last executing test programs: 2.070569946s ago: executing program 1 (id=3810): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x73ea, @mcast1, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42080000000000000025208a0e2f964e0000c534a6324d6193fcf109000000818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xf0) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x67, 0x4, 0x2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7, 0x10, 0x6, 0x2}}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, 0x0, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0xe, r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r7 = socket(0xa, 0x3, 0x3a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000006c3a03c9e5b0da456e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r8, r9, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001380)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="00bcdf9c87fd34c84501129fa6f877055d4003000016acac02f187cc49a0913de4c5d07a275d8c6a516b8a1ab690943f9b4f3e6d86d615c8b292827b39e30dba61c0de1d9c0b8c1032aec1e228fe84d84c7322fc5b19102fc4de72776062e8baab4e64c4ef31eed1648793b89917055245cee178508cb18471afc68726a3411ca03f6796eed39451142f7808a8f573c8", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000400), 0x4) sendmmsg$inet(r11, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11030, r11, 0x683e7000) 1.902184486s ago: executing program 0 (id=3811): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000080171121e0000220000000000000017dd333166b447d79fc8cf4c5d98b2bacce6377337d518ca6ff17a877cd3d6b836dd2df0974eb8194b9910a0cdd2ef8eaa2890a4f896797b5bca14bc882f9855978043b11ba58d975ccf30c21e6077ac8ba24fa4e7ceb553c7808679e9def508498a22e0d3752c1faface871d8407335334601ada4b2c4db7aaced3feb8ba7b4fe90b456244dd47c4a448733c2a04f3f442130a9cf48a9c7629dc42a3f6df9e7f2add92c540b01157dc07d2a1fb9c2448494c3e336f9f77584e0df9a46ddb2851dceb4badc12a1343d9b917c195f0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.554527582s ago: executing program 0 (id=3816): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000600)="d0da68442e78cb30f65c315d3705d630ce85c3a3", 0x14) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, r3, 0x0) 1.472776045s ago: executing program 0 (id=3817): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x6, 0x37e7, 0x40, @private2, @local, 0x7, 0x0, 0x1, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x6, 0x37e7, 0x40, @private2, @local, 0x7, 0x0, 0x1, 0x1}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="06"], 0x9) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000804) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.32177857s ago: executing program 0 (id=3819): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="040000000400000004000000dddf000014000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000ff00000000000000bfac54f00f0b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x39, 0x2, 0x70bd26, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x31, 0x0, 0x0, @fd=r0}, @generic="af60eb45d0857a44f79f72266c4eaffa09a39539b96907fcb0914841b944428b73fae32c002069f78b66bc1c72b9063b1c8d375f5b37ead29b03dfe489bd14e3bc28a553bdd8c7434ad7"]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e24, 0xcb, @remote, 0x3}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, 0x0, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4080) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r1) r6 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000400)={r6, 0x3, 0x200, 0x6}) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10) close(r8) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000002700)=""/4104, 0x1008}, {&(0x7f0000000140)=""/144, 0x90}], 0x5}, 0x0) 1.321443516s ago: executing program 3 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000050000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.250068317s ago: executing program 3 (id=3821): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0xa, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x880) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000280)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gre0\x00'}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/164, 0xa4, 0xea, 0x6}) 1.248680081s ago: executing program 2 (id=3822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) write$nbd(r0, &(0x7f0000000540)=ANY=[@ANYRES8=r0], 0xf9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x7, 0x8, 0x5e, 0x1], 0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffa, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x9, 0x8, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000680)=0x8038c0a232133e8e) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e21, 0x4, 0x4e21, 0x7b7, 0x2, 0x20, 0x80, 0x2f, 0x0, r4}, {0x80000001, 0x0, 0x2, 0x9, 0x2, 0x8, 0x0, 0x10000000000000}, {0xe, 0x2, 0x1, 0x2}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x7, 0x1}, {{@in=@remote, 0x4d5, 0x2b}, 0x8, @in6=@mcast2, 0x3507, 0x3, 0x1, 0x10, 0xf0, 0x181eb2d6, 0x9}}, 0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000640)=r3) 1.063324911s ago: executing program 2 (id=3824): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="401010000041040020d660323700000000cb2d9300128008000100677265001400028008000700ac427a9ee21059a55edf929a6f3b2b1709c09025f662ac86ddd0ed7840b349e7617e98617a4775b02a5de0afe947fe2f93ada41593"], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="401010000041040020d660323700000000cb2d9300128008000100677265001400028008000700ac427a9ee21059a55edf929a6f3b2b1709c09025f662ac86ddd0ed7840b349e7617e98617a4775b02a5de0afe947fe2f93ada41593"], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040000) 1.024462731s ago: executing program 4 (id=3825): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x62, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x4, 0xf, 0x59}, 0x2c) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) socket$kcm(0x10, 0x2, 0x0) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x62, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x4, 0xf, 0x59}, 0x2c) (async) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20000000) (async) 870.1127ms ago: executing program 2 (id=3826): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x44000000) recvmsg(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffdbe, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f0000001000)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x9}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xdf}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xc000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4014) 822.379168ms ago: executing program 1 (id=3827): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xc, 0x6, 0x7c, @loopback, @local, 0x1, 0x0, 0x5, 0x6}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e21, 0x2, 0x4e22, 0x6, 0xa, 0x80, 0x20, 0x21, r1, 0xffffffffffffffff}, {0xb, 0x4, 0x7fffffffffffffff, 0xf, 0x0, 0x8, 0x1, 0x7fffffffffffffff}, {0xe, 0x84, 0x5, 0x235b}, 0xbe7d, 0x6e6bb7, 0x1, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d5, 0xff}, 0xa, @in=@loopback, 0x3500, 0x0, 0x0, 0x5, 0x2, 0x3, 0xede7}}, 0xe8) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000abaff9), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="fb439f9a6aeef828dca4f667964ca4d7b66af974d19296cc6efda8e1d209cac6b9d83ce3fbe0de199ed717f3f3eae6b9a5122c9c7cba5ec54d34752861276c26a49a6484c23a8bf7afb1045efafc113c1e0276f01fc08acf05dec322", 0x5c}, {&(0x7f0000000080)="8db8f6", 0x3}], 0x2) 821.837311ms ago: executing program 4 (id=3828): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000500)={0x0, 0x7}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={r3, @in6={{0xa, 0x4e21, 0x5, @empty, 0x66a}}, 0x2, 0xc, 0x7, 0x1, 0x20, 0x1ff, 0x1}, 0x9c) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140b, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x126, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0xf0, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @empty, @mcast1, [@routing={0x3c, 0x4, 0x1, 0x9, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x2a}]}, @routing={0x32, 0xa, 0x1, 0x5, 0x0, [@local, @local, @mcast2, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @hopopts={0xc}, @srh={0x2b, 0x6, 0x4, 0x3, 0x9, 0x0, 0x3ff, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}]}}}}}}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0xcd, r7, 0x5}, 0xc) 821.377076ms ago: executing program 3 (id=3829): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="4b39050000000000240012800b00010069703667726500001400028008cc5e9a6071a2989e668217b8d3000100", @ANYRES32=r2, @ANYBLOB="0800050004000000"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000010) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) (async) sendto$packet(r1, &(0x7f0000000200)="2b901d11aac0ed273425f67af22734c7c75d6f66242d29f7b77ac356d44fd20d87605aafd7a518841754fa6c46d0536d797c48883eac398916db8af6b6a404fc690090989e1bc0945c67c2e11f", 0x4d, 0x80, &(0x7f0000000080)={0x11, 0xf5, r2, 0x1, 0x3, 0x6, @local}, 0x14) 717.758961ms ago: executing program 2 (id=3830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) 703.890359ms ago: executing program 1 (id=3831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xff4, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xf90, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xf65, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xf, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) 649.65339ms ago: executing program 3 (id=3832): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x612, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x5dc, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x75, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x7, 0x34e, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x7, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a4fdd7a6ccb2535880a0d"], 0x26}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "9a9ddc556e33d65b", "f3d1a48aeef55e718e89fea2d9e346a5", "3ebce694", "e72e1cdf46547355"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) (async) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'team_slave_0\x00', {}, 0x1}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'team_slave_0\x00', {}, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="dc0000001e00010a00000000000000000002"], 0xdc}}, 0x0) socket(0x10, 0x80003, 0x0) (async) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x0, 0x3, [0x4, 0xf, 0x3, 0x100]}) 620.17143ms ago: executing program 4 (id=3833): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x1, 0x2, 0x2, 0x2}}, 0x2e) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) 592.344412ms ago: executing program 1 (id=3834): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) connect$x25(r0, &(0x7f0000000080), 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xe2, "cb36070e79cbbd347b41013269a8700a10dde5805dc7237f87a67e34d425affde1ea0af1606e6e942c2970155c66d542c7026bf9711caa5ac6157a00e55d9dd1099a2c4f56c6012c30deada762dac7693b4e61299148e2f45051518473e59b4277bc5b4e0aa7537c92be79c5490913a8453d35c919c6f06cd51b0014c69b2ef86482948ebcfd720b6ea751d94a1e55a138ac99655f68a031b2c154236e52a148eaf14e5ffe2f0f7de1108bd2c20db95172784757df327f21837cae0c7a4c7538551143ad7e2c68ce29737d48fcd57f853a575c53e83549ec68cd4925551e37ad3247"}, &(0x7f0000000300)=0xea) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r3, &(0x7f0000000380)=0x4) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)={0x1ff, 0x5, 0x1, 0x7, 0x3, 0x0, [{0x7, 0x3, 0x9911, '\x00', 0x2000}, {0x4, 0x4, 0x401, '\x00', 0x2}, {0x5, 0x8000000000000, 0x3, '\x00', 0x1005}]}) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000680)=0x3) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0xfb}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x800) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000880)={r4, 0xc4, "df6bcb2aa5121143564003cc7b97ed84730acc79646ab5227dc3e8a7478c4621eb4c2226a98323f2ff710d4ac0f51c55badcb8358d239daf72eebdb4e89cb2cd79897ebccd0a03b3fe7bcf07a9663d528028ed8f0545904464e580c6c42ea984fed9421b20690c2465c29048c4ef99e4373dba4ae8905e19163dfc2f6de8f4f59a9be2273575e9df3c74dddae6843a6450a9dda2d2a0f0addcf204952a5a62b81fb81df52aa6b1227e7da5d4705f7f0101709e3e0c1dc82d8b45b775cfb02c95a92ba3c2"}, &(0x7f0000000980)=0xcc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg0\x00'}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bind$netlink(r1, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'ip6erspan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x64}}, 0x24000040) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0xa000, 0x0, 0x400000, 0x3}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000c80)={r0}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000cc0)={r5, r5, 0x4, r5}, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r5) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x180, r10, 0x204, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4044}, 0x4040) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0xffffffffffffffff, 0x95d, 0x8}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001300)={&(0x7f0000000f80)="1a63c72971c9c948401278512cf780a78626a12c35edf2affc1793fed946f04b558f8f4268279b238b9cf32160c736c5ddc158f4e24fb736f019be44e1e6c91c40c914b23410394e787e99f2ebc9f47a4be2b82a05cddaf40ed48e050dee1c42ac1260fe3b797b11f546489b1bd5a4716550120ac8d48730a7f8e69a2a6047144d285cbd65610af5e75b9920118b68b6d0acf461d14879d76ca0bb1266c74764eb8b9d540175c06063f1682c5f62c228286bc4abb8891c", &(0x7f0000001040)=""/240, &(0x7f0000001140)="2e6c82a0ee25f3d55d0650394e14aec29949559a58e7c6d81c560d3eb0ade5fae0e09bee0848c537021753f58c57d31282c2f669d7dd6f0d22e6f1ed852319b6f40b28485f2ddfd858024d959195a5ebb70071fc153cbea444baee5c0d23dc8a51363c0181f1fb0d14e741054f88d70b0de4bef1c78e375189086b2b4e3044462169c6c14f6951b18680d16812b16cfc1909c1cbf66ea054db471feaafc2d48c2559a565764cff8b7bc62b08dfe5015257e4bc6e", &(0x7f0000001200)="96d1d9703867f03aba48ab73f41b511951143050641feecc92406d908f5c27435bd99961a9f9ea8b982ecf7fd60c2b869f9922eebf9eed324a4bf5d62c4fad86e2965f9a09600854925357a27751ccbd307ae7c783e7dd856b6dd5a21c25a2e0efda226cdc1a82164b41bed5d2d49f52fa353f9f47b4cc29c5cbdc3430f1e9b187d4ed2c330ca1a15abe22bd6e6bc00c76b1214b054239c845cab7f6b4bfad6d540d119d60a845a9a0d034", 0xc827, r11, 0x4}, 0x38) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) 586.978197ms ago: executing program 3 (id=3835): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x1d8, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x562, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @jmp={0x5, 0x1, 0x4, 0x8, 0x5, 0x6, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x3, 0x5, 0x9, 0x40, 0x10}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0x79, &(0x7f0000000140)=""/121, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xc, 0x4d, 0x20000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x27, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async) bind$inet(r4, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r5, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r5, 0x2}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x1, 0x3, 0x1, 0x0, 0x9, 0xffffffffffffffc0, 0x8}, @ldst={0x1, 0x1, 0x6, 0x1, 0x4, 0x40, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x6, 0x7e, &(0x7f0000000840)=""/126, 0x41100, 0x54, '\x00', r2, 0x18, r6, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x8001, 0xc}, 0x10, 0x20d88, r1, 0x6, &(0x7f0000000940), &(0x7f0000000d80)=[{0x1, 0x4, 0xd}, {0x5, 0x5, 0x9, 0x9}, {0x0, 0x5, 0x3, 0x2}, {0x5, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x3, 0x8}, {0x2, 0x4, 0x2}]}, 0x94) 517.990206ms ago: executing program 2 (id=3836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x9}, 0xc) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0x9}, &(0x7f0000000040)=0x8) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 481.030474ms ago: executing program 4 (id=3837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008b0000000000000000000000b7080000050000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000002007080000f8f7ffffbfa400000000000007040000f0ffffffb700000008cd7c8543b60e56", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) 478.812462ms ago: executing program 1 (id=3838): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x40880) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 405.780191ms ago: executing program 0 (id=3839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000a402d582df466394b285b43e58871de091a68c9fa295aaed38fcf9a845d7b482f87c525150d99d43732f09dcdd833cbe7a4793b0fe4072632f36cb970381f2692ceba94510d238dd4b18e5aba5a238cfb8b3880839a16fe825063a844c31f937baee69c6276d45647e693923a0f608abc8d9deef7efa80906c94e2983b55c7c5ebad591d56470a2a2510bead588de0df1978a8926bce4bd8bf41a2653d1aed6c0c2027878b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x6, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x38, 0x9, 0x2, 0x12900, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @value=r1}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x40, 0x1, 0x6ac, 0xa35f, 0xfffffffd, 0x2}, &(0x7f0000000240)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x40, 0x1, 0x6ac, 0xa35f, 0xfffffffd, 0x2, 0x0, 0x0}, &(0x7f0000000240)=0x20) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'geneve1\x00', 0xfffffffffffffffc}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={r5, 0x6c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, @in6={0xa, 