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 458.237384][T19500] net_ratelimit: 154 callbacks suppressed [ 458.237406][T19500] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 458.292217][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.300530][ T6792] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.431480][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.443832][ T6792] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.567163][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.602038][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.638547][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.671465][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.681645][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.864836][T19518] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 458.876048][ T8965] IPVS: starting estimator thread 0... [ 458.942038][T19518] bond1: entered promiscuous mode [ 458.947158][T19518] bond1: entered allmulticast mode [ 458.963941][T19518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.981514][T19519] IPVS: using max 28 ests per chain, 67200 per kthread [ 458.999236][T19526] x_tables: duplicate underflow at hook 1 [ 459.052818][T19524] macvlan2: entered promiscuous mode [ 459.086965][T19524] macvlan2: entered allmulticast mode [ 459.107567][T19524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.238471][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3371'. [ 459.264286][T19524] tipc: Enabled bearer , priority 0 [ 459.350630][T19537] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 459.392379][T19535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 459.415340][T19537] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 459.448234][T19518] syzkaller0: entered promiscuous mode [ 459.462330][T19518] syzkaller0: entered allmulticast mode [ 459.487024][T19535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.503323][T19517] tipc: Resetting bearer [ 459.548786][T19517] tipc: Disabling bearer [ 459.690534][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3374'. [ 459.978094][T19563] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 460.280431][T19578] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3383'. [ 460.366684][T19576] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.374521][T19576] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.609017][T19576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.799460][ T6764] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.853751][ T6764] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.862789][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 90 seconds [ 460.874289][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 90 seconds [ 460.885867][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 90 seconds [ 460.897095][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 90 seconds [ 460.910867][ T6764] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.919929][ T6764] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.089435][T19604] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 461.131400][T19604] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3389'. [ 461.524318][T19622] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3394'. [ 461.571799][T19617] nbd: device at index 0 is going down [ 461.601949][ T5200] udevd[5200]: worker [17653] terminated by signal 33 (Unknown signal 33) [ 461.663223][T19622] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3394'. [ 461.710734][T19609] syzkaller0: entered promiscuous mode [ 461.720021][T19609] syzkaller0: entered allmulticast mode [ 462.493920][T19649] vlan2: entered allmulticast mode [ 462.500822][T19649] bridge0: entered allmulticast mode [ 462.570739][T19656] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 463.292755][ T61] net_ratelimit: 133 callbacks suppressed [ 463.292776][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.338389][ T61] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.472574][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.511762][ T61] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 463.652921][ T6794] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.701503][ T6794] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.761775][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.792712][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.831789][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.882335][ T6792] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 464.675084][T19740] netlink: 'syz.0.3422': attribute type 1 has an invalid length. [ 464.711712][T19740] netlink: 'syz.0.3422': attribute type 2 has an invalid length. [ 464.785266][T19740] __nla_validate_parse: 1 callbacks suppressed [ 464.785289][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'. [ 464.884607][T19750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3425'. [ 464.909960][T19740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.010247][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 465.208631][T19768] macsec1: entered promiscuous mode [ 465.214158][T19768] macsec1: entered allmulticast mode [ 465.310276][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 240 seconds [ 