last executing test programs: 16.304124408s ago: executing program 1 (id=3276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000180)=@fragment={0x84, 0x0, 0x1, 0x0, 0x0, 0x7, 0x65}, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x7ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x7ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)='\t', 0x1, 0x4000000, &(0x7f0000000380)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c) 15.24121248s ago: executing program 1 (id=3282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc00}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.015236483s ago: executing program 1 (id=3284): socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="344a05abdea71eac1c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r0, @ANYBLOB="0500110002000000"], 0x4c}}, 0x8000002) 14.929064525s ago: executing program 1 (id=3285): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c}, @initr0, @exit], {0x95, 0x0, 0x0, 0x1010000}}, &(0x7f0000000000)='GPL\x00'}, 0x80) 14.584320822s ago: executing program 1 (id=3289): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280050003000800000005000300050000000500"], 0x90}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x4, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32=r8, @ANYRES64=r5, @ANYRES8=r6], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRESOCT, @ANYRESHEX=r1], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 11.110769953s ago: executing program 1 (id=3305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0xfffc, 0x3, @loopback, 0x8}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x401, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xfff3}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x20000009, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000010000000000000420000000e0001006e657464657673696d00f5948cafea50fc165320e53c185500000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c002}, 0x20044011) r8 = socket$caif_stream(0x25, 0x1, 0x5) recvmmsg(r8, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10100, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4c084) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)=""/106, &(0x7f0000000000)=0x6a) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x14f2, &(0x7f0000001900)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "c3c672", 0x14bc, 0x3a, 0x0, @private1, @rand_addr=' \x01\x00', {[@routing={0x3c, 0xc, 0x1, 0x6, 0x0, [@local, @empty, @local, @mcast2, @private1, @empty]}, @srh={0x32, 0x2, 0x4, 0x1, 0x2, 0x8, 0x5, [@mcast1]}, @srh={0x2f, 0x6, 0x4, 0x3, 0x12, 0x10, 0x6d5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x26}, @empty]}, @fragment={0x1d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x67}, @srh={0x0, 0x2, 0x4, 0x1, 0x8, 0x10, 0xc, [@private1]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0xc5, 0x5, 0x734, 0xa0600000, [{0x1, 0x2, "e544559f7e84484917aaa16ff555dd4f"}, {0x2}, {0x19, 0x1a, "517ae21ace0c39752a824d38970f6a3cf9b376c65d59b9faaeacd75eb6b393fab452ccd6fa769107bdd5320dc3b5d7ea2736889b75d4a736f4b2d4889202f567bc14ef3a87042680096dbc3038db43526e39570a979d46a0e76fda5ce12bbd6345ebfa7a3844254ee8a3ddf17c3f8ed227a3f556b57916d182fd1bbe5dfeb0c0e72ac6f4d3762cf6b2970833db617fb80233ad1be871dab5156c68913b9d118e71a84f33c271597f42bbbbb7636129b8656da8e597afd1de2cf162959292ccfc5a2cbbd8724f67bc8b28df945ff9"}, {0x4, 0x13, "83a620aa0a72e8b6b722f8e2e21f08ef792e2355e5d386de8e245f3cff65289ce082993ea30be754fdacbcfadb3e1642c583493c1ac89416fbc1efb268756543748465864d5b7cbb767c18664584e2405a0806f9d0cb9407221c8643827c0bb221196089ee6d690879d47399f82c3ca2e2916957f483e7893587d393d1d8a3e6730ae57d9432e232d9f11833de7db558fc95405f5c42"}, {0x5, 0x14, "8093aec0edad74e2ff82b94f0022343ab1ad269a963db2eed3ff157a1fd03b88efa6757f336c8ffd8cf7be157056f8addd4e6958ffa866b0b5129f9669861b3f9cd2ea3c4a29df0e397b943fa1068008d26c16cbe952393323a4e8f1db23678a528c79e9ffaaf01bb694f6fea417bbbc6d4fe48b4a69acbcba62c3bd048af58704c5a66e13d6745bc2e3e523b908a1b70cd250f176ef67c4845e6324af1c5a"}, {0x1, 0x8, "60852f7a400af7c202ead0d4e6c0eb713d474fa997253ce94ab9f0fc5d6507172ac6028bd2d349b5217a0108168df1f677b8df0d36b780b21a4369eed57ce7f35be698578c"}, {0x4, 0x4, "0db4f371f2ac800f00e16a7941442e11e6554313b1b58fee0c33a1f7e21bf0d3f14d6aa937"}, {0x1f, 0x12, "7d04d80c5b713a489b6e3e73a6a0a888a77d1437f79ddfe1fd835aec986b4827f7f1b4a867e6345901f645484e20906e80c127e9602a964d23817077c8b2166c117f30d9a7abc8c2cb45ff24bc313f6246f08ce34eb419814c5f2ca1a2b2bec8d16024cfbdf01a6bcdfc251ec22922f4ff5b1618662f54f968e06d56b7167d9a4985e2c00624b5b8e8a048cd93b5e6"}, {0x1f, 0x16, "ea46d5e310ac1d115859d56af19b7ef9393f7c449291e852c2914ddd5ee12c9c10044cde353b80acd511b0626e145e7a6731b36d7390b55cebf58ab42c6e151fa70517416a3c980060eba282a9d4a3bd9a72f768f65833cd6b7c9ce0f659ab7395c8969e1bb8ae60b9a03bc313685e724ffcff8bc29807a2a0213a095178710588addd2a2cd89568298831bd2f50a809d040c6550769d880ca4e7b01e90ae787e49c8c559637a5a59160bff576e0c66af4d9573a"}, {0x1, 0x200, "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"}]}}}}}}, 0x0) 10.444974599s ago: executing program 0 (id=3312): r0 = socket$inet6(0xa, 0x805, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000640)=""/66, 