0x4e24, 0xd1bb, @dev={0xfe, 0x80, '\x00', 0x30}, 0x401}]}, &(0x7f0000000340)=0x10) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000000c0)) (async) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 405.331355ms ago: executing program 3 (id=3840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7f}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x440b0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x7, 0x8160}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x6}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 353.006725ms ago: executing program 4 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) accept4$tipc(r4, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x80800) (async) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x24000005}, 0x8081) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) accept4$tipc(r4, 0x0, 0x0, 0x80800) (async) 209.653527ms ago: executing program 0 (id=3842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x2, [@volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @enum64={0x7, 0x5, 0x0, 0x13, 0x0, 0x6, [{0x7, 0x5, 0x800}, {0x10, 0x8, 0x68}, {0xf, 0x4, 0xc44}, {0xe, 0x5, 0x4}, {0x8, 0xd7, 0x8}]}]}}, 0x0, 0x9a, 0x0, 0xa}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc0000003100000827bd7000fa08002500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000a400128009000100766c616e00000000940002800c000200120000001700000006000100000000000c00020005000000100000000600050088a800000c0002001b00000010000000280004800c00010000100000020000000c00010007000000040000000c0001000000000001000080280003800c00010000000000625f00000c000100470f0000070000000c00010004000000020000000c000200190000000400000008000500", @ANYRES32=r3, @ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x350a018}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=@can_newroute={0x28c, 0x18, 0x200, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_LIM_HOPS={0x5, 0xd, 0x58}, @CGW_CS_CRC8={0x11e, 0x6, {0x44, 0x2, 0x22, 0x7, 0x3, "065d4afaa18db777106b44a93b74a87b16dac771f7255e50d771e9b65433d3be6cfe0c09062c5de1c2d4bb7e429b1333a7f4fa7a9691b22f9a2994b1799351f643eb973f0a6343ef0e6cebe638d4b48f21f81a5529644e115f3b1899b73bcf146312bd35ac8b58286b3d36ca2ed64b18a19e9a8c506ae2ef89c9720c974addb5a4fd7402df1079c3dabd6401d0577b34ff7020f0aaf741f3da10e52464d7a369c713bcb27ad830e3c3296c8f631d0751c785309e83fdbbaff59d099dde82d2af8a4772cd62abe53aa2b2b022f80ad1f1a62388a5f6e47e807897bb76233e5a6b5ad2abdeeeee00e9a78b0795b280140375d24ed16e854b00", 0x1, "ddc6dbfcb1a0c3b5e64986b876fa07e284472aa6"}}, @CGW_LIM_HOPS={0x5, 0xd, 0xff}, @CGW_MOD_UID={0x8, 0xe, r6}, @CGW_CS_CRC8={0x11e, 0x6, {0x2b, 0x7a, 0x3, 0x5, 0x2, "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", 0x1, "9ddb7bc059d7dfd210dfe39843aadd2a6290aa73"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff9, 0x5, 0xffffffffffffffff, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffd, 0xffffffffffffffff, 0x4, 0x9}}, @CGW_LIM_HOPS={0x5}, @CGW_LIM_HOPS={0x5, 0xd, 0x39}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 92.444693ms ago: executing program 2 (id=3843): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xfffffffa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x1405, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x844}, 0xc804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="c80000001000090cadda42bc98ffffffffffff0061a2c1650087b66131afb018255f43339823a0a700003df5951189a91577d14fa1ad18526e139d6aba0ae16eaace646c4aafa0dfe5bd89173462c72d00c6f8a4da98b43029612fbf2dcc6e4758390fc0832c4cbb745bbdc9c2136ee21cfc0c83288386e1cab7725d6a40fb192f2acc743c7183d3118872e8e338a17a5a9e60076082d14d1bca0f65d5d0b8aa47fa78d3d1682aeb0e485ddf712ca7e31516ee0d521d77640a09581f30d5fe67b6b91b58970f45bcb6499458c193110e4a86d8531be1c0331eb5fb5d8ad9f314b067f1c516c2e708697c24e9c787f9e6a59d48d5c465ed85", @ANYRES32=0x0, @ANYBLOB="8100050000000000280012800b0001006272696467650000180002800c002300000000000000000005002a0001000000"], 0x48}}, 0x0) 91.675204ms ago: executing program 4 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf6fec5eade4bb02aa4f152b8bdfdf8ffffffffffeeff547930a8abf35fd3908aa4e150e020a1a45f8d6700ff00000000f669011b4504090bc057a5cdb706ceac9856bad67505a783d6f5d0542b83f636ab45c12311d14da9bf"], 0x0, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x1, 0x7f8f5cbb, 0x68, {{0x17, 0x4, 0x1, 0x3, 0x5c, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @multicast2, {[@generic={0x83, 0x4, 'F\t'}, @lsrr={0x83, 0x7, 0x68, [@local]}, @lsrr={0x83, 0xb, 0xe2, [@empty, @local]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0x4, "32ba"}, {0x7, 0xb, "4ca6b46e669271f9e3"}, {0x6, 0xd, "e8f9b5987adaa49127dc3d"}, {0x0, 0x4, "032e"}]}, @ssrr={0x89, 0xb, 0xec, [@remote, @multicast1]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@struct={0x6, 0x4, 0x0, 0x4, 0x1, 0xed71, [{0x0, 0x2, 0x1ff}, {0xc, 0x5, 0x2}, {0xc, 0x2, 0x6}, {0x10, 0x5, 0xffffffff}]}, @typedef={0x6}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {0xc, 0x4}]}, @enum64={0x2, 0x5, 0x0, 0x13, 0x1, 0x6, [{0x3, 0x3, 0x5}, {0x7, 0x6, 0x200}, {0xd, 0x2, 0x6}, {0xa, 0x9}, {0x10, 0x1, 0x7}]}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/215, 0xdf, 0xd7, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r2, r3, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000000580)}, 0x10) 0s ago: executing program 1 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0xbc, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x10}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x1f91, 0x9}) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048891}, 0x20040084) kernel console output (not intermixed with test programs): 02] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 280.954226][T14102] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2189'. [ 280.964398][T14102] netlink: 'syz.3.2189': attribute type 5 has an invalid length. [ 281.726180][T14133] openvswitch: netlink: Duplicate or invalid key (type 0). [ 281.733471][T14133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.793940][T14137] openvswitch: netlink: Duplicate or invalid key (type 0). [ 281.809670][T14137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.815963][T14135] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 281.858834][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2197'. [ 281.903490][T14139] bond9 (unregistering): Released all slaves [ 282.004001][T14142] syzkaller0: entered promiscuous mode [ 282.010222][T14142] syzkaller0: entered allmulticast mode [ 282.289826][T14168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2209'. [ 282.320949][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 282.331396][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2204'. [ 282.342108][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 282.359454][T14168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.374213][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2204'. [ 282.576565][ T25] block nbd1: Possible stuck request ffff888026480000: control (read@0,1024B). Runtime 120 seconds [ 282.587484][ T25] block nbd1: Possible stuck request ffff888026480200: control (read@1024,1024B). Runtime 120 seconds [ 282.598589][ T25] block nbd1: Possible stuck request ffff888026480400: control (read@2048,1024B). Runtime 120 seconds [ 282.610085][ T25] block nbd1: Possible stuck request ffff888026480600: control (read@3072,1024B). Runtime 120 seconds [ 283.337008][T14228] bond9: option miimon: invalid value (18446744073709551585) [ 283.345619][T14228] bond9: option miimon: allowed values 0 - 2147483647 [ 283.390043][T14228] bond9 (unregistering): Released all slaves [ 283.492584][T14221] netlink: 'syz.4.2224': attribute type 3 has an invalid length. [ 283.897698][T14263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.534974][T14297] sctp: [Deprecated]: syz.0.2246 (pid 14297) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.534974][T14297] Use struct sctp_sack_info instead [ 284.902381][T14312] 0 (unregistering): left promiscuous mode [ 285.521179][T14341] bond9 (unregistering): Released all slaves [ 285.915374][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 285.923502][ C0] lec:lec_tx_timeout: lec0 [ 285.928518][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 285.960440][T14370] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 285.974622][T14370] __nla_validate_parse: 6 callbacks suppressed [ 285.974643][T14370] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2267'. [ 285.992200][T14370] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 286.206700][T14372] syzkaller0: entered promiscuous mode [ 286.212857][T14372] syzkaller0: entered allmulticast mode [ 286.275539][T14379] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2271'. [ 286.284642][T14379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2271'. [ 286.370050][T14385] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2269'. [ 286.542887][T14387] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2273'. [ 286.688190][T14401] tipc: Enabled bearer , priority 0 [ 286.731684][T14404] syzkaller0: entered promiscuous mode [ 286.745840][T14404] syzkaller0: entered allmulticast mode [ 286.753402][T14401] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2277'. [ 286.864909][T14411] tipc: Resetting bearer [ 287.020112][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 287.629321][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.711090][T14460] sch_fq: defrate 0 ignored. [ 287.763933][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 287.817461][T14469] sctp: [Deprecated]: syz.1.2297 (pid 14469) Use of int in max_burst socket option deprecated. [ 287.817461][T14469] Use struct sctp_assoc_value instead [ 287.943241][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 287.959800][T14477] rdma_rxe: rxe_newlink: failed to add lo [ 288.039230][T14485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.167967][T14491] netlink: 'syz.3.2304': attribute type 2 has an invalid length. [ 288.184795][T14491] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2304'. [ 288.298680][T14497] Cannot find del_set index 5 as target [ 288.808634][T14524] netlink: 'syz.2.2314': attribute type 7 has an invalid length. [ 288.973398][T14534] xfrm2: entered allmulticast mode [ 288.988853][T14537] geneve3: entered promiscuous mode [ 288.994500][T14537] geneve3: entered allmulticast mode [ 289.002747][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.036678][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.052825][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.071992][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.172819][T14545] FAULT_INJECTION: forcing a failure. [ 289.172819][T14545] name failslab, interval 1, probability 0, space 0, times 1 [ 289.220515][T14545] CPU: 0 UID: 0 PID: 14545 Comm: syz.3.2319 Not tainted syzkaller #0 PREEMPT(full) [ 289.220545][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.220560][T14545] Call Trace: [ 289.220568][T14545] [ 289.220577][T14545] dump_stack_lvl+0xe8/0x150 [ 289.220612][T14545] should_fail_ex+0x412/0x560 [ 289.220644][T14545] should_failslab+0xa8/0x100 [ 289.220674][T14545] __kmalloc_noprof+0xe8/0x760 [ 289.220697][T14545] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 289.220734][T14545] tomoyo_realpath_from_path+0xe3/0x5d0 [ 289.220775][T14545] ? tomoyo_path_number_perm+0x219/0x630 [ 289.220800][T14545] tomoyo_path_number_perm+0x246/0x630 [ 289.220828][T14545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.220856][T14545] ? __lock_acquire+0x6b5/0x2cf0 [ 289.220903][T14545] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 289.220946][T14545] ? __fget_files+0x2a/0x420 [ 289.220980][T14545] ? __fget_files+0x2a/0x420 [ 289.221008][T14545] ? __fget_files+0x3a0/0x420 [ 289.221037][T14545] ? __fget_files+0x2a/0x420 [ 289.221072][T14545] security_file_ioctl+0xc3/0x2a0 [ 289.221098][T14545] __se_sys_ioctl+0x47/0x170 [ 289.221126][T14545] do_syscall_64+0x14d/0xf80 [ 289.221155][T14545] ? trace_irq_disable+0x3b/0x150 [ 289.221185][T14545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.221206][T14545] ? clear_bhb_loop+0x40/0x90 [ 289.221232][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.221252][T14545] RIP: 0033:0x7f417b79c799 [ 289.221271][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.221290][T14545] RSP: 002b:00007f417c711028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.221313][T14545] RAX: ffffffffffffffda RBX: 00007f417ba15fa0 RCX: 00007f417b79c799 [ 289.221328][T14545] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 289.221342][T14545] RBP: 00007f417c711090 R08: 0000000000000000 R09: 0000000000000000 [ 289.221355][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.221367][T14545] R13: 00007f417ba16038 R14: 00007f417ba15fa0 R15: 00007ffeec215398 [ 289.221401][T14545] [ 289.221410][T14545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.369905][T14549] netlink: 'syz.4.2321': attribute type 2 has an invalid length. [ 289.553432][T14557] netlink: 'syz.0.2322': attribute type 12 has an invalid length. [ 289.868246][T14577] bridge0: left allmulticast mode [ 290.346777][T14611] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.365847][T14613] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.935339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 290.943464][ C0] lec:lec_tx_timeout: lec0 [ 290.949011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 291.192628][T14665] __nla_validate_parse: 9 callbacks suppressed [ 291.192648][T14665] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2361'. [ 291.209722][T14665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2361'. [ 291.237538][T14665] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2361'. [ 291.444191][T14677] xt_hashlimit: size too large, truncated to 1048576 [ 291.493167][T14679] netlink: 'syz.4.2364': attribute type 1 has an invalid length. [ 291.530496][T14679] netlink: 476 bytes leftover after parsing attributes in process `syz.4.2364'. [ 291.553777][T14679] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2364'. [ 291.894721][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 291.920677][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2370'. [ 291.947181][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2370'. [ 292.207996][T14707] vlan3: entered promiscuous mode [ 292.219126][T14711] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 292.235479][T14707] geneve1: entered promiscuous mode [ 292.252890][T14707] vlan3: entered allmulticast mode [ 292.288721][T14713] x_tables: unsorted underflow at hook 2 [ 292.296278][T14707] geneve1: entered allmulticast mode [ 292.309176][T14718] x_tables: unsorted underflow at hook 2 [ 292.476530][T14726] netlink: 'syz.0.2379': attribute type 16 has an invalid length. [ 292.514966][T14726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2379'. [ 293.009786][T14749] FAULT_INJECTION: forcing a failure. [ 293.009786][T14749] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 293.027713][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.4.2389 Not tainted syzkaller #0 PREEMPT(full) [ 293.027743][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.027757][T14749] Call Trace: [ 293.027766][T14749] [ 293.027775][T14749] dump_stack_lvl+0xe8/0x150 [ 293.027812][T14749] should_fail_ex+0x412/0x560 [ 293.027846][T14749] _copy_from_user+0x2d/0xb0 [ 293.027881][T14749] ioctl_standard_iw_point+0x5de/0xd90 [ 293.027938][T14749] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 293.027964][T14749] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 293.027999][T14749] ? __pfx___mutex_lock+0x10/0x10 [ 293.028031][T14749] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 293.028057][T14749] ioctl_standard_call+0xaf/0x1b0 [ 293.028092][T14749] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 293.028115][T14749] wext_ioctl_dispatch+0xee/0x410 [ 293.028146][T14749] ? __pfx_ioctl_standard_call+0x10/0x10 [ 293.028182][T14749] wext_handle_ioctl+0x10f/0x1d0 [ 293.028217][T14749] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 293.028246][T14749] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 293.028286][T14749] sock_ioctl+0x159/0x7f0 [ 293.028314][T14749] ? __pfx_sock_ioctl+0x10/0x10 [ 293.028340][T14749] ? __fget_files+0x2a/0x420 [ 293.028371][T14749] ? __fget_files+0x3a0/0x420 [ 293.028402][T14749] ? __fget_files+0x2a/0x420 [ 293.028437][T14749] ? bpf_lsm_file_ioctl+0x9/0x20 [ 293.028473][T14749] ? __pfx_sock_ioctl+0x10/0x10 [ 293.028497][T14749] __se_sys_ioctl+0xfc/0x170 [ 293.028526][T14749] do_syscall_64+0x14d/0xf80 [ 293.028558][T14749] ? trace_irq_disable+0x3b/0x150 [ 293.028588][T14749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.028611][T14749] ? clear_bhb_loop+0x40/0x90 [ 293.028638][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.028660][T14749] RIP: 0033:0x7f4b3939c799 [ 293.028681][T14749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.028700][T14749] RSP: 002b:00007f4b3a2d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.028724][T14749] RAX: ffffffffffffffda RBX: 00007f4b39615fa0 RCX: 00007f4b3939c799 [ 293.028740][T14749] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 293.028754][T14749] RBP: 00007f4b3a2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 293.028767][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.028780][T14749] R13: 00007f4b39616038 R14: 00007f4b39615fa0 R15: 