465.606836][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 465.907913][T19798] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3436'. [ 466.220739][T19817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3443'. [ 466.310594][T19817] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3443'. [ 466.389494][T19817] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3443'. [ 466.426253][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 466.695782][T19830] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 466.888816][T19836] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 467.006650][T19837] bond3: (slave bridge3): making interface the new active one [ 467.015487][T19837] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 467.040903][T19838] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 467.082766][T19843] netlink: 'syz.4.3451': attribute type 15 has an invalid length. [ 467.454800][T19860] syzkaller0: entered promiscuous mode [ 467.460337][T19860] syzkaller0: entered allmulticast mode [ 467.469115][T19862] tipc: Enabling of bearer rejected, failed to enable media [ 467.714987][T19873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3460'. [ 467.767344][T19876] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 467.806241][T19876] bond0: (slave sit0): Error -95 calling set_mac_address [ 468.312383][ T61] net_ratelimit: 107 callbacks suppressed [ 468.312408][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.387224][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.441524][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.461418][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.491582][ T6764] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.533218][ T6795] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.551392][ T6795] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.578824][ T6795] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.621770][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.650409][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.661061][T19917] sctp: [Deprecated]: syz.1.3470 (pid 19917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.661061][T19917] Use struct sctp_sack_info instead [ 469.333291][T19939] netlink: 'syz.1.3479': attribute type 3 has an invalid length. [ 469.954609][T19974] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 470.024834][T19974] batman_adv: batadv0: Adding interface: gretap2 [ 470.040794][T19974] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.128571][T19974] batman_adv: batadv0: Interface activated: gretap2 [ 470.237240][T19978] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 470.298191][T19958] veth0: entered promiscuous mode [ 470.427757][T19988] syzkaller0: entered promiscuous mode [ 470.434856][T19988] syzkaller0: entered allmulticast mode [ 470.529686][T19950] veth0: left promiscuous mode [ 470.536247][T19988] __nla_validate_parse: 3 callbacks suppressed [ 470.536266][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'. [ 470.627290][T19988] tipc: Enabled bearer , priority 0 [ 470.669233][T19987] tipc: Resetting bearer [ 470.710408][T19987] tipc: Disabling bearer [ 471.371067][T20037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3502'. [ 472.036124][T20066] syzkaller0: entered promiscuous mode [ 472.059615][T20066] syzkaller0: entered allmulticast mode [ 472.157336][T20071] netlink: 'syz.4.3510': attribute type 46 has an invalid length. [ 472.281801][T20077] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3512'. [ 472.291132][T20077] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3512'. [ 472.311457][T20077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3512'. [ 472.436832][T20083] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 472.459826][T20083] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 472.486429][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3516'. [ 472.553125][T20090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3516'. [ 472.564609][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3517'. [ 472.575592][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3517'. [ 472.687343][T20093] tipc: Enabled bearer , priority 0 [ 472.720061][T20093] syzkaller0: entered promiscuous mode [ 472.726223][T20093] syzkaller0: entered allmulticast mode [ 472.741572][ T5837] Bluetooth: hci0: command 0x0405 tx timeout [ 472.773559][T20093] tipc: Resetting bearer [ 472.811723][T20092] tipc: Resetting bearer [ 472.854308][T20092] tipc: Disabling bearer [ 472.938378][T20107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 473.294888][T20134] netlink: 'syz.4.3527': attribute type 4 has an invalid length. [ 473.333566][ T6795] net_ratelimit: 147 callbacks suppressed [ 473.333588][ T6795] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.350186][T20130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.368211][ T6795] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.374462][T20137] netlink: 'syz.1.3530': attribute type 13 has an invalid length. [ 473.383991][T20137] netlink: 'syz.1.3530': attribute type 17 has an invalid length. [ 473.421803][ T6765] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.442899][ T6765] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.463495][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.489077][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 473.501488][ T6765] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.521469][ T6765] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.551544][ T3422] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.585590][T20139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.599192][ T6765] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.677710][T20149] netlink: 'syz.3.3533': attribute type 12 has an invalid length. [ 473.779114][T20143] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 473.796056][T20143] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 473.950264][T20169] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000 [ 474.003489][T20171] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.158759][T20200] syzkaller0: entered promiscuous mode [ 475.166559][T20200] syzkaller0: entered allmulticast mode [ 475.177803][T20203] tipc: Enabled bearer , priority 0 [ 475.187696][T20204] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 475.197006][T20204] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 475.205165][T20204] tipc: Resetting bearer [ 476.114447][T20230] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 476.317728][T20235] netlink: 'syz.2.3554': attribute type 13 has an invalid length. [ 477.127516][ T8970] tipc: Node number set to 1047923655 [ 477.256398][T20241] __nla_validate_parse: 4 callbacks suppressed [ 477.256420][T20241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3556'. [ 477.617199][T20235] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.625011][T20235] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.105172][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.143305][T20235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.351620][ T313] net_ratelimit: 204 callbacks suppressed [ 478.351643][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.381621][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.401850][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.421642][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.441502][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.461446][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.481633][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.501727][ T61] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.521375][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.541405][ T313] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.783091][T20235] batman_adv: batadv0: Interface deactivated: gretap2 [ 478.844023][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 478.873770][ T3422] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.905650][ T3422] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.926446][T20243] tipc: Resetting bearer [ 478.995047][ T3422] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.013701][ T3422] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.084508][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'. [ 479.094032][T20262] block nbd3: Unsupported socket: should be TCP or UNIX. [ 479.111231][T20257] syzkaller0: entered promiscuous mode [ 479.116936][T20257] syzkaller0: entered allmulticast mode [ 479.444430][T20281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3567'. [ 480.083400][T20309] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 481.853732][T20304] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 481.863492][T20304] team0: Device ipvlan2 is already an upper device of the team interface [ 482.072713][T20314] tipc: Enabled bearer , priority 0 [ 482.161204][T20312] syzkaller0: entered promiscuous mode [ 482.174598][T20312] syzkaller0: entered allmulticast mode [ 482.263102][T20312] tipc: Resetting bearer [ 482.281959][T20311] tipc: Resetting bearer [ 482.371622][T20311] tipc: Disabling bearer [ 482.503891][T20334] netlink: 'syz.2.3582': attribute type 1 has an invalid length. [ 482.556494][T20334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.653863][T20337] bond5: (slave ip6erspan0): making interface the new active one [ 482.664145][T20337] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 483.030193][T20363] batadv1: entered promiscuous mode [ 483.195013][T20363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3587'. [ 483.608069][T20374] netlink: 'syz.0.3589': attribute type 1 has an invalid length. [ 483.617206][T20375] netlink: 'syz.0.3589': attribute type 1 has an invalid length. [ 483.645563][T20375] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3589'. [ 483.952438][T20383] bond6: entered allmulticast mode [ 483.968922][T20383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.240290][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3597'. [ 484.307718][T20404] tipc: Failed to remove unknown binding: 66,1,1/0:2394238525/2394238527 [ 484.318216][T20404] tipc: Failed to remove unknown binding: 66,1,1/0:2394238525/2394238527 [ 484.328589][T20404] tipc: Failed to remove unknown binding: 66,1,1/0:2394238525/2394238527 [ 484.703613][T20431] Cannot find add_set index 46338 as target [ 485.030226][T20438] IPVS: Scheduler module ip_vs_sip not found [ 485.057211][T20444] netlink: 'syz.0.3604': attribute type 39 has an invalid