0x42, 0x0, &(0x7f00000006c0)=""/105, 0x69}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xa, &(0x7f00000007c0)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000040)="193260837b332455cf9c26097878c1ee5d2bcf675521c52d618f460adf386ac036724a3f99d743ef77a5550543a3845e449de34f1162ebd2859c71877c494b07409cdde84c98d1073f9f8e30b394598eb40ea87031ee55a0b88c2a8d38c15c9c85c1289e4a71716ed3b62b031ceca46085f215f848bfc0d94765f3d02a", &(0x7f00000000c0)=""/158, &(0x7f0000000300)="c79bb37e4067ba6da28ce8568cdbbb255f1c73bca832cc0cde62a3cdc0c6cd8a81c2aafca0a620040ba2e713a8c1fd62afd5f9062cdd4e67ea053d01e68143fc6f3beb14cb26c83280fd122264105ce3a050df315c2453debea0a1535b51ebabc95ce5de4c0919a088e56f082baded98f38f641648b4", &(0x7f0000000380)="010a781704d1479ed5994f00f31c5922521c4c5eadc0324a059ed3f81cf9b7cd7acccf2a83551c142853995648d8d9fd6c250d3f9e84868de0aff0018a7cbf16793fced15a518640f5dc96b8511f68a69c0d0b6b204832e9c411c943f2849639f0a6ac0ef8e9ba392db489d3eee5352577c41979517586c1fe3626fad5b31345cbd1d6fd7834da6b156b4b32d249cf136fae313e1b158c494e98c4c74babefb058cf1721104cd27a0494d7f06612076718ec182f91a67bd3285b619b662344fa9595936c3b008dd22ff96455e9534bfcfcc7e91bd5210c36013dfb94", 0x5, r3}, 0x38) 10.287159046s ago: executing program 0 (id=3313): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 7.988334983s ago: executing program 2 (id=3325): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="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", 0x184}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 7.497168595s ago: executing program 2 (id=3326): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r0, 0x300, 0x10001, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000800}, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r3}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) connect$ax25(r6, &(0x7f0000000500)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) (async) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000140)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x1}, 0xfff8}) 7.171309176s ago: executing program 2 (id=3327): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000001c0)="4b1a011f8064fc", 0x7}], 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 7.004314256s ago: executing program 2 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4f, 0x7, 0x1, 0x0, "7311e0242a0947df8b32846235703be87d687911aee9887d076470419e2bae8976f3d21d312d02144d55975a191e97ffa9da048fe3ef66ae95d17ebf48f9381ca65d0edf813523fdd75ab0"}]}], {0x14}}, 0x11c}}, 0x4000040) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 6.975174983s ago: executing program 0 (id=3329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2}], 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 6.739398412s ago: executing program 2 (id=3330): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c}, @initr0, @exit], {0x95, 0x0, 0x0, 0x8000000}}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6.581768181s ago: executing program 2 (id=3332): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) close(0x4) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) unshare(0x6a040000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r4], 0x38}}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000001180)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000000)=0x1ff, 0x4) 6.527140654s ago: executing program 0 (id=3333): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_modinfo}) sendfile(r1, r1, 0x0, 0x1) close(r1) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$FIOCLEX(r3, 0x5451) 3.429599336s ago: executing program 0 (id=3335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="050200000000fddb002513000009"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000300)={0xa, 0x4e22, 0xffffffff, @mcast1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x40000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) listen(r4, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89f9, &(0x7f0000000000)={'veth1_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r10 = socket(0x10, 0x3, 0xc) write(r10, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r11 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r10, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32], 0x64}}, 0x0) 2.071052665s ago: executing program 0 (id=3338): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.944915492s ago: executing program 4 (id=3340): socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmsg$unix(r0, 0x0, 0x2062) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.875946902s ago: executing program 3 (id=3341): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c}, @initr0, @exit], {0x95, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.716425185s ago: executing program 3 (id=3342): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r3, 0x0, 0x0, 0xf00) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x64, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x64}}, 0x0) 1.563097195s ago: executing program 4 (id=3343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14850cb686b0b6728f95f7f869b9989ded026c", 