00007ffd228f49e8 [ 293.028815][T14749] [ 293.348980][T14744] syz.0.2387 (14744) used greatest stack depth: 17472 bytes left [ 293.491443][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 293.515224][T14760] xt_socket: unknown flags 0x50 [ 293.536854][T14759] veth0_virt_wifi: entered promiscuous mode [ 295.396477][T14838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.955657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 295.963787][ C0] lec:lec_tx_timeout: lec0 [ 295.968775][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 297.982378][T14866] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 298.008549][T14866] __nla_validate_parse: 2 callbacks suppressed [ 298.008569][T14866] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2412'. [ 298.035038][T14868] netlink: 'syz.4.2413': attribute type 2 has an invalid length. [ 298.252432][T14884] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2419'. [ 298.272858][T14884] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 298.686925][T14921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2430'. [ 298.793066][T14923] syzkaller0: entered promiscuous mode [ 298.798792][T14923] syzkaller0: entered allmulticast mode [ 298.824413][T14923] 0: reclassify loop, rule prio 0, protocol 800 [ 299.254398][T14960] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2437'. [ 299.456823][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 299.475649][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 299.566529][T14980] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 299.566569][T14976] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2443'. [ 299.611397][T14977] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2442'. [ 299.878229][T15004] tipc: New replicast peer: 255.255.255.255 [ 299.906358][T15004] tipc: Enabled bearer , priority 10 [ 299.913457][T15004] netlink: 'syz.3.2445': attribute type 1 has an invalid length. [ 299.974048][T15009] x_tables: duplicate underflow at hook 2 [ 300.099539][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 300.133782][T15014] sch_fq: defrate 49226 ignored. [ 300.183600][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'. [ 300.539589][T15048] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 300.568400][T15047] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 300.597787][T15047] bond6: (slave lo): Enslaving as an active interface with an up link [ 300.610351][T15047] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 300.675251][T15048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.975424][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 300.983524][ C0] lec:lec_tx_timeout: lec0 [ 300.995702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.059298][T15070] sctp: [Deprecated]: syz.2.2471 (pid 15070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.059298][T15070] Use struct sctp_sack_info instead [ 301.086970][T15071] bond2: (slave lo): Releasing backup interface [ 301.122016][T15071] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 301.277978][T15071] bond0: (slave bond_slave_0): Releasing backup interface [ 301.296937][T15071] bond_slave_0: left allmulticast mode [ 301.311126][T15071] bond0: (slave bond_slave_1): Releasing backup interface [ 301.343033][T15071] bond_slave_1: left allmulticast mode [ 301.356106][T15071] bond7: (slave team_slave_0): Releasing backup interface [ 301.396679][T15071] team0: Port device team_slave_1 removed [ 301.403741][T15071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.412424][T15071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.422692][T15071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.439126][T15071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.453793][T15071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.558272][T15094] team_slave_0: entered allmulticast mode [ 301.568485][T15098] team_slave_0: entered promiscuous mode [ 301.878481][T15124] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 301.886188][T15124] openvswitch: netlink: Message has 1 unknown bytes. [ 301.893012][T15124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.127048][T15135] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 302.139985][T15135] bond6 (unregistering): Released all slaves [ 302.183204][T15140] C speed is unknown, defaulting to 1000 [ 302.191796][T15140] wg1 speed is unknown, defaulting to 1000 [ 302.509880][T15156] bridge10: entered promiscuous mode [ 302.525205][T15156] bridge10: entered allmulticast mode [ 302.557912][T15152] nbd: nbd64 already in use [ 302.881268][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 302.998064][T15177] netlink: 'syz.2.2498': attribute type 4 has an invalid length. [ 303.079085][T15179] __nla_validate_parse: 9 callbacks suppressed [ 303.079105][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2501'. [ 303.113812][T15183] netlink: 'syz.4.2500': attribute type 4 has an invalid length. [ 303.135826][T15184] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2499'. [ 303.148094][T15183] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2500'. [ 303.782769][T15218] geneve1: entered promiscuous mode [ 303.795764][T15218] geneve1: entered allmulticast mode [ 304.318702][T15247] vcan1: entered promiscuous mode [ 304.323941][T15247] vcan1: entered allmulticast mode [ 304.578723][T15257] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2519'. [ 304.989403][T15281] syzkaller0: entered promiscuous mode [ 305.005593][T15281] syzkaller0: entered allmulticast mode [ 305.096236][T15289] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 305.114723][T15289] netlink: 'syz.0.2529': attribute type 11 has an invalid length. [ 305.122996][T15289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2529'. [ 305.191324][T15291] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2530'. [ 305.214766][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 305.245010][T15291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 305.292312][T15291] team0: Port device batadv1 added [ 305.394630][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 305.446933][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 305.546954][T15310] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 305.624227][T15303] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 305.828008][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2537'. [ 306.005856][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 306.013933][ C0] lec:lec_tx_timeout: lec0 [ 306.019313][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.349437][T15364] ipt_REJECT: ECHOREPLY no longer supported. [ 306.589226][T15376] syzkaller0: left promiscuous mode [ 306.604517][T15376] syzkaller0: left allmulticast mode [ 306.660262][T15379] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 307.350338][T15415] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 307.454701][T15423] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 307.496648][T15426] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 307.511516][T15425] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 307.549024][ T29] audit: type=1107 audit(1773139154.520:7): pid=15430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ж63.(v[$C&w7˹IX5w?-MD"v&$?L"Sa(n~Ubo[s>mpNRϲTJ2(xYi%(/f?6' [ 307.605424][T15431] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.621943][T15431] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 307.633284][T15431] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 307.814710][T15449] netlink: 'syz.2.2566': attribute type 1 has an invalid length. [ 308.207571][T15477] syzkaller1: entered promiscuous mode [ 308.232909][T15477] syzkaller1: entered allmulticast mode [ 308.593529][T15489] C speed is unknown, defaulting to 1000 [ 308.637327][T15489] wg1 speed is unknown, defaulting to 1000 [ 308.754654][T15517] __nla_validate_parse: 12 callbacks suppressed [ 308.754674][T15517] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2586'. [ 308.924176][T15527] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2587'. [ 309.233453][T15547] netlink: 'syz.4.2593': attribute type 1 has an invalid length. [ 309.242355][T15547] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2593'. [ 309.252917][T15547] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2593'. [ 309.268853][T15547] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2593'. [ 309.288950][T15545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2592'. [ 309.353518][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 309.430482][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 309.510993][T15561] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 309.518829][T15561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.998268][T15585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.014974][T15585] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.038165][T15585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.094666][T15585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.126532][T15585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.160898][T15585] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 310.199847][T15589] IPv6: sit2: Disabled Multicast RS [ 310.283804][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2611'. [ 310.643861][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2620'. [ 310.749891][T15637] sctp: [Deprecated]: syz.2.2622 (pid 15637) Use of int in maxseg socket option. [ 310.749891][T15637] Use struct sctp_assoc_value instead [ 310.782900][T15637] netem: change failed [ 310.902102][T15643] pimreg: entered allmulticast mode [ 311.019249][T15648] syzkaller1: entered promiscuous mode [ 311.030469][T15648] syzkaller1: entered allmulticast mode [ 311.036179][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.036245][ C0] lec:lec_tx_timeout: lec0 [ 311.044908][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 311.671988][T15684] bond6 (unregistering): Released all slaves [ 311.693788][T15695] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 312.278091][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.346227][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.397710][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.439954][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.480407][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.524886][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.575195][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.617663][T15737] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 312.659914][ T25] block nbd1: Possible stuck request ffff888026480000: control (read@0,1024B). Runtime 150 seconds [ 312.675390][ T25] block nbd1: Possible stuck request ffff888026480200: control (read@1024,1024B). Runtime 150 seconds [ 312.686787][ T25] block nbd1: Possible stuck request ffff888026480400: control (read@2048,1024B). Runtime 150 seconds [ 312.700479][ T25] block nbd1: Possible stuck request ffff888026480600: control (read@3072,1024B). Runtime 150 seconds [ 312.986938][T15770] vlan1: entered allmulticast mode [ 313.021660][T15770] bridge0: entered allmulticast mode [ 314.017272][T15833] FAULT_INJECTION: forcing a failure. [ 314.017272][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 314.045938][T15833] CPU: 1 UID: 0 PID: 15833 Comm: syz.4.2683 Not tainted syzkaller #0 PREEMPT(full) [ 314.045969][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.045995][T15833] Call Trace: [ 314.046005][T15833] [ 314.046014][T15833] dump_stack_lvl+0xe8/0x150 [ 314.046049][T15833] should_fail_ex+0x412/0x560 [ 314.046082][T15833] should_failslab+0xa8/0x100 [ 314.046133][T15833] __kmalloc_noprof+0xe8/0x760 [ 314.046157][T15833] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.046195][T15833] tomoyo_realpath_from_path+0xe3/0x5d0 [ 314.046237][T15833] ? tomoyo_path_number_perm+0x219/0x630 [ 314.046261][T15833] tomoyo_path_number_perm+0x246/0x630 [ 314.046289][T15833] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.046317][T15833] ? __lock_acquire+0x6b5/0x2cf0 [ 314.046355][T15833] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 314.046399][T15833] ? __fget_files+0x2a/0x420 [ 314.046433][T15833] ? __fget_files+0x2a/0x420 [ 314.046463][T15833] ? __fget_files+0x3a0/0x420 [ 314.046493][T15833] ? __fget_files+0x2a/0x420 [ 314.046529][T15833] security_file_ioctl+0xc3/0x2a0 [ 314.046555][T15833] __se_sys_ioctl+0x47/0x170 [ 314.046583][T15833] do_syscall_64+0x14d/0xf80 [ 314.046615][T15833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.046638][T15833] ? clear_bhb_loop+0x40/0x90 [ 314.046682][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.046703][T15833] RIP: 0033:0x7f4b3939c799 [ 314.046724][T15833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.046742][T15833] RSP: 002b:00007f4b3a2d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.046765][T15833] RAX: ffffffffffffffda RBX: 00007f4b39615fa0 RCX: 00007f4b3939c799 [ 314.046781][T15833] RDX: 0000200000000100 RSI: 000000000000541b RDI: 0000000000000004 [ 314.046795][T15833] RBP: 00007f4b3a2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 314.046808][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.046821][T15833] R13: 00007f4b39616038 R14: 00007f4b39615fa0 R15: 00007ffd228f49e8 [ 314.046855][T15833] [ 314.046914][T15833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.419371][T15845] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 314.427345][T15846] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 314.466578][T15846] x_tables: duplicate underflow at hook 2 [ 314.477804][T15847] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 314.524353][T15849] validate_nla: 56 callbacks suppressed [ 314.524372][T15849] netlink: 'syz.4.2689': attribute type 22 has an invalid length. [ 314.555412][T15849] __nla_validate_parse: 21 callbacks suppressed [ 314.555434][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 314.570564][T15854] netlink: 'syz.4.2689': attribute type 22 has an invalid length. [ 314.591791][T15849] netlink: 'syz.4.2689': attribute type 22 has an invalid length. [ 314.630948][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 314.671160][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 314.681603][T15854] netlink: 'syz.4.2689': attribute type 22 has an invalid length. [ 314.690349][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 314.709917][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 314.784429][T15865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2694'. [ 315.172069][T15886] FAULT_INJECTION: forcing a failure. [ 315.172069][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 315.205766][T15886] CPU: 1 UID: 0 PID: 15886 Comm: syz.2.2700 Not tainted syzkaller #0 PREEMPT(full) [ 315.205797][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.205811][T15886] Call Trace: [ 315.205819][T15886] [ 315.205829][T15886] dump_stack_lvl+0xe8/0x150 [ 315.205864][T15886] should_fail_ex+0x412/0x560 [ 315.205901][T15886] should_failslab+0xa8/0x100 [ 315.205932][T15886] __kmalloc_noprof+0xe8/0x760 [ 315.205957][T15886] ? tomoyo_encode+0x28b/0x550 [ 315.205994][T15886] tomoyo_encode+0x28b/0x550 [ 315.206031][T15886] tomoyo_realpath_from_path+0x58d/0x5d0 [ 315.206074][T15886] ? tomoyo_path_number_perm+0x219/0x630 [ 315.206099][T15886] tomoyo_path_number_perm+0x246/0x630 [ 315.206128][T15886] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.206156][T15886] ? __lock_acquire+0x6b5/0x2cf0 [ 315.206195][T15886] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 315.206240][T15886] ? __fget_files+0x2a/0x420 [ 315.206276][T15886] ? __fget_files+0x2a/0x420 [ 315.206305][T15886] ? __fget_files+0x3a0/0x420 [ 315.206335][T15886] ? __fget_files+0x2a/0x420 [ 315.206370][T15886] security_file_ioctl+0xc3/0x2a0 [ 315.206396][T15886] __se_sys_ioctl+0x47/0x170 [ 315.206425][T15886] do_syscall_64+0x14d/0xf80 [ 315.206456][T15886] ? trace_irq_disable+0x3b/0x150 [ 315.206487][T15886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.206510][T15886] ? clear_bhb_loop+0x40/0x90 [ 315.206537][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.206559][T15886] RIP: 0033:0x7f39fc79c799 [ 315.206579][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.206598][T15886] RSP: 002b:00007f39fd663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.206621][T15886] RAX: ffffffffffffffda RBX: 00007f39fca15fa0 RCX: 00007f39fc79c799 [ 315.206637][T15886] RDX: 0000200000000100 RSI: 000000000000541b RDI: 0000000000000004 [ 315.206651][T15886] RBP: 00007f39fd663090 R08: 0000000000000000 R09: 0000000000000000 [ 315.206671][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.206684][T15886] R13: 00007f39fca16038 R14: 00007f39fca15fa0 R15: 00007ffe2eb56f08 [ 315.206720][T15886] [ 315.206782][T15886] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.704622][T15911] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2707'. [ 315.735664][T15911] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.2707'. [ 315.767154][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2705'. [ 316.045366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 316.053469][ C0] lec:lec_tx_timeout: lec0 [ 316.058533][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 316.112717][T15924] syzkaller0: entered promiscuous mode [ 316.127368][T15924] syzkaller0: entered allmulticast mode [ 316.287559][T15945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.368117][T15948] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2713'. [ 