length. [ 485.067204][T20452] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3605'. [ 485.391551][T20465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3606'. [ 485.415350][T20465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3606'. [ 485.424723][T20465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3606'. [ 486.203906][T20483] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.211842][T20483] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.343199][T20483] batman_adv: batadv0: Interface deactivated: dummy0 [ 486.824053][T20483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.894467][T20483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.012532][T20502] net_ratelimit: 10 callbacks suppressed [ 487.012555][T20502] openvswitch: netlink: IP tunnel dst address not specified [ 487.030048][T20502] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 487.459763][T20483] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 487.994117][T20502] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.001844][T20502] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.473854][T20502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.523731][T20502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.023391][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.033754][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.065266][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.087558][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.109589][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.141729][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.150716][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.190029][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.216226][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.255103][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.276004][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.290613][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.300075][T20527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3624'. [ 489.322250][T20535] netlink: 'syz.3.3627': attribute type 7 has an invalid length. [ 489.373764][ T6792] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.391958][ T6792] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.400231][ T6792] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.408944][T20535] netlink: 'syz.3.3627': attribute type 7 has an invalid length. [ 489.457023][ T6792] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.725399][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 490.165370][T20589] netlink: 'syz.2.3641': attribute type 3 has an invalid length. [ 490.402409][T20599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3642'. [ 490.776059][T20608] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3644'. [ 490.902443][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 120 seconds [ 490.913703][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 120 seconds [ 490.924940][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 120 seconds [ 490.936117][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 120 seconds [ 491.813874][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 491.890631][T20661] netlink: 'syz.4.3658': attribute type 13 has an invalid length. [ 491.954754][T20664] netlink: 'syz.4.3658': attribute type 8 has an invalid length. [ 491.968613][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3660'. [ 492.121929][T20650] netlink: 'syz.0.3654': attribute type 3 has an invalid length. [ 492.365306][T20679] tipc: Enabled bearer , priority 0 [ 492.373079][T20679] syzkaller0: entered promiscuous mode [ 492.378672][T20679] syzkaller0: entered allmulticast mode [ 492.412619][T20679] tipc: Resetting bearer [ 492.433831][T20678] tipc: Resetting bearer [ 492.476843][T20678] tipc: Disabling bearer [ 492.602807][T20684] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3666'. [ 492.644947][T20686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3667'. [ 492.840296][T20693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3668'. [ 493.047590][T20700] xt_bpf: check failed: parse error [ 493.148925][T20702] netlink: 'syz.1.3672': attribute type 1 has an invalid length. [ 493.185033][T20702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 493.200402][T20704] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 493.236024][T20704] netlink: 'syz.4.3671': attribute type 3 has an invalid length. [ 493.265572][T20704] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3671'. [ 493.425628][T20711] netlink: zone id is out of range [ 494.700527][T20785] netlink: 'syz.4.3692': attribute type 12 has an invalid length. [ 494.739419][T20785] netlink: 'syz.4.3692': attribute type 4 has an invalid length. [ 494.860107][T20794] __nla_validate_parse: 1 callbacks suppressed [ 494.860129][T20794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3695'. [ 495.383576][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 270 seconds [ 495.607745][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3701'. [ 496.158894][T20852] netlink: 'syz.1.3707': attribute type 2 has an invalid length. [ 496.167422][T20843] tipc: Enabled bearer , priority 0 [ 496.179441][T20843] syzkaller0: entered promiscuous