0x13}, {&(0x7f0000000640)="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", 0x4d2}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8ea}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.326526947s ago: executing program 3 (id=3344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @private, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r2, 0x0, 0xc, 0x0, 0xa, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x10, 0x8000, 0x5, 0x1}}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x1f, 0x1, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r0, 0x81, 0x4, 0x4}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x16, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x9, 0x9, 0x9, 0x8, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x0, 0x2, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xd, 0x3, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9f6}, @call={0x85, 0x0, 0x0, 0xa7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1010}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x32, &(0x7f0000000480)=""/50, 0x41100, 0x20, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r5, r5, r5], &(0x7f0000000580)=[{0x4, 0x5, 0x6, 0xa}], 0x10, 0x200}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) tee(r5, r8, 0x1, 0x4) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r10, 0x4, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg(r7, &(0x7f0000000ac0)={&(0x7f0000000800)=@phonet={0x23, 0x40, 0x2, 0x2}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)="0dfaed14a3f167395ec3383a7019720404200bece93d1d7f44bcfeed091520e9603f50c90195c45e90111fe3f6c7959dc6acb4f6820606f2ee5f44ef8ab7cb2bfc", 0x41}], 0x1, &(0x7f0000000940)=[{0xd8, 0x196, 0x401, "c82330e896d8d304f7a8c2db5190e6835655210268b4475f3335fecc833c91489ee53da4dca3ba23d9400e5e10dc1c513697f9a8e3ccd24223766a189c7c4ab44307243d7880407c65e52a3cde761c471b3c34189794b4fcfa8a4dea59eda2c4fbad0e1f5eb043d263bfdd3c564023512f3a104143a891061564abb7968c4ba9d7c988a94aa764ad344b1336148e3c6d94f73a520231ad3b8b5428c6cb258ae425c6b1bb7dd6f45adebbadad13b631306fbb61e1c50adb4c625da5d7ade12f20c1e6958e5922357e"}, {0xa0, 0x15, 0x4, "8fbe37350808d9b0ed43fa2ffab72afd785c4167420952bae690dde903f1f5337aca15773c61562dd590b1b48dc1810cb8e2158b833edea2b72cf55da7621c549c3a8cb4802a8d7a17baf2c2de282a13972915999a3653792c1438680456dccd4cc1ed518d9135ac3ddd8ee4e7f79ec4f5211927aabcecb6625263be76384ded2f1c59fa09f7d80c17e0bfb63c"}], 0x178}, 0x8804) bind$bt_hci(r7, &(0x7f0000000b00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000b40), &(0x7f0000000bc0)=0x68) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x16) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', r3, 0x29, 0x1, 0x3, 0x942, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x10, 0x8000, 0x800, 0xf5e}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000000d00)=@delchain={0x57c, 0x65, 0x913, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x5, 0xb}, {0x6, 0x7}, {0xd, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}]}}, @filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x8ff0, 0x7, 0x1, {0x5, 0x2, 0x81, 0x8, 0x1, 0x9}, {0x0, 0x2, 0x6, 0x400, 0x8420, 0x800}, 0x8, 0x0, 0xba5}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x46}]}}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_basic={{0xa}, {0x4b0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x2}}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x4, 0x0, 0xba8, 0x6, {0xc, 0x0, 0xff01, 0x200, 0x9, 0x1}, {0x1, 0x1, 0x7, 0x3, 0xffff, 0x2}, 0x9, 0x2, 0x2}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x19}}, @TCA_BASIC_POLICE={0x430, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0xffff0001, 0x3, 0x8001, 0x6, 0x6, 0x7fff, 0x4, 0x80, 0x0, 0x2, 0x3, 0x1, 0xffffff81, 0x9, 0x8, 0x400, 0x9, 0x10, 0x7, 0xd0, 0x0, 0x6, 0x7, 0x7, 0x800, 0x6, 0x8, 0x3, 0x6, 0x2, 0x9, 0xc0, 0x8, 0x0, 0x800, 0x8, 0x46e, 0xc3ab, 0x3000, 0x0, 0x100, 0x6, 0x21, 0xb71, 0x7, 0x8, 0x5, 0x99, 0x7, 0xc, 0x0, 0x6, 0x4, 0xff, 0x5a8, 0x5, 0x700, 0x10, 0x31, 0x9, 0x10000, 0x8, 0xf251, 0xfff, 0x3, 0xfff, 0x3, 0x1, 0x7, 0xb9f, 0x10001, 0x3, 0x6c9b, 0x9e, 0x9, 0x7f, 0x8, 0x80, 0x1, 0x1, 0x92, 0x9, 0xcdf, 0x0, 0x6000000, 0x0, 0x2, 0xffffffa9, 0xfa6, 0x457, 0x28000000, 0xa78, 0x3, 0x4, 0x3, 0x9, 0x3ff, 0x101, 0x10000, 0xffff, 0x5, 0x2fa7, 0x4, 0x9, 0x7, 0x3, 0xc67, 0x5d90ddc5, 0x8, 0x101, 0x7fffffff, 0x1, 0x2, 0x9, 0x6, 0x7, 0x7, 0x6, 0xab10, 0x1, 0x4, 0x3, 0x6, 0x5, 0x0, 0x401, 0x4, 0x6, 0xf, 0xcae, 0x117, 0xfb51, 0x8, 0x8, 0x7fff8000, 0x5, 0x7f, 0x2, 0xa, 0xfff, 0xb, 0x6, 0x1, 0x4, 0x6, 0x6, 0x0, 0x81, 0x8, 0xfffffffe, 0x6, 0x2, 0xfffffffc, 0x2000, 0x92, 0x2, 0x66, 0xffff, 0x7, 0xfffffff9, 0x4, 0xf45, 0xd304849a, 0x1ff, 0x10001, 0x80, 0xffff4313, 0x3, 0x10, 0x699, 0x7, 0x2, 0x88de, 0x0, 0x8, 0x8dd6, 0xfffffeff, 0xfffffffb, 0x5e27fa28, 0x1, 0x0, 0x97, 0x1, 0x8, 0x3733, 0x7, 0x8, 0x7fff, 0x4, 0x8, 0x7, 0x6, 0x9, 0x4, 0x7, 0x9, 0x5, 0xdf, 0x0, 0x2, 0x7, 0xff, 0x9, 0x879e, 0xf, 0x1, 0x9, 0x9, 0x4, 0x7ad0, 0xe83, 0xf8000000, 0x6, 0x1, 0x4, 0x1, 0x3, 0x5, 0x6, 0x3, 0x3, 0x7, 0xfffff5a2, 0xffffffef, 0x2, 0x3, 0x8, 0xffffaf4b, 0xc00, 0x7ff, 0x400, 0x1, 0x40, 0x6, 0x9, 0x7fffffff, 0x5, 0x7, 0x0, 0x2, 0x6, 