316.468740][T15951] netlink: 'syz.3.2714': attribute type 3 has an invalid length. [ 316.494974][T15951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.546585][T15953] netlink: 'syz.4.2715': attribute type 29 has an invalid length. [ 316.593695][T15956] FAULT_INJECTION: forcing a failure. [ 316.593695][T15956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.670462][T15956] CPU: 1 UID: 0 PID: 15956 Comm: syz.1.2717 Not tainted syzkaller #0 PREEMPT(full) [ 316.670492][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 316.670506][T15956] Call Trace: [ 316.670514][T15956] [ 316.670523][T15956] dump_stack_lvl+0xe8/0x150 [ 316.670558][T15956] should_fail_ex+0x412/0x560 [ 316.670592][T15956] _copy_to_user+0x31/0xb0 [ 316.670629][T15956] simple_read_from_buffer+0xe1/0x170 [ 316.670666][T15956] proc_fail_nth_read+0x1bb/0x230 [ 316.670701][T15956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.670750][T15956] ? rw_verify_area+0x2a6/0x4d0 [ 316.670773][T15956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.670805][T15956] vfs_read+0x20c/0xa70 [ 316.670825][T15956] ? fdget_pos+0x246/0x320 [ 316.670862][T15956] ? __pfx___mutex_lock+0x10/0x10 [ 316.670882][T15956] ? __pfx_vfs_read+0x10/0x10 [ 316.670906][T15956] ? __fget_files+0x2a/0x420 [ 316.670959][T15956] ? __fget_files+0x3a0/0x420 [ 316.670996][T15956] ? __fget_files+0x2a/0x420 [ 316.671037][T15956] ksys_read+0x150/0x270 [ 316.671063][T15956] ? __pfx_ksys_read+0x10/0x10 [ 316.671098][T15956] do_syscall_64+0x14d/0xf80 [ 316.671131][T15956] ? trace_irq_disable+0x3b/0x150 [ 316.671163][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.671186][T15956] ? clear_bhb_loop+0x40/0x90 [ 316.671212][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.671235][T15956] RIP: 0033:0x7fa74fb5cfce [ 316.671255][T15956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.671274][T15956] RSP: 002b:00007fa74ddf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.671297][T15956] RAX: ffffffffffffffda RBX: 00007fa74ddf66c0 RCX: 00007fa74fb5cfce [ 316.671313][T15956] RDX: 000000000000000f RSI: 00007fa74ddf60a0 RDI: 0000000000000005 [ 316.671327][T15956] RBP: 00007fa74ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.671339][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.671352][T15956] R13: 00007fa74fe16038 R14: 00007fa74fe15fa0 R15: 00007ffc58a38fc8 [ 316.671396][T15956] [ 317.038181][T15978] block nbd7: Unsupported socket: should be TCP or UNIX. [ 317.177472][T15989] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 317.537566][T16000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 317.553588][T16000] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 317.571359][T16000] gretap1: entered promiscuous mode [ 317.577040][T16000] gretap1: entered allmulticast mode [ 317.812100][T16016] openvswitch: netlink: Duplicate or invalid key (type 0). [ 317.835231][T16013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 317.885568][T16016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.094666][T16038] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.128324][T16032] netlink: 'syz.0.2739': attribute type 1 has an invalid length. [ 319.041692][T16072] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 319.069647][T16082] netlink: 'syz.3.2755': attribute type 1 has an invalid length. [ 319.121010][T16082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.183853][T16082] bond6: (slave veth0_to_bond): making interface the new active one [ 319.224173][T16082] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 319.311157][T16099] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 319.356195][T16099] netlink: 'syz.1.2760': attribute type 2 has an invalid length. [ 319.418765][T16084] bond6: entered promiscuous mode [ 319.423944][T16084] veth0_to_bond: entered promiscuous mode [ 319.439258][T16084] bond6: entered allmulticast mode [ 319.458128][T16084] veth0_to_bond: entered allmulticast mode [ 319.491576][T16107] : entered promiscuous mode [ 319.848294][T16131] __nla_validate_parse: 15 callbacks suppressed [ 319.848317][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2767'. [ 319.912333][T16133] validate_nla: 1 callbacks suppressed [ 319.912354][T16133] netlink: 'syz.0.2769': attribute type 10 has an invalid length. [ 319.933930][T16142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.010068][T16133] smc: removing net device team0 with user defined pnetid SYZ0 [ 320.027254][T16141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2771'. [ 320.137440][T16148] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2772'. [ 320.162429][T16148] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2772'. [ 320.542605][T16179] xt_TCPMSS: Only works on TCP SYN packets [ 320.732858][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 321.065649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 321.073716][ C0] lec:lec_tx_timeout: lec0 [ 321.078739][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.163011][T16218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2788'. [ 321.186656][T16218] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2788'. [ 321.266071][T16205] syzkaller0: entered promiscuous mode [ 321.271620][T16205] syzkaller0: entered allmulticast mode [ 321.303236][T16215] xt_CT: No such helper "snmp_trap" [ 321.329857][T16217] can: request_module (can-proto-5) failed. [ 321.453214][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 322.207000][T16238] netlink: 'syz.3.2795': attribute type 10 has an invalid length. [ 322.833493][T16238] bridge_slave_1: left allmulticast mode [ 322.859201][T16238] bridge_slave_1: left promiscuous mode [ 322.866474][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.883431][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2796'. [ 322.894145][T16241] nbd: must specify at least one socket [ 322.934313][T16238] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.184252][T16260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2803'. [ 323.286785][T16272] netlink: 'syz.0.2806': attribute type 8 has an invalid length. [ 323.604077][T16285] syzkaller1: entered promiscuous mode [ 323.617782][T16285] syzkaller1: entered allmulticast mode [ 323.625164][T16288] tipc: Enabling of bearer rejected, failed to enable media [ 323.652691][T16290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.873905][T16302] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.921084][T16305] netlink: 'syz.1.2818': attribute type 12 has an invalid length. [ 323.997693][T16305] xt_TCPMSS: Only works on TCP SYN packets [ 324.012189][T16305] netlink: 'syz.1.2818': attribute type 3 has an invalid length. [ 324.022264][T16305] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 324.214214][T16321] netlink: 'syz.4.2821': attribute type 5 has an invalid length. [ 324.249030][T16316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.783994][T16346] pim6reg1: entered promiscuous mode [ 324.800312][T16346] pim6reg1: entered allmulticast mode [ 325.209947][T16366] netlink: 'syz.4.2830': attribute type 1 has an invalid length. [ 325.293634][T16366] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.332344][T16366] bond9: (slave batadv2): Opening slave failed [ 325.401298][T16382] __nla_validate_parse: 8 callbacks suppressed [ 325.401322][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 325.428019][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 325.518707][T16382] bond8: option xmit_hash_policy: invalid value (64) [ 325.534553][T16382] bond8 (unregistering): Released all slaves [ 325.603888][T16395] gre2: entered promiscuous mode [ 325.616377][T16395] gre2: entered allmulticast mode [ 325.643482][T16388] netlink: 'syz.2.2835': attribute type 12 has an invalid length. [ 325.678742][T16388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2835'. [ 325.731024][T16396] netlink: 'syz.2.2835': attribute type 12 has an invalid length. [ 325.739070][T16396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2835'. [ 325.778362][T16389] syzkaller1: entered promiscuous mode [ 325.797970][T16389] syzkaller1: entered allmulticast mode [ 326.015034][T16414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.065725][T16423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.069810][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.087125][T16422] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2841'. [ 326.136037][T16422] netlink: 'syz.4.2841': attribute type 1 has an invalid length. [ 326.163683][T16427] netlink: 'syz.0.2845': attribute type 10 has an invalid length. [ 326.180299][T16427] bridge_slave_1: entered allmulticast mode [ 326.186910][T16427] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 326.231217][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 326.242161][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 326.253335][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 326.590258][T16444] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2852'. [ 326.603663][T16445] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2852'. [ 327.107642][T16469] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 327.158856][T16473] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 327.378063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6300 ms [ 327.386179][ C0] lec:lec_tx_timeout: lec0 [ 327.391293][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.622801][ T5191] udevd[5191]: worker [5832] /devices/virtual/block/nbd1 is taking a long time [ 327.656565][T16506] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 327.717155][T16506] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.767872][T16506] vlan0: entered promiscuous mode [ 327.773029][T16506] bond7: entered promiscuous mode [ 327.782461][T16506] vlan0: entered allmulticast mode [ 327.794281][T16506] bond7: entered allmulticast mode [ 328.105081][T16525] syzkaller0: entered promiscuous mode [ 328.126531][T16525] syzkaller0: entered allmulticast mode [ 328.574510][T16557] syzkaller1: entered promiscuous mode [ 328.586575][T16557] syzkaller1: entered allmulticast mode [ 328.745066][T16560] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 328.757623][T16560] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 328.823887][T16571] syzkaller0: entered promiscuous mode [ 328.829764][T16571] syzkaller0: entered allmulticast mode [ 328.850973][T16571] 0: reclassify loop, rule prio 0, protocol 800 [ 329.329525][T16605] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 329.486885][T16613] sock: sock_set_timeout: `syz.2.2901' (pid 16613) tries to set negative timeout [ 329.664154][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.673769][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.687228][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.702640][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.710758][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.756581][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.764190][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.778309][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.788953][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.797354][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.807560][T16622] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 329.841999][T16622] bond8 (unregistering): Released all slaves [ 329.964687][T16623] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 330.050539][T16617] C speed is unknown, defaulting to 1000 [ 330.152374][T16617] wg1 speed is unknown, defaulting to 1000 [ 330.555127][T16664] sch_fq: defrate 0 ignored. [ 330.654483][T16672] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 330.731823][T16617] chnl_net:caif_netlink_parms(): no params data found [ 330.783387][T16682] __nla_validate_parse: 10 callbacks suppressed [ 330.783407][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 330.807628][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2919'. [ 330.837527][T16685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2920'. [ 330.970628][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 331.008717][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.053598][T16617] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.070593][T16617] bridge_slave_0: entered allmulticast mode [ 331.080759][T16617] bridge_slave_0: entered promiscuous mode [ 331.093201][T16684] delete_channel: no stack [ 331.099466][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.106981][T16617] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.114347][T16617] bridge_slave_1: entered allmulticast mode [ 331.123115][T16617] bridge_slave_1: entered promiscuous mode [ 331.184252][T16617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.200832][T16617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.319453][T16617] team0: Port device team_slave_0 added [ 331.335146][T16617] team0: Port device team_slave_1 added [ 331.407169][T16617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.414193][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.463807][T16617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.507793][T16617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.514805][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.561988][T16617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.577064][T16719] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 331.600329][T16720] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 331.659352][T16719] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 331.707352][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'. [ 331.760581][T16720] bond8: entered promiscuous mode [ 331.767509][T16720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.782875][T16617] hsr_slave_0: entered promiscuous mode [ 331.799178][T16617] hsr_slave_1: entered promiscuous mode [ 331.816114][T16617] debugfs: 'hsr0' already exists in 'hsr' [ 331.821922][T16617] Cannot create hsr debugfs directory [ 331.857108][ T5831] Bluetooth: hci5: command tx timeout [ 331.885347][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2935'. [ 331.965112][T16732] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 332.022459][T16750] netlink: 'syz.1.2936': attribute type 4 has an invalid length. [ 332.049995][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 333.021422][T16617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.110660][T16617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.135364][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 333.143462][ C0] lec:lec_tx_timeout: lec0 [ 333.148272][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 333.205637][T16617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.255790][T16617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.298858][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 333.411646][T16809] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2953'. [ 333.531492][T16617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.559309][T16617] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.582413][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.585126][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2958'. [ 333.589834][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.628300][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.635585][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.708707][T16832] pim6reg1: entered promiscuous mode [ 333.714097][T16832] pim6reg1: entered allmulticast mode [ 333.936029][ T5831] Bluetooth: hci5: command tx timeout [ 334.000507][T16617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.108197][T16853] SET target dimension over the limit! [ 334.148643][T16853] bridge_slave_0: left promiscuous mode [ 334.154595][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.174132][T16853] bond0: (slave bridge_slave_1): Releasing backup interface [ 334.194829][T16853] bond6: (slave veth0_to_bond): Releasing active interface [ 334.203143][T16853] veth0_to_bond: left promiscuous mode [ 334.211164][T16853] veth0_to_bond: left allmulticast mode [ 334.232508][T16853] bond0: (slave bond_slave_0): Releasing backup interface [ 334.250044][T16853] bond0: (slave bond_slave_1): Releasing backup interface [ 334.267439][T16853] team0: Port device team_slave_0 removed [ 334.288362][T16853] team0: Port device team_slave_1 removed [ 334.295067][T16853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.315761][T16853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.326697][T16853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.512608][T16617] veth0_vlan: entered promiscuous mode [ 334.535571][T16617] veth1_vlan: entered promiscuous mode [ 334.579590][T16617] veth0_macvtap: entered promiscuous mode [ 334.590740][T16617] veth1_macvtap: entered promiscuous mode [ 334.610873][T16617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.627374][T16617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.642091][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.653137][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.669689][T16868] IPv6: sit2: Disabled Multicast RS [ 334.677458][T16868] sit2: entered allmulticast mode [ 334.704481][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.713928][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.015907][ T5831] Bluetooth: hci5: command tx timeout [ 