mode [ 496.192882][T20843] syzkaller0: entered allmulticast mode [ 496.209242][T20854] netlink: 'syz.2.3708': attribute type 32 has an invalid length. [ 496.236226][T20854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3708'. [ 496.254695][T20843] tipc: Resetting bearer [ 496.339667][T20841] tipc: Resetting bearer [ 496.392815][T20841] tipc: Disabling bearer [ 496.702346][T20875] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 496.779304][T20877] veth0_to_batadv: entered promiscuous mode [ 496.788545][T20877] veth0_to_batadv: entered allmulticast mode [ 496.840109][T20866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3711'. [ 496.938606][T20885] batadv1: entered promiscuous mode [ 497.055668][T20885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3717'. [ 497.584284][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3722'. [ 497.779460][T20912] tipc: Started in network mode [ 497.785706][T20912] tipc: Node identity 86bbc2889e98, cluster identity 4711 [ 497.812941][T20912] tipc: Enabled bearer , priority 0 [ 497.928290][T20916] syzkaller0: entered promiscuous mode [ 497.951834][T20916] syzkaller0: entered allmulticast mode [ 498.121944][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'. [ 498.324831][T20939] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 501.003041][T20916] tipc: Resetting bearer [ 501.034592][T20911] tipc: Resetting bearer [ 501.084552][T20911] tipc: Disabling bearer [ 501.118822][ T40] tipc: Node number set to 404996744 [ 501.129720][T20946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3731'. [ 501.140587][T20945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3731'. [ 501.196260][T20953] syzkaller1: entered promiscuous mode [ 501.202104][T20953] syzkaller1: entered allmulticast mode [ 501.377467][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 501.404665][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 501.735434][T20966] netlink: 'syz.0.3738': attribute type 39 has an invalid length. [ 501.873449][T20970] dummy0: entered promiscuous mode [ 501.899639][T20970] bond0: entered promiscuous mode [ 501.912910][T20970] bond_slave_0: entered promiscuous mode [ 501.925712][T20970] bond_slave_1: entered promiscuous mode [ 501.945503][T20970] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 501.955684][T20970] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 501.966022][T20970] hsr1: entered allmulticast mode [ 501.971105][T20970] dummy0: entered allmulticast mode [ 501.976482][T20970] bond0: entered allmulticast mode [ 501.981884][T20970] bond_slave_0: entered allmulticast mode [ 501.987655][T20970] bond_slave_1: entered allmulticast mode [ 502.140908][T20974] xt_hashlimit: max too large, truncated to 1048576 [ 502.242296][T20974] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.378053][T20985] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000 [ 502.967488][T21013] netlink: 'syz.4.3748': attribute type 11 has an invalid length. [ 502.991937][T21013] netlink: 'syz.4.3748': attribute type 11 has an invalid length. [ 503.009943][T21013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3748'. [ 503.303075][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 503.313096][T21027] netlink: 'syz.3.3754': attribute type 30 has an invalid length. [ 503.713750][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'. [ 503.751743][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3759'. [ 503.760684][T21043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.891652][T21048] netlink: 'syz.0.3761': attribute type 64 has an invalid length. [ 503.902116][T21048] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3761'. [ 503.945412][ T30] audit: type=1804 audit(1766988382.286:8): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3761" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=799 res=1 errno=0 [ 503.981647][T21050] tipc: Enabled bearer , priority 0 [ 503.990414][ T30] audit: type=1800 audit(1766988382.286:9): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3761" name="cgroup.controllers" dev="tmpfs" ino=799 res=0 errno=0 [ 504.201092][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 504.874950][T21068] netlink: 'syz.2.3766': attribute type 16 has an invalid length. [ 504.883331][T21068] netlink: 'syz.2.3766': attribute type 17 has an invalid length. [ 506.699476][T21049] tipc: Disabling bearer [ 506.724795][T21060] : entered promiscuous mode [ 506.804927][T21069] netlink: 'syz.2.3766': attribute type 5 has an invalid length. [ 507.178514][T21099] netlink: 'syz.1.3775': attribute type 1 has an invalid length. [ 507.693272][T21119] netlink: 'syz.4.3779': attribute type 16 has an invalid length. [ 507.822939][T21129] nbd: must specify a size in bytes for the device [ 508.328086][T21155] bond0: (slave rose0): Enslaving as an active interface with an up link [ 508.785265][T21173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.886088][T21183] __nla_validate_parse: 4 callbacks suppressed [ 508.886105][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 508.917558][T21179] erspan0: entered promiscuous mode [ 508.923598][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 508.933360][T21185] netlink: 'syz.4.3794': attribute type 14 has an invalid length. [ 