0x8000, 0xf1e3, 0x9, 0x80000000, 0x9, 0x400000, 0x9, 0x81, 0x610a, 0x67, 0x8, 0x51, 0xf]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20000}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x57c}, 0x1, 0x0, 0x0, 0x10}, 0x4c004) sendmsg$AUDIT_TTY_GET(r11, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001440), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001400)={@fallback=r4, r4, 0x1c, 0x0, 0x0, @void, @value=r13, @void, @void, r6}, 0x20) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000001480)=0x1, 0x4) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f00000014c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) close(r11) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x4) sendmsg$nl_route_sched(r11, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)=@newtclass={0xc8, 0x28, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x2}, {0x7, 0xa}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7, 0xce}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x54, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10001}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0xa8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}]}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040090}, 0x8040) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000017c0)={0x0, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}}, 0xa7f, 0x4, 0x0, 0x3, 0x94, 0x2, 0x5}, 0x9c) 1.304518383s ago: executing program 4 (id=3345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000003c0)={0x0, 0x1f, '\x00', [@ra={0x5, 0x2, 0x9}, @generic={0x2, 0x7e, "970007519ce19af008ac3513110bd8255b136fa386a06cd2acc9891bf183fbfd05c7e426a02fdb48d99994af4a3a22e71587f8d4e0fcda3565caa21129b1b04ef482454a1ab161610a44859ac5f0427a7a87f14bc053671e463f1a35b5c9dbca5a96d47654cd284b6511f8d3112bda28bfaa76fddd68cbabfc19dddffbf0"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x8, 0x6, [0x4, 0x3, 0xfffffffffffffc01, 0x3ff, 0x5, 0x4, 0x8001, 0xb, 0x3]}}, @enc_lim={0x4, 0x1, 0xa3}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x498, [0x8bed, 0x81, 0x5]}}]}, 0x108) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf257600000008000300", @ANYRES32=r7, @ANYBLOB="0cff00"], 0x28}, 0x1, 0x0, 0x0, 0x20048814}, 0x24000010) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000140003800c00018005"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000240)) r12 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) close(0x3) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x9c00, 0x55007}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r13 = accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) accept4(r13, &(0x7f00000000c0)=@pppol2tp, &(0x7f00000001c0)=0x80, 0x80800) 1.014294828s ago: executing program 3 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000000000000ac14140000000000000000000000000000000000000000000c0900"/52], 0x34}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x7, 0x20001000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x4}}, [0x4e00000000000000, 0x9, 0x7ff, 0xddfa, 0x7594c29c, 0x1, 0xff, 0x0, 0x7, 0xff, 0x5, 0x9, 0x287a, 0x1, 0xe]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000440)={r8, @in={{0x2, 0x4e21, @loopback}}}, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8=r0], 0x50}}, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18) 760.041382ms ago: executing program 4 (id=3347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x804}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x2000810) 444.516029ms ago: executing program 4 (id=3348): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x800, 0xa0}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000023000100800000000000000000000000050021"], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="00001000832cda7041d6171d03beb51be0b1c8a8b7c90ed6e30607753d4ec9c11ab90348351876fc3988212bdff91c323e2e7b8f717207891374c7db7d4c9c62ee0a3ad820d4c9a5ec4a8a2ee96cace22a07067a3454916bb09689b7b339f4639681a2f5d716ce7aa0843efacaf3bf429828b4495d5cf0cb8ed6f4901b3452f2a297e1cd30875c46a5984b990a3f23fc5fb63c30dcd25794fa4987aa1cba65d90977c63fe7bbec671be005230cac92006a2d5c09bee08a36a1929080d4e2b255c1b407456ccdd46bbeb09243b10c59dcd2c1eeaea6691ec3b49391", @ANYRES16=r11, @ANYRES32=r0, @ANYRES32=r12, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r10, @ANYRES64=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4410) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) unshare(0x2c020400) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, 0xffffffffffffffff, 0x952de000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4050000000000e560310000000000007300000000009500000000000000077bacafdecdbc851098169d45635adc67f0cc71914988ade424bd859683afad74bd44071289d6b002841f548a32345a807f82c0293b7103739aba59f1b454daf0d3acadf073e6fcdce38d0b5a311b781c2530e4a956f5b549ff039754c63d80756986cde9824dc02e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r13, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x8c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x5, @empty, 0x10000}, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e20, 0x8, @private2, 0xa}, @in6={0xa, 0x4e21, 