336.370511][T16814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.505699][T10230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.513589][T10230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.616360][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.624648][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.822424][T16889] netlink: 'syz.4.2900': attribute type 1 has an invalid length. [ 336.845901][T16892] __nla_validate_parse: 2 callbacks suppressed [ 336.845922][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 336.862027][T16889] netlink: 'syz.4.2900': attribute type 3 has an invalid length. [ 336.888878][T16889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2900'. [ 337.387590][T16917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'. [ 337.435729][T16911] syzkaller1: entered promiscuous mode [ 337.439041][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.453352][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.467132][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.493089][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.508865][T16911] syzkaller1: entered allmulticast mode [ 337.515876][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.729394][T16925] dvmrp0: left allmulticast mode [ 337.746398][T16921] C speed is unknown, defaulting to 1000 [ 337.760935][T16921] wg1 speed is unknown, defaulting to 1000 [ 338.037859][T16942] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 338.064656][T16942] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 338.097951][ T5831] Bluetooth: hci5: command tx timeout [ 338.274837][T16921] chnl_net:caif_netlink_parms(): no params data found [ 338.579691][T16921] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.592742][T16921] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.605174][T16921] bridge_slave_0: entered allmulticast mode [ 338.615626][T16921] bridge_slave_0: entered promiscuous mode [ 338.629528][T16921] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.640160][T16921] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.649067][T16921] bridge_slave_1: entered allmulticast mode [ 338.659028][T16921] bridge_slave_1: entered promiscuous mode [ 338.682501][T16987] x_tables: duplicate entry at hook 2 [ 338.716207][T16921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.730188][T16921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.781998][T16921] team0: Port device team_slave_0 added [ 338.794583][T16921] team0: Port device team_slave_1 added [ 338.839387][T16921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.847817][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.876693][T16921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.889805][T16921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.896955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 338.896997][ C0] lec:lec_tx_timeout: lec0 [ 338.906874][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.919028][T16921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.946574][T16921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.997528][T16921] hsr_slave_0: entered promiscuous mode [ 339.004184][T16921] hsr_slave_1: entered promiscuous mode [ 339.011140][T16921] debugfs: 'hsr0' already exists in 'hsr' [ 339.017049][T16921] Cannot create hsr debugfs directory [ 339.161337][T16921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.172189][T16921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.248066][T16921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.260689][T16921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.330683][T16921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.341057][T16921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.405827][T16921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.416249][T16921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.537811][ T5831] Bluetooth: hci2: command tx timeout [ 341.257734][T16958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.281679][T16921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.329971][T16921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.407097][T16921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.437878][T16921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.448814][T17000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2999'. [ 341.482635][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2999'. [ 341.558720][T17011] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3001'. [ 341.617452][ T5831] Bluetooth: hci2: command tx timeout [ 341.883535][T16921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.939099][T16921] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.960458][T10232] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.967689][T10232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.987612][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.994795][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.103633][T17039] --map-set only usable from mangle table [ 342.120933][T17039] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3009'. [ 342.226343][T17046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3011'. [ 342.246784][T17046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3011'. [ 342.263458][T17046] netlink: 'syz.3.3011': attribute type 9 has an invalid length. [ 342.277996][T17046] netlink: 'syz.3.3011': attribute type 11 has an invalid length. [ 342.301837][T17046] netlink: 'syz.3.3011': attribute type 12 has an invalid length. [ 342.329642][T17046] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3011'. [ 342.385775][T17051] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 342.406436][T17051] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3011'. [ 342.610893][T17066] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 342.655267][T17072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3017'. [ 342.709643][T16921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.745634][ T25] block nbd1: Possible stuck request ffff888026480000: control (read@0,1024B). Runtime 180 seconds [ 342.757098][ T25] block nbd1: Possible stuck request ffff888026480200: control (read@1024,1024B). Runtime 180 seconds [ 342.768587][ T25] block nbd1: Possible stuck request ffff888026480400: control (read@2048,1024B). Runtime 180 seconds [ 342.779756][ T25] block nbd1: Possible stuck request ffff888026480600: control (read@3072,1024B). Runtime 180 seconds [ 342.869748][T16921] veth0_vlan: entered promiscuous mode [ 342.976603][T16921] veth1_vlan: entered promiscuous mode [ 342.991881][T17076] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3020'. [ 343.037747][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'. [ 343.103813][T16921] veth0_macvtap: entered promiscuous mode [ 343.140244][T17092] netlink: 'syz.1.3022': attribute type 4 has an invalid length. [ 343.151903][T17092] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3022'. [ 343.168000][T17092] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3022'. [ 343.180457][T16921] veth1_macvtap: entered promiscuous mode [ 343.207295][T17092] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 343.219323][T17092] bridge0: entered allmulticast mode [ 343.274469][T16921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.340475][T17101] netlink: 'syz.3.3025': attribute type 4 has an invalid length. [ 343.380990][T16921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.414752][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.423876][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.464372][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.482379][T17106] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 343.497040][T17106] x_tables: duplicate underflow at hook 2 [ 343.507922][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.540707][T17108] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 343.695998][ T5831] Bluetooth: hci2: command tx timeout [ 343.723652][T10241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.747501][T10241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.842867][T10230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.852989][T10230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.915308][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.923399][ C0] lec:lec_tx_timeout: lec0 [ 343.928802][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 344.030827][T17128] syzkaller0: entered promiscuous mode [ 344.039148][T17128] syzkaller0: entered allmulticast mode [ 344.330176][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.340588][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.350908][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.360632][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.369949][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.421091][T17144] C speed is unknown, defaulting to 1000 [ 344.433457][T17144] wg1 speed is unknown, defaulting to 1000 [ 344.889829][T17166] xt_NFQUEUE: number of total queues is 0 [ 344.927221][T17170] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 344.965737][T17166] netlink: 'syz.0.3046': attribute type 4 has an invalid length. [ 345.080679][T17144] chnl_net:caif_netlink_parms(): no params data found [ 345.322952][T17144] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.330490][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.338357][T17144] bridge_slave_0: entered allmulticast mode [ 345.347672][T17144] bridge_slave_0: entered promiscuous mode [ 345.357418][T17144] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.364750][T17144] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.372666][T17144] bridge_slave_1: entered allmulticast mode [ 345.383127][T17144] bridge_slave_1: entered promiscuous mode [ 345.432123][T17144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.471208][T17144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.522750][T17144] team0: Port device team_slave_0 added [ 345.532388][T17144] team0: Port device team_slave_1 added [ 345.592031][T17144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.605436][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.658375][T17144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.672147][T17144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.679679][T17144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.707908][T17144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.775625][ T5826] Bluetooth: hci2: command tx timeout [ 345.805052][T17144] hsr_slave_0: entered promiscuous mode [ 345.812807][T17144] hsr_slave_1: entered promiscuous mode [ 345.820204][T17144] debugfs: 'hsr0' already exists in 'hsr' [ 345.826092][T17144] Cannot create hsr debugfs directory [ 346.139284][T17144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.174527][T17144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.266469][T17228] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 346.277053][T17227] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 346.342761][T17144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.363399][T17235] netlink: 'syz.2.3065': attribute type 11 has an invalid length. [ 346.371763][T17144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.415616][ T5826] Bluetooth: hci1: command tx timeout [ 346.510532][T17144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.527664][T17144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.629882][T17144] bond0: (slave netdevsim0): Releasing backup interface [ 346.643985][T17144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.666718][T17144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 346.726734][ T8515] syz1: Port: 1 Link DOWN [ 347.034372][T17144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.083003][T17144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.105139][T17144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.141079][T17144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.313994][T17298] __nla_validate_parse: 11 callbacks suppressed [ 347.314016][T17298] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3082'. [ 347.452956][T17144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.481551][T17144] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.502188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.509464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.564780][T17308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3085'. [ 347.640476][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.647773][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.700265][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'. [ 347.711845][T17317] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 347.774622][T17318] bond0: entered promiscuous mode [ 347.805613][T17318] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 348.155763][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 348.164690][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 348.229630][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3089'. [ 348.273658][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 348.366557][T17348] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3092'. [ 348.397720][T17144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.497544][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 348.538641][T17144] veth0_vlan: entered promiscuous mode [ 348.557407][T17144] veth1_vlan: entered promiscuous mode [ 348.624135][T17144] veth0_macvtap: entered promiscuous mode [ 348.659148][T17144] veth1_macvtap: entered promiscuous mode [ 348.734219][T17144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.778978][T17144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.822456][ T1025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.840229][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'. [ 348.856931][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.917046][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.935385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.943450][ C0] lec:lec_tx_timeout: lec0 [ 348.949660][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.971265][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.118979][T17385] IPVS: length: 199 != 24 [ 349.177329][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.193093][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.272117][T17389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3102'. [ 349.288617][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.309832][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.748361][T17413] netlink: 'syz.0.3111': attribute type 30 has an invalid length. [ 349.880862][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.891384][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.896462][T17413] bond1: option arp_missed_max: invalid value (0) [ 349.908736][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.920786][T17413] bond1: option arp_missed_max: allowed values 1 - 255 [ 349.928451][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.939685][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.950230][T17413] bond1 (unregistering): Released all slaves [ 350.191669][T17418] C speed is unknown, defaulting to 1000 [ 350.208701][T17418] wg1 speed is unknown, defaulting to 1000 [ 350.216106][T17430] sctp: [Deprecated]: syz.3.3115 (pid 17430) Use of int in maxseg socket option. [ 350.216106][T17430] Use struct sctp_assoc_value instead [ 350.574187][T17418] chnl_net:caif_netlink_parms(): no params data found [ 350.595832][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 350.774392][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.785992][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.803511][T17418] bridge_slave_0: entered allmulticast mode [ 350.833848][T17418] bridge_slave_0: entered promiscuous mode [ 350.873138][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.896767][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.915698][T17418] bridge_slave_1: entered allmulticast mode [ 350.933864][T17418] bridge_slave_1: entered promiscuous mode [ 351.048956][T17418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.093510][T17418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.576432][T17418] team0: Port device team_slave_0 added [ 351.614971][T17418] team0: Port device team_slave_1 added [ 351.684838][T17490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.712913][T17493] netlink: 'syz.3.3132': attribute type 33 has an invalid length. [ 351.789008][T17493] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 351.802059][T17493] bond1 (unregistering): Released all slaves [ 351.858383][T17418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.894072][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.920781][T17418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.934606][T17418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.942246][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.975766][T17418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.016439][ T5826] Bluetooth: hci3: command tx timeout [ 352.028137][T17502] hsr0: entered allmulticast mode [ 352.036940][T17502] hsr_slave_0: entered allmulticast mode [ 352.043834][T17502] hsr_slave_1: entered allmulticast mode [ 352.144894][T17418] hsr_slave_0: entered promiscuous mode [ 352.152368][T17418] hsr_slave_1: entered promiscuous mode [ 352.159131][T17418] debugfs: 'hsr0' already