509.127388][T21193] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3797'. [ 509.150888][T21194] netlink: 'syz.0.3796': attribute type 12 has an invalid length. [ 509.177862][T21194] netlink: 'syz.0.3796': attribute type 29 has an invalid length. [ 509.186057][T21194] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3796'. [ 509.195435][T21194] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 509.435585][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 509.591059][T21210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.643362][T21210] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.773622][T21210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.793839][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 509.855286][T21215] geneve3: entered promiscuous mode [ 509.860580][T21215] geneve3: entered allmulticast mode [ 509.944760][ T313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.965115][ T313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.999215][ T313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 510.040725][ T313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 510.153054][T21236] netlink: 'syz.0.3808': attribute type 1 has an invalid length. [ 510.160886][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3808'. [ 510.223394][T21247] x_tables: duplicate underflow at hook 1 [ 510.230717][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 510.404907][T21255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3812'. [ 510.668953][T21262] openvswitch: netlink: Key 32 has unexpected len 7 expected 2 [ 510.692234][T21262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 510.705670][T21264] netlink: 'syz.2.3814': attribute type 11 has an invalid length. [ 510.956508][T21267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.343839][ T5927] IPVS: starting estimator thread 0... [ 511.501382][T21285] IPVS: using max 27 ests per chain, 64800 per kthread [ 512.573033][T21325] tipc: Enabling of bearer rejected, already enabled [ 512.877417][T21337] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 513.497740][T21367] netlink: 'syz.4.3840': attribute type 1 has an invalid length. [ 513.606714][T21367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.732957][T21374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.753551][T21374] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.805388][T21374] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 514.414766][T21378] veth3: entered promiscuous mode [ 514.454548][T21378] bond1: (slave veth3): Enslaving as an active interface with a down link [ 514.515228][T21391] dummy0: entered promiscuous mode [ 514.552404][T21396] __nla_validate_parse: 5 callbacks suppressed [ 514.552424][T21396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3847'. [ 514.665582][T21399] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 514.689321][T21399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3847'. [ 514.787441][T21403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3848'. [ 514.999589][T21411] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3850'. [ 515.065446][T21411] 0ªX¹¦À: renamed from caif0 [ 515.101762][T21411] 0ªX¹¦À: entered allmulticast mode [ 515.115157][T21411] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 515.563134][T21426] netlink: 'syz.4.3856': attribute type 1 has an invalid length. [ 515.597569][T21426] netlink: 'syz.4.3856': attribute type 2 has an invalid length. [ 515.614112][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'. [ 515.628430][T21429] netlink: 'syz.0.3857': attribute type 6 has an invalid length. [ 515.693339][T21430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3854'. [ 515.873628][T21449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.980125][T21452] netlink: 'syz.2.3861': attribute type 8 has an invalid length. [ 516.025593][T21460] netlink: 'syz.1.3864': attribute type 9 has an invalid length. [ 516.034115][T21460] netlink: 'syz.1.3864': attribute type 11 has an invalid length. [ 516.042195][T21460] netlink: 'syz.1.3864': attribute type 12 has an invalid length. [ 516.050219][T21460] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3864'. [ 516.060574][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 519.222736][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 520.981858][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 150 seconds [ 520.992759][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 150 seconds [ 521.003883][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 150 seconds [ 521.015200][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 150 seconds [ 525.471530][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 300 seconds [ 529.461473][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 549.942111][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 551.062057][ T25] block nbd2: Possible stuck request ffff888025148000: control (read@0,1024B). Runtime 180 seconds [ 551.072968][ T25] block nbd2: Possible stuck request ffff888025148200: control (read@1024,1024B). Runtime 180 seconds [ 551.084235][ T25] block nbd2: Possible stuck request ffff888025148400: control (read@2048,1024B). Runtime 180 seconds [ 551.095346][ T25] block nbd2: Possible stuck request