0x7, @empty, 0x4}, @in6={0xa, 0x4e21, 0xffff0001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0xfffe, 0x3, 0x0, 0x1, 0xd1, 0xf46, 0x3, 0x1000, r14}, &(0x7f0000000380)=0x20) 359.450044ms ago: executing program 3 (id=3349): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x30, 0x80, 0x1, 0x43, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x7, 0x0, 0x5}}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) 69.380458ms ago: executing program 3 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000004"], 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 0s ago: executing program 4 (id=3351): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYBLOB="4992cd9337b66a4f6a0a553af76cbdcf73920294e1824e45993d141be85d3d30272aaaf4956401738aff950794ef8ecfc7c5f128cfb019e7267fda77b4aad202a02e9b52b6477958a6831ef5f01b30f07fd4a38c14853a804abd039f9047b3b3d66fdacc2770bae23c63c4f7f2753b660acffcda4c6c6d2a4731839bc8735f78d3"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000000)=0xe, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000000)=0xe, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000340)=0xff, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0x81e3, 0x2, 0x100, 0xfffffeff, 0xa, 0x200, 0x1, 0x80000001, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r7, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r7, 0x2}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)="d25829ce89d6642374d1281e78b54c23d4058f3d20cb0873b4c6c78fbe91281802faf9ec31768368e26feb8482c4bbafa30a91ebcf0b", &(0x7f00000002c0)="cc0e762f3bc8bd2d90e11978", 0x7, r9, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r9, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x4000010) sendmsg$NFT_BATCH(r1, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): sim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.726248][T12923] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 345.807003][T12923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.855035][T12933] bond4: (slave ip6gretap2): making interface the new active one [ 345.883096][T12933] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 345.908975][T12934] syz_tun: entered allmulticast mode [ 345.922691][T12924] syz_tun: left allmulticast mode [ 346.032911][T12923] veth5: entered promiscuous mode [ 346.059799][T12923] bond4: (slave veth5): Enslaving as an active interface with a down link [ 346.076854][T12933] erspan0: entered allmulticast mode [ 346.090626][T12933] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 346.250000][T12947] sctp: [Deprecated]: syz.2.1743 (pid 12947) Use of int in max_burst socket option. [ 346.250000][T12947] Use struct sctp_assoc_value instead [ 346.330993][T12944] bridge0: port 1(macsec0) entered blocking state [ 346.342859][T12944] bridge0: port 1(macsec0) entered disabled state [ 346.383851][T12944] macsec0: entered allmulticast mode [ 346.436245][T12944] macsec0: left allmulticast mode [ 346.445867][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 346.756798][T12972] team0: No ports can be present during mode change [ 346.782235][T12973] team0: No ports can be present during mode change [ 347.102642][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 347.131233][T12991] lo speed is unknown, defaulting to 1000 [ 347.202588][T13001] netlink: 'syz.1.1756': attribute type 23 has an invalid length. [ 347.217580][T12991] lo speed is unknown, defaulting to 1000 [ 347.235010][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 347.260239][T12991] wg1 speed is unknown, defaulting to 1000 [ 347.288872][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 347.734981][T13018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1763'. [ 347.794821][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 347.831916][T13018] bridge1: entered allmulticast mode [ 347.846455][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1762'. [ 348.174574][T13033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 348.189867][T13032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 348.383154][T13037] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 348.484455][T13040] pim6reg: entered allmulticast mode [ 348.517864][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 348.587200][T13043] pim6reg: left allmulticast mode [ 349.041155][T13066] netlink: 'syz.3.1779': attribute type 3 has an invalid length. [ 349.820401][T13091] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4 [ 349.913341][T13089] siw: device registration error -23 [ 350.032642][T13096] lo speed is unknown, defaulting to 1000 [ 350.128090][T13096] lo speed is unknown, defaulting to 1000 [ 350.167036][T13096] wg1 speed is unknown, defaulting to 1000 [ 350.589106][T13111] lo speed is unknown, defaulting to 1000 [ 350.595725][T13124] openvswitch: netlink: Missing valid actions attribute. [ 350.595768][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.613509][T13124] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 350.685610][T13124] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 350.722898][T13130] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 350.759727][T13111] lo speed is