exists in 'hsr' [ 352.165091][T17418] Cannot create hsr debugfs directory [ 352.388237][T17515] __nla_validate_parse: 5 callbacks suppressed [ 352.388259][T17515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3138'. [ 352.416432][T17518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.607130][T17525] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 352.620614][T17418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.634069][T17418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.654798][T17529] netlink: 'syz.4.3142': attribute type 4 has an invalid length. [ 352.663392][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 352.725028][T17532] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3144'. [ 352.828845][T17418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.839545][T17418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.880127][T17536] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3144'. [ 352.969849][T17418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.025560][T17418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.196492][T17418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.214905][T17418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.233588][T17552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3150'. [ 353.531988][T17418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.541497][T17562] nbd: couldn't find a device at index 0 [ 353.573398][T17418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.622422][T17418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.647077][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3153'. [ 353.668217][T17418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.778294][T17579] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 353.965584][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 353.973711][ C0] lec:lec_tx_timeout: lec0 [ 353.979669][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.058968][T17418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.099699][ T5826] Bluetooth: hci3: command tx timeout [ 354.140207][T17418] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.199906][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.207146][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.268379][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.275630][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.336598][T17604] netlink: 'syz.2.3160': attribute type 13 has an invalid length. [ 354.356965][T17604] erspan0: refused to change device tx_queue_len [ 354.379354][T17604] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 354.737293][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 355.050930][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.097375][T17640] geneve4: entered promiscuous mode [ 355.125222][T10230] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 49199 - 0 [ 355.138252][T17645] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 355.146183][T10230] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 49199 - 0 [ 355.171251][T10230] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 49199 - 0 [ 355.181660][T10230] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 49199 - 0 [ 355.213148][T17645] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 355.267351][T17651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3171'. [ 355.311829][T17418] veth0_vlan: entered promiscuous mode [ 355.337483][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 355.339893][T17418] veth1_vlan: entered promiscuous mode [ 355.374001][T17654] netlink: 'syz.4.3173': attribute type 4 has an invalid length. [ 355.393324][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3173'. [ 355.420041][T17654] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 355.447514][T17654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3173'. [ 355.471372][T17418] veth0_macvtap: entered promiscuous mode [ 355.481012][T17654] unsupported nlmsg_type 40 [ 355.489483][T17418] veth1_macvtap: entered promiscuous mode [ 355.544603][T17418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.580808][T17418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.609729][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.640856][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.663152][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.684800][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.947982][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.970873][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.112923][T10241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.151481][T10241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.179238][ T5826] Bluetooth: hci3: command tx timeout [ 356.226718][T17684] netlink: 'syz.3.3183': attribute type 2 has an invalid length. [ 356.284768][T17690] xt_hashlimit: overflow, try lower: 3/0 [ 356.488495][T17699] wireguard0: entered promiscuous mode [ 356.494048][T17699] wireguard0: entered allmulticast mode [ 356.587177][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.596245][T17699] team0: Device wireguard0 is of different type [ 356.599532][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.611197][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.620856][T17709] tls_set_device_offload_rx: netdev not found [ 356.621269][T17697] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3188'. [ 356.638563][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.647407][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.732881][T17703] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 356.829052][ T5826] Bluetooth: hci1: command 0x041b tx timeout [ 356.853513][T17707] C speed is unknown, defaulting to 1000 [ 356.864417][T17707] wg1 speed is unknown, defaulting to 1000 [ 357.186784][ T5823] syz_tun (unregistering): left allmulticast mode [ 357.541620][T17707] chnl_net:caif_netlink_parms(): no params data found [ 357.661950][T17747] geneve2: entered promiscuous mode [ 357.671165][T10241] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36197 - 0 [ 357.703064][T10241] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36197 - 0 [ 357.724700][T17747] __nla_validate_parse: 1 callbacks suppressed [ 357.724718][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 357.764992][T10241] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36197 - 0 [ 357.798480][T10241] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36197 - 0 [ 358.025359][T17707] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.032620][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.040834][T17707] bridge_slave_0: entered allmulticast mode [ 358.048919][T17707] bridge_slave_0: entered promiscuous mode [ 358.057830][T17707] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.065105][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.072619][T17707] bridge_slave_1: entered allmulticast mode [ 358.080936][T17707] bridge_slave_1: entered promiscuous mode [ 358.140919][T17769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3205'. [ 358.173263][T17771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.186938][T17707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.204944][T17707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.256848][ T5826] Bluetooth: hci3: command tx timeout [ 358.368512][T17707] team0: Port device team_slave_0 added [ 358.398131][T17781] netlink: 'syz.0.3207': attribute type 10 has an invalid length. [ 358.412508][T17707] team0: Port device team_slave_1 added [ 358.431881][T17781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3207'. [ 358.454030][T17781] dummy0: entered promiscuous mode [ 358.463754][T17781] bridge0: port 3(dummy0) entered blocking state [ 358.471780][T17781] bridge0: port 3(dummy0) entered disabled state [ 358.479408][T17781] dummy0: entered allmulticast mode [ 358.498759][T17781] bridge0: port 3(dummy0) entered blocking state [ 358.505368][T17781] bridge0: port 3(dummy0) entered forwarding state [ 358.586449][T17707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.595956][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.669808][T17707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.681077][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 358.690493][T17794] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 358.700964][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 358.710746][T17707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.728885][T17794] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 358.735488][T17707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.763206][ T5826] Bluetooth: hci4: command tx timeout [ 358.806262][T17707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.995323][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.003444][ C0] lec:lec_tx_timeout: lec0 [ 359.008499][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.018502][T17707] hsr_slave_0: entered promiscuous mode [ 359.025811][T17707] hsr_slave_1: entered promiscuous mode [ 359.032416][T17707] debugfs: 'hsr0' already exists in 'hsr' [ 359.038681][T17707] Cannot create hsr debugfs directory [ 359.065457][T17813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.171878][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3220'. [ 359.315924][T17828] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3221'. [ 359.326867][T17828] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3221'. [ 359.449197][T17707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.462412][T17839] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3225'. [ 359.470838][T17707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49199 - 0 [ 359.510499][T17839] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3225'. [ 359.553612][T17707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.565019][T17707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49199 - 0 [ 359.619691][T17707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.630591][T17707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49199 - 0 [ 359.777057][T17707] bond0: (slave netdevsim0): Releasing backup interface [ 359.797084][T17707] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 359.820976][T17707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.832387][T17707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49199 - 0 [ 360.066095][T17863] delete_channel: no stack [ 360.104150][T17867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.131383][T17707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.146314][T17707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.158904][T17707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.195874][T17707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 360.295061][T17867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.370923][T17867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.448028][T17886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.455398][T17886] IPv6: NLM_F_CREATE should be set when creating new route [ 360.462730][T17886] IPv6: NLM_F_CREATE should be set when creating new route [ 360.470066][T17886] IPv6: NLM_F_CREATE should be set when creating new route [ 360.503049][T17867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.560402][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bf4a400: rx timeout, send abort [ 360.570839][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bf4a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.618638][T17889] team0: Device ip6gre1 is of different type [ 360.686595][T17890] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 360.767202][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.800695][T17894] netlink: 'syz.1.3238': attribute type 2 has an invalid length. [ 360.810086][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.817467][ T5826] Bluetooth: hci4: command tx timeout [ 360.842278][T17707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.871010][T10234] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.911568][T10234] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.937438][T17898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.966983][T17707] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.996303][T10234] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.003523][T10234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.053656][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.060921][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.074982][T17901] netlink: 'syz.0.3242': attribute type 21 has an invalid length. [ 361.460365][T17922] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 361.523871][T17707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.594194][ T8520] IPVS: starting estimator thread 0... [ 361.600697][T17929] IPVS: ip_vs_add_dest(): server weight less than zero [ 361.706685][T17930] IPVS: using max 29 ests per chain, 69600 per kthread [ 361.720780][T17707] veth0_vlan: entered promiscuous mode [ 361.787354][T17707] veth1_vlan: entered promiscuous mode [ 361.911738][T17707] veth0_macvtap: entered promiscuous mode [ 361.950764][T17707] veth1_macvtap: entered promiscuous mode [ 361.968925][T17944] syzkaller0: entered promiscuous mode [ 361.974616][T17944] syzkaller0: entered allmulticast mode [ 362.033862][T17707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.048662][T17707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.136160][T10241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.154749][T10241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.172605][T10241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.183675][T10241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.369576][T10241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.380623][T10241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.399168][T17961] netlink: 'syz.0.3258': attribute type 9 has an invalid length. [ 362.453542][T17961] netlink: 'syz.0.3258': attribute type 11 has an invalid length. [ 362.482442][T10241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.491018][T10241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.499406][T17961] netlink: 'syz.0.3258': attribute type 12 has an invalid length. [ 362.896769][ T5826] Bluetooth: hci4: command tx timeout [ 363.331049][T18026] __nla_validate_parse: 6 callbacks suppressed [ 363.331070][T18026] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.3276'. [ 363.360860][T18031] SET target dimension over the limit! [ 363.583983][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 363.593116][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 363.866269][T18074] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 364.015886][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 364.023986][ C0] lec:lec_tx_timeout: lec0 [ 364.030061][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.073606][T18088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3286'. [ 364.359690][T18109] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 364.504881][T18117] netlink: 'syz.1.3295': attribute type 9 has an invalid length. [ 364.529033][T18117] netlink: 'syz.1.3295': attribute type 11 has an invalid length. [ 364.545028][T18117] netlink: 204124 bytes leftover after parsing attributes in process `syz.1.3295'. [ 364.943378][T18138] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 364.954907][T18138] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3304'. [ 364.964424][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3304'. [ 364.976770][ T5826] Bluetooth: hci4: command tx timeout [ 365.052889][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 365.258889][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'. [ 365.533488][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3313'. [ 366.093572][T18202] x_tables: duplicate underflow at hook 1 [ 366.272602][T18211] IPVS: set_ctl: invalid protocol: 116 127.0.0.1:20004 [ 366.396963][T18218] sctp: [Deprecated]: syz.4.3324 (pid 18218) Use of int in maxseg socket option. [ 366.396963][T18218] Use struct sctp_assoc_value instead [ 366.516906][T18221] C speed is unknown, defaulting to 1000 [ 366.529384][T18221] wg1 speed is unknown, defaulting to 1000 [ 367.272420][T18264] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 367.282481][T18269] validate_nla: 1 callbacks suppressed [ 367.282500][T18269] netlink: 'syz.1.3338': attribute type 10 has an invalid length. [ 367.299204][T18264] syzkaller0: entered promiscuous mode [ 367.304736][T18264] syzkaller0: entered allmulticast mode [ 367.347822][T18269] netlink: 'syz.1.3338': attribute type 10 has an invalid length. [ 367.629488][T18285] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 367.645201][T18285] bond1 (unregistering): Released all slaves [ 367.838242][T18297] netlink: 'syz.4.3350': attribute type 3 has an invalid length. [ 367.861116][T18297] netlink: 'syz.4.3350': attribute type 2 has an invalid length. [ 368.122982][T18318] tls_set_device_offload_rx: netdev not found [ 368.388428][T18346] __nla_validate_parse: 12 callbacks suppressed [ 368.388449][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3353'. [ 369.045385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 369.053459][ C0] lec:lec_tx_timeout: lec0 [ 369.058411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 369.897704][T18345] geneve2: entered promiscuous mode [ 