ffff888025148600: control (read@3072,1024B). Runtime 180 seconds [ 555.061536][ T5837] Bluetooth: hci0: command 0x0405 tx timeout [ 555.541963][ T25] block nbd1: Possible stuck request ffff888025118000: control (read@0,1024B). Runtime 330 seconds [ 576.022253][ T31] INFO: task udevd:9880 blocked for more than 143 seconds. [ 576.029517][ T31] Not tainted syzkaller #0 [ 576.034711][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.043589][ T31] task:udevd state:D stack:21832 pid:9880 tgid:9880 ppid:1 task_flags:0x400140 flags:0x00080002 [ 576.055795][ T31] Call Trace: [ 576.059124][ T31] [ 576.062162][ T31] __schedule+0x14bc/0x5000 [ 576.066709][ T31] ? lockdep_hardirqs_on+0x98/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 576.072060][ T31] ? __pfx___schedule+0x10/0x10 [ 576.077397][ T31] ? schedule+0x91/0x360 [ 576.081977][ T31] schedule+0x165/0x360 [ 576.086184][ T31] io_schedule+0x80/0xd0 [ 576.090475][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 576.095886][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 576.101928][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 576.107528][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 576.113417][ T31] do_read_cache_folio+0x1ad/0x590 [ 576.118568][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 576.124361][ T31] read_part_sector+0xb6/0x2b0 [ 576.129179][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 576.134664][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 576.140250][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 576.146321][ T31] bdev_disk_changed+0x75f/0x14b0 [ 576.151514][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 576.157031][ T31] blkdev_get_whole+0x380/0x510 [ 576.162075][ T31] bdev_open+0x31e/0xd30 [ 576.166378][ T31] blkdev_open+0x457/0x600 [ 576.170856][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 576.175924][ T31] do_dentry_open+0x7ce/0x1420 [ 576.180747][ T31] vfs_open+0x3b/0x340 [ 576.186538][ T31] ? path_openat+0x33f3/0x3dd0 [ 576.191668][ T31] path_openat+0x340e/0x3dd0 [ 576.196323][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 576.201876][ T31] ? stack_depot_save_flags+0x40/0x850 [ 576.207402][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 576.213139][ T31] ? getname_flags+0xb8/0x540 [ 576.217864][ T31] ? __pfx_path_openat+0x10/0x10 [ 576.222906][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 576.227928][ T31] do_filp_open+0x1fa/0x410 [ 576.232628][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 576.237736][ T31] ? _raw_spin_unlock+0x28/0x50 [ 576.242858][ T31] ? alloc_fd+0x64c/0x6c0 [ 576.247253][ T31] do_sys_openat2+0x121/0x200 [ 576.252035][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.257413][ T31] __x64_sys_openat+0x138/0x170 [ 576.263343][ T31] do_syscall_64+0xfa/0xf80 [ 576.267918][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.274176][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.278908][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.285001][ T31] RIP: 0033:0x7fcf9eaa7407 [ 576.289463][ T31] RSP: 002b:00007ffdd52b8d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 576.298282][ T31] RAX: ffffffffffffffda RBX: 00007fcf9f199880 RCX: 00007fcf9eaa7407 [ 576.306730][ T31] RDX: 00000000000a0800 RSI: 000055875b96b520 RDI: ffffffffffffff9c [ 576.314882][ T31] RBP: 000055875b96a910 R08: 0000000000000000 R09: 0000000000000000 [ 576.323031][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055875b97f830 [ 576.331208][ T31] R13: 000055875b978190 R14: 0000000000000000 R15: 000055875b97f830 [ 576.339534][ T31] [ 576.391458][ T31] [ 576.391458][ T31] Showing all locks held in the system: [ 576.399245][ T31] 1 lock held by khungtaskd/31: [ 576.460590][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 576.480101][ T31] 2 locks held by getty/5586: [ 576.485637][ T31] #0: ffff8880303b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 576.495804][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 576.506348][ T31] 1 lock held by udevd/9880: [ 576.511069][ T31] #0: ffff888024f8e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 576.531884][ T31] 1 lock held by udevd/9921: [ 576.536570][ T31] #0: ffff88802502d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 576.561597][ T31] 1 lock held by syz-executor/17735: [ 576.566959][ T31] 1 lock held by syz-executor/18099: [ 576.582122][ T31] #0: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 576.611283][ T31] 4 locks held by syz-executor/18500: [ 576.616724][ T31] 1 lock held by syz-executor/18504: [ 576.631298][ T31] #0: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 576.651667][ T31] [ 576.654126][ T31] ============================================= [ 576.654126][ T31] [ 576.701283][ T31] NMI backtrace for cpu 0 [ 576.701310][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 576.701329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.701339][ T31] Call Trace: [ 576.701346][ T31] [ 576.701354][ T31] dump_stack_lvl+0x189/0x250 [ 576.701383][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.701404][ T31] ? __pfx__printk+0x10/0x10 [ 576.701439][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 576.701464][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 576.701489][ T31] ? __pfx__printk+0x10/0x10 [ 576.701516][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.701545][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 576.701570][ T31] sys_info+0x135/0x170 [ 576.701596][ T31] watchdog+0xf95/0xfe0 [ 576.701624][ T31] ? watchdog+0x20a/0xfe0 [ 576.701654][ T31] kthread+0x711/0x8a0 [ 576.701678][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.701701][ T31] ? __pfx_kthread+0x10/0x10 [ 576.701726][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.701756][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 576.701774][ T31] ? __pfx_kthread+0x10/0x10 [ 576.701800][ T31] ret_from_fork+0x599/0xb30 [ 576.701823][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.701853][ T31] ? __switch_to_asm+0x39/0x70 [ 576.701875][ T31] ? __switch_to_asm+0x33/0x70 [ 576.701896][ T31] ? __pfx_kthread+0x10/0x10 [ 576.701919][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.701960][ T31] [ 576.701967][ T31] Sending NMI from CPU 0 to CPUs 1: [ 576.853764][ C1] NMI backtrace for cpu 1 [ 576.853782][ C1] CPU: 1 UID: 0 PID: 17412 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 576.853802][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.853813][ C1] RIP: 0010:kasan_check_range+0x92/0x2c0 [ 576.853840][ C1] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 49 ff c3 [ 576.853856][ C1] RSP: 0018:ffffc9000c5ffb00 EFLAGS: 00000202 [ 576.853872][ C1] RAX: 0000000000000001 RBX: dffffc0000000001 RCX: ffffffff821a9422 [ 576.853885][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00022f88f4 [ 576.853896][ C1] RBP: 0000000000000000 R08: ffffea00022f88f7 R09: 1ffffd400045f11e [ 576.853908][ C1] R10: dffffc0000000000 R11: fffff9400045f11e R12: 0000000000000001 [ 576.853919][ C1] R13: ffffc90003403101 R14: fffff9400045f11f R15: 1ffffd400045f11e [ 576.853933][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 576.853947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.853958][ C1] CR2: 00007f35a7717d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 576.853974][ C1] Call Trace: [ 576.853980][ C1] [ 576.853990][ C1] ___free_pages+0xb2/0x230 [ 576.854014][ C1] vfree+0x25a/0x400 [ 576.854040][ C1] ? __pfx_kcov_close+0x10/0x10 [ 576.854065][ C1] kcov_close+0x28/0x50 [ 576.854086][ C1] __fput+0x44c/0xa70 [ 576.854115][ C1] task_work_run+0x1d4/0x260 [ 576.854141][ C1] ? __pfx_task_work_run+0x10/0x10 [ 576.854166][ C1] ? kmem_cache_free+0x197/0x620 [ 576.854183][ C1] ? do_exit+0x6c0/0x2310 [ 576.854209][ C1] do_exit+0x6c5/0x2310 [ 576.854239][ C1] ? __pfx_do_exit+0x10/0x10 [ 576.854266][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.854293][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 576.854312][ C1] do_group_exit+0x21c/0x2d0 [ 576.854339][ C1] __x64_sys_exit_group+0x3f/0x40 [ 576.854362][ C1] x64_sys_call+0x2210/0x2210 [ 576.854385][ C1] do_syscall_64+0xfa/0xf80 [ 576.854404][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.854421][ C1] ? clear_bhb_loop+0x60/0xb0 [ 576.854441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.854458][ C1] RIP: 0033:0x7f4faa98f749 [ 576.854471][ C1] Code: Unable to access opcode bytes at 0x7f4faa98f71f. [ 576.854481][ C1] RSP: 002b:00007ffc153fab08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 576.854498][ C1] RAX: ffffffffffffffda RBX: 00007f4faaa1585d RCX: 00007f4faa98f749 [ 576.854511][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 576.854521][ C1] RBP: 00007f4faaa1586f R08: 00007ffc153f88a7 R09: 00000000000927c0 [ 576.854533][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 576.854544][ C1] R13: 00000000000927c0 R14: 000000000007df84 R15: 00007ffc153facb0 [ 576.854566][ C1] [ 577.605313][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 577.612246][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 577.621415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.631519][ T31] Call Trace: [ 577.634847][ T31] [ 577.637818][ T31] dump_stack_lvl+0x99/0x250 [ 577.642455][ T31] ? __asan_memcpy+0x40/0x70 [ 577.647088][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.652329][ T31] ? __pfx__printk+0x10/0x10 [ 577.656985][ T31] vpanic+0x237/0x6d0 [ 577.661012][ T31] ? __pfx_vpanic+0x10/0x10 [ 577.665560][ T31] ? preempt_schedule_common+0x83/0xd0 [ 577.671110][ T31] panic+0xb9/0xc0 [ 577.674881][ T31] ? __pfx_panic+0x10/0x10 [ 577.679351][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 577.684775][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 577.690985][ T31] watchdog+0xfdf/0xfe0 [ 577.695196][ T31] ? watchdog+0x20a/0xfe0 [ 577.699575][ T31] kthread+0x711/0x8a0 [ 577.703699][ T31] ? __pfx_watchdog+0x10/0x10 [ 577.708426][ T31] ? __pfx_kthread+0x10/0x10 [ 577.713072][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.718315][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 577.723554][ T31] ? __pfx_kthread+0x10/0x10 [ 577.728182][ T31] ret_from_fork+0x599/0xb30 [ 577.732806][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 577.737997][ T31] ? __switch_to_asm+0x39/0x70 [ 577.742798][ T31] ? __switch_to_asm+0x33/0x70 [ 577.747604][ T31] ? __pfx_kthread+0x10/0x10 [ 577.752239][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.757066][ T31] [ 577.761608][ T31] Kernel Offset: disabled [ 577.765989][ T31] Rebooting in 86400 seconds..