unknown, defaulting to 1000 [ 350.821762][T13130] bond4: entered promiscuous mode [ 350.828722][T13130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.839571][T13111] wg1 speed is unknown, defaulting to 1000 [ 350.854257][T13132] batadv1: entered promiscuous mode [ 350.860683][T13132] batadv1: entered allmulticast mode [ 350.869239][T13132] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 350.904673][T13132] bond4: (slave batadv1): making interface the new active one [ 350.926003][T13132] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 351.469545][T13147] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 351.495689][T13149] __nla_validate_parse: 8 callbacks suppressed [ 351.495713][T13149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 351.582253][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 351.703288][T13147] bond5: entered promiscuous mode [ 351.711718][T13147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.852267][T13164] tipc: Enabled bearer , priority 0 [ 351.913619][T13167] netlink: 'syz.0.1799': attribute type 2 has an invalid length. [ 351.980099][T13164] tipc: Disabling bearer [ 352.023326][T13167] tipc: Enabled bearer , priority 0 [ 352.098433][T13159] syzkaller0: entered promiscuous mode [ 352.117533][T13159] syzkaller0: entered allmulticast mode [ 352.152892][T13159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.232360][T13159] tipc: Resetting bearer [ 352.444839][T13158] tipc: Resetting bearer [ 352.452797][T13186] netlink: 'syz.2.1806': attribute type 22 has an invalid length. [ 352.519213][T13158] tipc: Disabling bearer [ 352.602531][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'. [ 352.770327][T13200] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.916817][T13203] sctp: [Deprecated]: syz.3.1812 (pid 13203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.916817][T13203] Use struct sctp_sack_info instead [ 353.162261][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 353.241433][T13211] veth7: entered promiscuous mode [ 353.285266][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.304146][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.318137][T13216] netlink: 'syz.0.1813': attribute type 13 has an invalid length. [ 353.326911][T13211] netlink: 'syz.0.1813': attribute type 13 has an invalid length. [ 353.334955][T13211] netlink: 'syz.0.1813': attribute type 17 has an invalid length. [ 353.365646][T13216] netlink: 'syz.0.1813': attribute type 17 has an invalid length. [ 353.480136][T13211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.508561][T13216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.533900][T13219] bridge_slave_0: entered promiscuous mode [ 353.781548][T13229] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1820'. [ 353.800558][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 354.362705][T13253] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1825'. [ 354.791032][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 354.837055][T13263] "syz.3.1833" (13263) uses obsolete ecb(arc4) skcipher [ 355.501440][T13297] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1838'. [ 355.580732][T13298] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1838'. [ 355.766271][T13268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.816795][T13268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.082845][T13268] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 356.098902][T13268] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 356.119781][T13268] ip6erspan0: left promiscuous mode [ 356.134901][T13268] batman_adv: batadv0: Interface deactivated: macvlan2 [ 356.154857][T13268] bond2: left promiscuous mode [ 356.163765][T13268] bond2: left allmulticast mode [ 356.185351][T13268] hsr1: left allmulticast mode [ 356.190346][T13268] dummy0: left allmulticast mode [ 356.218706][T13268] gretap0: left promiscuous mode [ 356.227138][T13268] vlan3: left promiscuous mode [ 356.232599][T13268] vlan3: left allmulticast mode [ 356.238126][T13268] bond0: left allmulticast mode [ 356.243599][T13268] bond_slave_0: left allmulticast mode [ 356.250425][T13268] bond_slave_1: left allmulticast mode [ 356.263330][T13268] geneve2: left promiscuous mode [ 356.299567][T13268] bond4: left promiscuous mode [ 356.311837][T13268] batadv1: left promiscuous mode [ 356.317929][T13268] batadv1: left allmulticast mode [ 356.347818][ T5981] lo speed is unknown, defaulting to 1000 [ 356.359347][ T5981] syz1: Port: 1 Link DOWN [ 356.571713][ T1135] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.604595][ T1135] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.638012][T13313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.722973][ T1135] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.769151][T13326] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 357.360859][T13357] nbd: must specify at least one socket [ 357.558098][T13361] __nla_validate_parse: 1 callbacks suppressed [ 357.558124][T13361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1855'. [ 357.600562][T13361] ip6gre1: entered promiscuous mode [ 357.944807][T13387] lo speed is