369.936024][T18349] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.992695][ T35] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 33669 - 0 [ 370.002830][ T35] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 33669 - 0 [ 370.011851][ T35] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 33669 - 0 [ 370.143738][T18362] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 370.186655][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 371.206543][T18325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.220813][T18351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3359'. [ 371.329374][T18375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3369'. [ 371.348778][T18375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3369'. [ 371.363006][T18375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3369'. [ 371.393920][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 371.471160][T18383] siw: device registration error -23 [ 371.667927][T18349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.679479][T18349] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33669 - 0 [ 371.718758][T18402] tipc: Enabling of bearer rejected, media not registered [ 371.734342][T18406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3376'. [ 371.772830][T18349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.787658][T18349] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33669 - 0 [ 371.819744][T18410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3377'. [ 371.839848][T18416] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3372'. [ 372.030208][T18349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.049313][T18349] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33669 - 0 [ 372.256434][T18430] netlink: 'syz.4.3381': attribute type 5 has an invalid length. [ 372.341870][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 33669 - 0 [ 372.358238][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.376832][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 33669 - 0 [ 372.394071][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.453585][T10230] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 33669 - 0 [ 372.469418][T10230] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.546466][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 33669 - 0 [ 372.554823][ T35] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.820714][ T25] block nbd1: Possible stuck request ffff888026480000: control (read@0,1024B). Runtime 210 seconds [ 372.832058][ T25] block nbd1: Possible stuck request ffff888026480200: control (read@1024,1024B). Runtime 210 seconds [ 372.843370][ T25] block nbd1: Possible stuck request ffff888026480400: control (read@2048,1024B). Runtime 210 seconds [ 372.856638][ T25] block nbd1: Possible stuck request ffff888026480600: control (read@3072,1024B). Runtime 210 seconds [ 373.384291][T18491] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 373.419192][T18491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.493857][T18499] netlink: 'syz.4.3400': attribute type 29 has an invalid length. [ 373.728910][T18514] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 373.770486][T18514] bond1: option primary_reselect: invalid value (255) [ 373.793587][T18514] bond1 (unregistering): Released all slaves [ 373.894767][T18529] __nla_validate_parse: 9 callbacks suppressed [ 373.894786][T18529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3408'. [ 374.037779][T18535] netlink: 'syz.0.3410': attribute type 4 has an invalid length. [ 374.053845][T18535] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3410'. [ 374.065331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.073429][ C0] lec:lec_tx_timeout: lec0 [ 374.078462][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.086522][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 374.113263][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 374.125411][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 374.268069][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 374.324284][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3415'. [ 374.548398][T18565] tipc: Enabling of bearer rejected, failed to enable media [ 374.593655][T18566] syzkaller1: entered promiscuous mode [ 374.616701][T18566] syzkaller1: entered allmulticast mode [ 374.790490][T18579] bond0: entered promiscuous mode [ 374.812827][T18579] bond_slave_0: entered promiscuous mode [ 374.827487][T18579] bond_slave_1: entered promiscuous mode [ 375.410885][T18605] nbd: nbd2 already in use [ 375.434483][T18605] block nbd2: NBD_DISCONNECT [ 375.451161][T18605] block nbd2: Send disconnect failed -32 [ 375.475679][T18605] block nbd2: shutting down sockets [ 375.504131][T18607] syzkaller0: entered promiscuous mode [ 375.526494][T18607] syzkaller0: entered allmulticast mode [ 375.602249][T18613] nbd: couldn't find device at index 3 [ 375.789972][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3437'. [ 375.802134][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 377.218143][T18609] netlink: 'syz.2.3433': attribute type 3 has an invalid length. [ 377.226202][T18609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3433'. [ 377.408424][T10234] tipc: Resetting bearer [ 377.591463][T10234] dvmrp0 (unregistering): left allmulticast mode [ 377.783599][T10234] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 377.896557][T10234] tipc: Disabling bearer [ 378.042173][T10234] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 378.050881][T10234] bridge8 (unregistering): left promiscuous mode [ 378.192506][T10234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.205118][T10234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.216358][T10234] bond0 (unregistering): Released all slaves [ 378.229690][T10234] bond1 (unregistering): Released all slaves [ 378.247164][T10234] bond2 (unregistering): Released all slaves [ 378.270123][T10234] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 378.282546][T10234] bond3 (unregistering): Released all slaves [ 378.310739][T10234] bond4 (unregistering): Released all slaves [ 378.325455][T10234] bond5 (unregistering): Released all slaves [ 378.344375][T10234] bond6 (unregistering): Released all slaves [ 378.364561][T10234] bond7 (unregistering): Released all slaves [ 378.382026][T10234] bond8 (unregistering): Released all slaves [ 378.397305][T10234] bond9 (unregistering): Released all slaves [ 378.411715][T10234] bond10 (unregistering): Released all slaves [ 378.477400][T18657] macvtap1: entered allmulticast mode [ 378.482853][T18657] veth0_macvtap: entered allmulticast mode [ 378.571854][T10234] tipc: Disabling bearer [ 378.584945][T10234] tipc: Left network mode [ 378.831935][T18673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 378.842973][T18627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.082059][T18685] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 379.294259][T18695] netlink: 'syz.0.3454': attribute type 2 has an invalid length. [ 379.397416][T18703] __nla_validate_parse: 2 callbacks suppressed [ 379.397438][T18703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3457'. [ 379.424387][T18712] netlink: 'syz.0.3461': attribute type 1 has an invalid length. [ 379.596976][T18722] tipc: Enabling of bearer rejected, media not registered [ 379.674020][T10234] hsr_slave_0: left promiscuous mode [ 379.694664][T10234] hsr_slave_1: left promiscuous mode [ 379.711527][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.723722][T10234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.735229][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.760017][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 379.760580][T10234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.778987][T18735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3467'. [ 379.846237][T18740] Bluetooth: MGMT ver 1.23 [ 379.850981][T18740] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 379.857534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 379.857561][ C0] lec:lec_tx_timeout: lec0 [ 379.868456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.907330][T10234] team0 (unregistering): Port device batadv1 removed [ 379.974305][T10234] pimreg (unregistering): left allmulticast mode [ 380.290714][T10234] team0 (unregistering): Port device team_slave_1 removed [ 380.311586][T10234] team0 (unregistering): Port device team_slave_0 removed [ 380.335285][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 380.576063][T18747] xfrm1: entered promiscuous mode [ 380.581253][T18747] xfrm1: entered allmulticast mode [ 380.789014][T18768] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 381.000857][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 381.042065][T18768] bond1: entered promiscuous mode [ 381.054460][T18768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.086524][T18778] bond1: (slave bridge4): making interface the new active one [ 381.094230][T18778] bridge4: entered promiscuous mode [ 381.101898][T18778] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 381.417706][T10234] IPVS: stop unused estimator thread 0... [ 381.713007][T18807] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3487'. [ 381.728592][T18807] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3487'. [ 381.815005][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 381.846112][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 381.875173][T18822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3491'. [ 382.180730][T18837] bridge0: port 3(gretap0) entered blocking state [ 382.188835][T18837] bridge0: port 3(gretap0) entered disabled state [ 382.196926][T18837] gretap0: entered allmulticast mode [ 382.205064][T18837] gretap0: entered promiscuous mode [ 382.212455][T18837] bridge0: port 3(gretap0) entered blocking state [ 382.219084][T18837] bridge0: port 3(gretap0) entered forwarding state [ 382.362800][T18850] netlink: 'syz.1.3501': attribute type 12 has an invalid length. [ 382.379233][T18846] : entered promiscuous mode [ 382.387261][T18850] netlink: 'syz.1.3501': attribute type 11 has an invalid length. [ 382.599379][T18865] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 382.758934][T18869] macvtap1: entered allmulticast mode [ 382.775418][T18869] veth0_macvtap: entered allmulticast mode [ 382.835222][T18875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.879788][T18879] veth0: entered promiscuous mode [ 382.886954][T18879] veth0: left promiscuous mode [ 382.973412][T18884] geneve2: entered promiscuous mode [ 382.978933][T18884] geneve2: entered allmulticast mode [ 382.987792][T10241] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 383.021377][T10241] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 383.058107][T10241] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 383.101303][T10241] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 383.182226][T18903] netlink: 'syz.0.3519': attribute type 1 has an invalid length. [ 383.304682][T18913] xt_connbytes: Forcing CT accounting to be enabled [ 383.321732][T18914] xt_connbytes: Forcing CT accounting to be enabled [ 383.613246][T18930] syzkaller0: entered promiscuous mode [ 383.619363][T18930] syzkaller0: entered allmulticast mode [ 383.664461][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.672184][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.861825][T18944] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 383.870495][T18944] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 383.892494][T18944] netlink: 'syz.0.3529': attribute type 8 has an invalid length. [ 384.753789][T18997] C speed is unknown, defaulting to 1000 [ 384.763435][T18997] wg1 speed is unknown, defaulting to 1000 [ 384.823176][T19007] __nla_validate_parse: 13 callbacks suppressed [ 384.823198][T19007] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3546'. [ 384.895451][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 384.903580][ C0] lec:lec_tx_timeout: lec0 [ 384.908806][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.957006][T19007] erspan0: entered promiscuous mode [ 384.962379][T19007] erspan0: entered allmulticast mode [ 385.078345][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3550'. [ 385.178895][T19029] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3552'. [ 385.237124][T19030] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3552'. [ 385.264468][T19032] macvtap0: Device is already in use. [ 385.283956][T19026] bridge0: port 3(gretap0) entered blocking state [ 385.306050][T19026] bridge0: port 3(gretap0) entered disabled state [ 385.312779][T19026] gretap0: entered allmulticast mode [ 385.339109][T19026] gretap0: entered promiscuous mode [ 385.357543][T19026] bridge0: port 3(gretap0) entered blocking state [ 385.364165][T19026] bridge0: port 3(gretap0) entered forwarding state [ 385.503166][T19040] bond2: entered allmulticast mode [ 385.591972][T19048] bridge5: entered promiscuous mode [ 385.611175][T19048] bridge5: entered allmulticast mode [ 385.647561][T19043] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 385.760539][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3561'. [ 385.827889][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 385.846658][T19056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3561'. [ 386.122318][T19078] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3567'. [ 386.360470][T19091] sctp: [Deprecated]: syz.1.3572 (pid 19091) Use of int in maxseg socket option. [ 386.360470][T19091] Use struct sctp_assoc_value instead [ 386.380350][T19091] sctp: [Deprecated]: syz.1.3572 (pid 19091) Use of int in maxseg socket option. [ 386.380350][T19091] Use struct sctp_assoc_value instead [ 386.479673][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 386.562868][T19100] syzkaller0: entered promiscuous mode [ 386.572301][T19100] syzkaller0: entered allmulticast mode [ 386.828630][T19115] syz_tun: entered allmulticast mode [ 386.858206][T19114] syz_tun: left allmulticast mode [ 386.880268][T19118] netlink: 'syz.1.3580': attribute type 20 has an invalid length. [ 386.915910][T19118] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.311496][T19140] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3587'. [ 387.330801][T19143] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 387.356447][T19143] syzkaller0: entered promiscuous mode [ 387.361983][T19143] syzkaller0: entered allmulticast mode [ 387.530140][T19158] syzkaller1: entered promiscuous mode [ 387.561995][T19158] syzkaller1: entered allmulticast mode [ 388.169412][T19181] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 388.354970][T19187] ksmbd: Unknown IPC event: 8, ignore. [ 388.407215][T19187] x_tables: duplicate underflow at hook 2 [ 388.427069][T19200] netlink: 'syz.2.3601': attribute type 16 has an invalid length. [ 388.445397][T19200] netlink: 'syz.2.3601': attribute type 17 has an invalid length. [ 388.630326][T19200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.905043][T19213] syz_tun: entered promiscuous mode [ 389.582555][T19248] syz_tun: entered allmulticast mode [ 389.609260][T19248] geneve3: entered promiscuous mode [ 389.617820][T19245] syz_tun: left allmulticast mode [ 389.761558][T19260] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 389.915624][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 389.923722][ C0] lec:lec_tx_timeout: lec0 [ 389.929504][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 389.955865][T19268] tipc: Started in network mode [ 389.965555][T19268] tipc: Node identity ac14140f, cluster identity 4711 [ 389.973841][T19268] tipc: New replicast peer: 255.255.255.255 [ 389.981544][T19268] tipc: Enabled bearer , priority 10 [ 390.439152][T19280] __nla_validate_parse: 11 callbacks suppressed [ 390.439172][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3633'. [ 390.477683][T19283] netlink: 'syz.0.3632': attribute type 17 has an invalid length. [ 390.543804][T19283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3632'. [ 390.582563][T19283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3632'. [ 390.838084][T19293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.857035][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3636'. [ 390.984221][T19303] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 391.017391][T19303] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3638'. [ 391.075141][T19298] C speed is unknown, defaulting to 1000 [ 391.096199][ T7563] tipc: Node number set to 2886997007 [ 391.114980][T19298] wg1 speed is unknown, defaulting to 1000 [ 391.297298][T19313] : renamed from hsr0 (while UP) [ 391.381271][T19318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3642'. [ 391.505139][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 391.767390][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'. [ 391.787378][T19333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3647'. [ 391.803547][T19335] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 391.814915][T19335] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3650'. [ 393.055824][T19376] Unsupported ieee802154 address type: 0 [ 393.543623][T19401] netlink: 'syz.3.3664': attribute type 10 has an invalid length. [ 393.629647][T19401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.679533][T19401] batadv0: entered promiscuous mode [ 393.706336][T19401] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 394.605793][T19432] netlink: 'syz.4.3671': attribute type 3 has an invalid length. [ 394.806032][T19435] netlink: 'syz.3.3672': attribute type 3 has an invalid length. [ 394.945369][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 394.953562][ C0] lec:lec_tx_timeout: lec0 [ 394.958969][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.566636][ T7563] IPVS: starting estimator thread 0... [ 395.692328][T19461] IPVS: using max 26 ests per chain, 62400 per kthread [ 395.753223][ T5191] udevd[5191]: worker [5832] /devices/virtual/block/nbd1 timeout; kill it [ 395.827379][ T5191] udevd[5191]: seq 13763 '/devices/virtual/block/nbd1' killed [ 395.924556][T19470] netlink: 'syz.0.3679': attribute type 33 has an invalid length. [ 396.132789][T19479] batadv_slave_1: default FDB implementation only supports local addresses [ 396.160571][T19479] netlink: 'syz.0.3682': attribute type 1 has an invalid length. [ 396.257616][T19480] __nla_validate_parse: 10 callbacks suppressed [ 396.257637][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'. [ 396.262556][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'. [ 396.296804][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 396.299305][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 396.550581][T19498] syzkaller1: entered promiscuous mode [ 396.578950][T19498] syzkaller1: entered allmulticast mode [ 396.594480][T19499] ip6t_srh: unknown srh match flags 4000 [ 396.602392][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 396.612406][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3688'. [ 396.640402][T19505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.872624][T19523] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 396.931947][T19524] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 396.945743][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 396.968663][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'. [ 397.098743][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 397.249434][T19547] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001 [ 397.271643][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3702'. [ 397.740148][T19585] netlink: 'syz.4.3711': attribute type 15 has an invalid length. [ 398.049706][T19602] syzkaller1: entered promiscuous mode [ 398.063287][T19602] syzkaller1: entered allmulticast mode [ 398.612670][T19634] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 398.668122][T19634] bond3: (slave lo): Enslaving as an active interface with an up link [ 398.697706][T19634] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 398.857821][ T8520] IPVS: starting estimator thread 0... [ 398.876669][T19653] IPVS: ip_vs_edit_dest(): server weight less than zero [ 398.955521][T19655] IPVS: using max 34 ests per chain, 81600 per kthread [ 398.967600][T19660] : entered promiscuous mode [ 399.226692][ T5826] Bluetooth: hci4: command tx timeout [ 399.409117][T19638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.600737][T19698] x_tables: duplicate underflow at hook 2 [ 399.876402][T19711] netlink: 'syz.3.3751': attribute type 6 has an invalid length. [ 399.884204][T19711] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.965621][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 399.973749][ C0] lec:lec_tx_timeout: lec0 [ 399.978496][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.013981][T19717] syzkaller0: entered promiscuous mode [ 400.032093][T19717] syzkaller0: entered allmulticast mode [ 400.067265][T19721] netlink: 'syz.3.3756': attribute type 1 has an invalid length. [ 400.105593][T19721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.168516][T19721] bond1: (slave gretap1): making interface the new active one [ 400.200248][T19721] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 400.498044][T19758] : renamed from vlan1 [ 400.674597][T19768] hsr_slave_0 (unregistering): left promiscuous mode [ 400.799831][T19789] netlink: get zone limit has 4 unknown bytes [ 400.819437][T19773] gretap0: left allmulticast mode [ 400.839945][T19773] gretap0: left promiscuous mode [ 400.845122][T19773] bridge0: port 3(gretap0) entered disabled state [ 400.855746][T19792] netlink: get zone limit has 4 unknown bytes [ 400.913112][T19773] bridge_slave_1: left allmulticast mode [ 400.923041][T19773] bridge_slave_1: left promiscuous mode [ 400.929376][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.943021][T19797] netlink: 'syz.4.3775': attribute type 22 has an invalid length. [ 400.961214][T19773] bridge_slave_0: left allmulticast mode [ 400.967148][T19773] bridge_slave_0: left promiscuous mode [ 400.973158][T19773] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.113392][T19807] netlink: Unknown conntrack attr (0) [ 401.149428][T19801] netlink: 'syz.4.3775': attribute type 22 has an invalid length. [ 401.287482][T19801] netlink: 'syz.4.3775': attribute type 22 has an invalid length. [ 401.315856][T19801] __nla_validate_parse: 58 callbacks suppressed [ 401.315877][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 401.402665][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3783'. [ 401.581218][T19821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3787'. [ 401.609762][T19828] netlink: 'syz.3.3788': attribute type 16 has an invalid length. [ 401.621951][T19828] netlink: 'syz.3.3788': attribute type 17 has an invalid length. [ 401.652983][T19828] bond0: left promiscuous mode [ 401.658209][T19828] bond_slave_0: left promiscuous mode [ 401.685009][T19828] bond_slave_1: left promiscuous mode [ 401.698199][T19828] batadv0: left promiscuous mode [ 401.717254][T19828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.766164][T19828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.809866][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 401.840056][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3790'. [ 401.880482][T19845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.900332][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 401.976042][T19847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3792'. [ 402.010754][T19847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3792'. [ 402.085971][T19853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.191684][T19856] xt_recent: Unsupported userspace flags (000000b1) [ 402.250106][T19863] netlink: 'syz.2.3799': attribute type 1 has an invalid length. [ 402.262646][T19859] netlink: 'syz.4.3795': attribute type 4 has an invalid length. [ 402.385340][T19863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.407187][T19870] bond2: (slave ip6erspan0): making interface the new active one [ 402.417716][T19870] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 402.643489][ T5826] block nbd2: Receive control failed (result -32) [ 402.781346][T19890] veth0: entered promiscuous mode [ 402.800434][T19881] veth0: left promiscuous mode [ 402.855058][T19903] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 402.916326][ T25] block nbd1: Possible stuck request ffff888026480000: control (read@0,1024B). Runtime 240 seconds [ 402.928283][ T25] block nbd1: Possible stuck request ffff888026480200: control (read@1024,1024B). Runtime 240 seconds [ 402.939828][ T25] block nbd1: Possible stuck request ffff888026480400: control (read@2048,1024B). Runtime 240 seconds [ 402.951012][ T25] block nbd1: Possible stuck request ffff888026480600: control (read@3072,1024B). Runtime 240 seconds [ 403.018601][T19911] netlink: 'syz.2.3812': attribute type 10 has an invalid length. [ 403.095940][T19911] batman_adv: batadv0: Adding interface: netdevsim0 [ 403.102827][T19911] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.129711][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'. [ 403.130954][T19911] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 403.167091][ T29] audit: type=1800 audit(1773139250.140:8): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3813" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=767 res=0 errno=0 [ 403.319430][T19920] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3814'. [ 403.702596][T19940] erspan1: entered allmulticast mode [ 403.806676][T19940] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 403.832949][T19940] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 403.844786][T19940] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 403.975958][T19943] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 403.990857][T19943] bond2: (slave vcan1): making interface the new active one [ 404.000535][T19943] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 404.641411][T20000] bond3: entered promiscuous mode [ 404.651201][T20000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.742166][T20006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.791279][T20000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.811606][T20000] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 404.824970][T20000] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 404.848543][T20000] bond3: (slave gre1): making interface the new active one [ 404.875705][T20000] gre1: entered promiscuous mode [ 404.884053][T20000] ------------[ cut here ]------------ [ 404.890034][T20000] kernel BUG at net/core/skbuff.c:2306! [ 404.928725][T20000] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 404.935070][T20000] CPU: 1 UID: 0 PID: 20000 Comm: syz.3.3840 Not tainted syzkaller #0 PREEMPT(full) [ 404.944485][T20000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.954589][T20000] RIP: 0010:pskb_expand_head+0x12da/0x1320 [ 404.960576][T20000] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 11 6d ba f8 e9 d3 f3 ff ff e8 97 2b 50 f8 90 <0f> 0b e8 8f 2b 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 404.980200][T20000] RSP: 0018:ffffc900030c6330 EFLAGS: 00010283 [ 404.985421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.986289][T20000] RAX: ffffffff89756dd9 RBX: ffff8880553a0640 RCX: 0000000000080000 [ 404.994299][ C0] lec:lec_tx_timeout: lec0 [ 405.002267][T20000] RDX: ffffc90005989000 RSI: 000000000003b356 RDI: 000000000003b357 [ 405.002285][T20000] RBP: 0000000000000000 R08: ffff88801f737a28 R09: 0000000000000018 [ 405.002300][T20000] R10: dffffc0000000000 R11: ffffffff8a336d60 R12: dffffc0000000000 [ 405.002317][T20000] R13: 0000000000000820 R14: 0000000093cab550 R15: 0000000000000180 [ 405.015822][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.022688][T20000] FS: 00007f0ad05926c0(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 405.053521][T20000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.060164][T20000] CR2: 0000200000001280 CR3: 0000000036a48000 CR4: 00000000003526f0 [ 405.068166][T20000] Call Trace: [ 405.071462][T20000] [ 405.074414][T20000] ? trace_kmem_cache_alloc+0x29/0xf0 [ 405.079858][T20000] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 405.086039][T20000] ipgre_header+0xd5/0x350 [ 405.090592][T20000] arp_create+0x41c/0xa00 [ 405.095006][T20000] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.100313][T20000] ? __pfx_arp_create+0x10/0x10 [ 405.105191][T20000] ? netlink_broadcast_filtered+0xf72/0x1020 [ 405.111300][T20000] arp_send+0xa5/0x190 [ 405.115408][T20000] inetdev_event+0x11bd/0x1610 [ 405.120244][T20000] ? __pfx_inetdev_event+0x10/0x10 [ 405.125401][T20000] notifier_call_chain+0x1be/0x400 [ 405.130641][T20000] call_netdevice_notifiers+0x90/0xd0 [ 405.136109][T20000] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 405.142206][T20000] bond_peer_notify_may_events+0x370/0x5b0 [ 405.148159][T20000] bond_change_active_slave+0x2589/0x35f0 [ 405.153913][T20000] ? __pfx_bond_change_active_slave+0x10/0x10 [ 405.160010][T20000] ? try_to_wake_up+0x7fc/0x1390 [ 405.164977][T20000] ? __queue_work+0x1a1/0x1020 [ 405.169826][T20000] ? __queue_work+0xc76/0x1020 [ 405.174620][T20000] ? mod_delayed_work_on+0xdf/0x190 [ 405.180024][T20000] bond_select_active_slave+0x909/0xd40 [ 405.185604][T20000] ? __pfx_bond_select_active_slave+0x10/0x10 [ 405.191710][T20000] ? __pfx_bond_set_carrier+0x10/0x10 [ 405.197120][T20000] ? netdev_is_rx_handler_busy+0x56/0x120 [ 405.202860][T20000] ? __pfx_bond_handle_frame+0x10/0x10 [ 405.208334][T20000] bond_enslave+0x22a5/0x3c40 [ 405.213047][T20000] ? __pfx_bond_enslave+0x10/0x10 [ 405.218093][T20000] ? __pfx___dev_notify_flags+0x10/0x10 [ 405.223744][T20000] ? __dev_change_flags+0x4c6/0x690 [ 405.228972][T20000] ? mutex_is_locked+0x17/0x50 [ 405.233793][T20000] do_set_master+0x533/0x6d0 [ 405.238462][T20000] rtnl_newlink_create+0x6af/0xb70 [ 405.243616][T20000] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 405.249277][T20000] ? __pfx___mutex_lock+0x10/0x10 [ 405.254398][T20000] ? ns_capable+0x89/0xe0 [ 405.258754][T20000] rtnl_newlink+0x1666/0x1be0 [ 405.263463][T20000] ? __pfx_rtnl_newlink+0x10/0x10 [ 405.268513][T20000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.274642][T20000] ? kasan_quarantine_put+0xbb/0x1f0 [ 405.279956][T20000] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.285183][T20000] ? kmem_cache_free+0x187/0x630 [ 405.290156][T20000] ? nlmon_xmit+0xb0/0x100 [ 405.294697][T20000] ? __lock_acquire+0x6b5/0x2cf0 [ 405.299671][T20000] ? __local_bh_enable_ip+0xd0/0x130 [ 405.304992][T20000] ? lockdep_hardirqs_on+0x7a/0x110 [ 405.310217][T20000] ? __dev_queue_xmit+0x277/0x3890 [ 405.315347][T20000] ? __local_bh_enable_ip+0xd0/0x130 [ 405.320660][T20000] ? __dev_queue_xmit+0x277/0x3890 [ 405.325820][T20000] ? __pfx_rtnl_newlink+0x10/0x10 [ 405.330870][T20000] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 405.335838][T20000] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 405.340994][T20000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.346479][T20000] ? ref_tracker_free+0x693/0x840 [ 405.351616][T20000] ? __copy_skb_header+0xa3/0x4a0 [ 405.356667][T20000] ? __pfx_ref_tracker_free+0x10/0x10 [ 405.362071][T20000] netlink_rcv_skb+0x232/0x4b0 [ 405.366946][T20000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.372430][T20000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.377750][T20000] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.382982][T20000] netlink_unicast+0x80f/0x9b0 [ 405.387772][T20000] ? __pfx_netlink_unicast+0x10/0x10 [ 405.393078][T20000] ? netlink_sendmsg+0x650/0xb40 [ 405.398043][T20000] ? skb_put+0x11b/0x210 [ 405.402311][T20000] netlink_sendmsg+0x813/0xb40 [ 405.407110][T20000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.412426][T20000] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.417472][T20000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.422797][T20000] ____sys_sendmsg+0x972/0x9f0 [ 405.427654][T20000] ? futex_unqueue+0x211/0x240 [ 405.432489][T20000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.437832][T20000] ? import_iovec+0x73/0xa0 [ 405.442458][T20000] ___sys_sendmsg+0x2a5/0x360 [ 405.447156][T20000] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.452376][T20000] ? futex_wait+0x29a/0x380 [ 405.456919][T20000] ? __fget_files+0x2a/0x420 [ 405.461575][T20000] ? __fget_files+0x3a0/0x420 [ 405.466289][T20000] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.471254][T20000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.476735][T20000] ? rcu_is_watching+0x15/0xb0 [ 405.481553][T20000] do_syscall_64+0x14d/0xf80 [ 405.486176][T20000] ? trace_irq_disable+0x3b/0x150 [ 405.491245][T20000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.497328][T20000] ? clear_bhb_loop+0x40/0x90 [ 405.502023][T20000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.507932][T20000] RIP: 0033:0x7f0acf79c799 [ 405.512373][T20000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.532007][T20000] RSP: 002b:00007f0ad0592028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.540446][T20000] RAX: ffffffffffffffda RBX: 00007f0acfa15fa0 RCX: 00007f0acf79c799 [ 405.548436][T20000] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 405.556424][T20000] RBP: 00007f0acf832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 405.564414][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.572400][T20000] R13: 00007f0acfa16038 R14: 00007f0acfa15fa0 R15: 00007ffe86693bd8 [ 405.580406][T20000] [ 405.583454][T20000] Modules linked in: [ 405.592505][T20000] ---[ end trace 0000000000000000 ]--- [ 405.643639][T20000] RIP: 0010:pskb_expand_head+0x12da/0x1320 [ 405.650809][T20000] Code: f8 e9 81 f3 ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e0 f3 ff ff 4c 89 ff e8 11 6d ba f8 e9 d3 f3 ff ff e8 97 2b 50 f8 90 <0f> 0b e8 8f 2b 50 f8 90 0f 0b 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 405.678826][T20000] RSP: 0018:ffffc900030c6330 EFLAGS: 00010283 [ 405.690040][T20000] RAX: ffffffff89756dd9 RBX: ffff8880553a0640 RCX: 0000000000080000 [ 405.700341][T20000] RDX: ffffc90005989000 RSI: 000000000003b356 RDI: 000000000003b357 [ 405.710356][T20000] RBP: 0000000000000000 R08: ffff88801f737a28 R09: 0000000000000018 [ 405.718791][T20000] R10: dffffc0000000000 R11: ffffffff8a336d60 R12: dffffc0000000000 [ 405.729256][T20000] R13: 0000000000000820 R14: 0000000093cab550 R15: 0000000000000180 [ 405.738721][T20000] FS: 00007f0ad05926c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 405.747966][T20000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.754591][T20000] CR2: 00007f66c2de9e80 CR3: 0000000036a48000 CR4: 00000000003526f0 [ 405.762931][T20000] Kernel panic - not syncing: Fatal exception [ 405.769631][T20000] Kernel Offset: disabled [ 405.773980][T20000] Rebooting in 86400 seconds..