unknown, defaulting to 1000 [ 357.956120][T13387] lo speed is unknown, defaulting to 1000 [ 357.990132][T13387] wg1 speed is unknown, defaulting to 1000 [ 358.247315][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1865'. [ 358.268364][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1865'. [ 358.549894][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 120 seconds [ 358.562573][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 120 seconds [ 358.574992][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 120 seconds [ 358.588603][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 120 seconds [ 358.896819][T13439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1871'. [ 358.949573][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 359.052807][T13439] bond3: entered promiscuous mode [ 359.060799][T13439] bond3: entered allmulticast mode [ 359.067504][T13439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.254788][T13439] lo speed is unknown, defaulting to 1000 [ 359.269157][T13439] lo speed is unknown, defaulting to 1000 [ 359.274090][T13451] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.347341][T13439] wg1 speed is unknown, defaulting to 1000 [ 360.249206][ T30] audit: type=1107 audit(1755487216.430:5): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 360.376316][T13477] bond0: (slave wlan1): Releasing backup interface [ 360.490230][T13477] bond1: (slave bond2): Releasing backup interface [ 360.497815][T13477] bond1: (slave bond2): the permanent HWaddr of slave - 52:50:5c:49:32:d3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 360.517044][T13477] bond1: (slave gretap1): making interface the new active one [ 360.559482][T13477] bond1: (slave gretap1): Releasing backup interface [ 360.622245][T13490] lo speed is unknown, defaulting to 1000 [ 360.633252][T13490] lo speed is unknown, defaulting to 1000 [ 360.666068][T13490] wg1 speed is unknown, defaulting to 1000 [ 360.755358][T13502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.854663][T13503] lo speed is unknown, defaulting to 1000 [ 360.863039][T13503] lo speed is unknown, defaulting to 1000 [ 360.924960][T13503] wg1 speed is unknown, defaulting to 1000 [ 361.698072][T13528] IPVS: set_ctl: invalid protocol: 33 172.20.20.19:20001 [ 361.815291][T13532] netlink: 'syz.4.1895': attribute type 83 has an invalid length. [ 362.005250][T13539] netlink: 'syz.0.1897': attribute type 3 has an invalid length. [ 362.064520][T13540] tipc: Enabled bearer , priority 0 [ 362.230667][T13542] macsec1: entered promiscuous mode [ 362.238881][T13542] team0: entered promiscuous mode [ 362.248969][T13540] lo speed is unknown, defaulting to 1000 [ 362.290343][T13540] lo speed is unknown, defaulting to 1000 [ 362.332077][T13540] wg1 speed is unknown, defaulting to 1000 [ 362.670343][T13537] tipc: Disabling bearer [ 363.272115][T13597] lo speed is unknown, defaulting to 1000 [ 363.283284][T13597] lo speed is unknown, defaulting to 1000 [ 363.299025][T13597] wg1 speed is unknown, defaulting to 1000 [ 363.333195][T13599] geneve2: entered promiscuous mode [ 363.342477][T13599] geneve2: entered allmulticast mode [ 363.824986][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 364.314216][T13619] lo speed is unknown, defaulting to 1000 [ 364.365983][ T5873] Bluetooth: hci4: link tx timeout [ 364.371915][ T5873] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.386135][ T5863] Bluetooth: hci4: link tx timeout [ 364.391597][ T5863] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 364.653944][T13619] lo speed is unknown, defaulting to 1000 [ 364.657551][T13628] tipc: Enabling of bearer rejected, failed to enable media [ 364.724971][T13619] wg1 speed is unknown, defaulting to 1000 [ 364.726380][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1923'. [ 364.983630][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1926'. [ 365.025977][T13643] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.285381][T13653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1929'. [ 365.382474][T13654] netlink: 'syz.4.1930': attribute type 21 has an invalid length. [ 365.649931][T13653] ip6gre1: entered allmulticast mode [ 365.678629][T13654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1930'. [ 365.755926][T13667] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 365.960479][T13679] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1935'. [ 366.007073][T13668] lo speed is unknown, defaulting to 1000 [ 366.108908][T13668] lo speed is unknown, defaulting to 1000 [ 366.142794][T13668] wg1 speed is unknown, defaulting to 1000 [ 366.150036][T13686] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 366.224756][T13686] bond4: (slave erspan0): Releasing active interface [ 366.246071][T13686] ip6gretap2: entered promiscuous mode [ 366.301221][T13686] team0: Port device bond0 removed [ 366.320981][T13686] bond0: (slave bond_slave_0): Releasing backup interface [ 366.355647][T13694] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 366.396016][T13686] bond0: (slave bond_slave_1): Releasing backup interface [ 366.414856][T13686] team0: Port device team_slave_0 removed [ 366.431599][T13686] team0: Port device team_slave_1 removed [ 366.445869][T13686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.465437][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 366.514266][T13686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.526862][T13686] batman_adv: batadv0: Removing interface: ip6gretap1 [ 366.562932][T13686] team0: Port device bond2 removed [ 366.582644][T13686] bond4: (slave ip6gretap2): Releasing active interface [ 366.611685][T13686] bond4: (slave ip6gretap2): the permanent HWaddr of slave - ea:23:29:d1:93:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 366.671437][T13686] ip6gretap2: left promiscuous mode [ 366.740485][T13686] bond4: (slave veth5): Releasing active interface [ 366.827726][T13694] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 367.139902][T13729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1948'. [ 367.291870][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 367.315227][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'. [ 367.488393][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1952'. [ 367.807913][T13757] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 367.896786][T13768] openvswitch: netlink: Flow key attr not present in new flow. [ 368.333697][T13783] macvtap1: entered promiscuous mode [ 368.365259][T13783] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 368.414697][T13783] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 368.792172][T13798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.818990][T13796] lo speed is unknown, defaulting to 1000 [ 368.834727][T13796] lo speed is unknown, defaulting to 1000 [ 368.863584][T13796] wg1 speed is unknown, defaulting to 1000 [ 368.976269][T13803] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.211468][T13813] openvswitch: netlink: Key type 251 is out of range max 32 [ 369.354217][T13818] tipc: Enabled bearer , priority 0 [ 369.408778][T13818] tipc: Enabling of bearer rejected, already enabled [ 369.522443][T13818] syzkaller0: entered promiscuous mode [ 369.529229][T13818] syzkaller0: entered allmulticast mode [ 369.594039][T13817] tipc: Resetting bearer [ 369.905235][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.065175][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.465283][ T10] tipc: Node number set to 1092687095 [ 370.945296][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.109390][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.859805][T13817] tipc: Disabling bearer [ 372.898382][T13851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.906047][T13851] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 373.034891][T13851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.065916][T13851] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 373.231797][T13851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 373.257663][T13851] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 373.298444][T13851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 373.349937][T13851] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 373.439921][T13875] __nla_validate_parse: 2 callbacks suppressed [ 373.439947][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 373.502561][T13870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 373.567930][T13870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 373.709647][T13875] bond6: entered promiscuous mode [ 373.735331][T13875] bond6: entered allmulticast mode [ 373.743616][T13875] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.467953][T13873] lo speed is unknown, defaulting to 1000 [ 374.564642][T13873] lo speed is unknown, defaulting to 1000 [ 374.578124][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 374.666991][T13873] wg1 speed is unknown, defaulting to 1000 [ 374.792307][T13901] lo speed is unknown, defaulting to 1000 [ 374.901709][T13901] lo speed is unknown, defaulting to 1000 [ 374.946507][T13901] wg1 speed is unknown, defaulting to 1000 [ 375.620853][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 375.639088][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 375.687759][T13933] netlink: 'syz.2.1994': attribute type 1 has an invalid length. [ 375.731511][T13933] netlink: 'syz.2.1994': attribute type 1 has an invalid length. [ 375.836738][T13933] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1994'. [ 376.258600][T13938] tipc: Enabled bearer , priority 0 [ 376.541071][T13931] tipc: Disabling bearer [ 376.923053][T13963] netlink: 'syz.2.2004': attribute type 83 has an invalid length. [ 376.989625][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 377.342910][T13979] lo speed is unknown, defaulting to 1000 [ 377.373200][T13979] lo speed is unknown, defaulting to 1000 [ 377.384777][T13980] netlink: 'syz.4.2009': attribute type 10 has an invalid length. [ 377.422667][T13979] wg1 speed is unknown, defaulting to 1000 [ 377.572710][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2013'. [ 377.595765][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2013'. [ 377.699211][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 378.359389][T14002] batman_adv: batadv0: Adding interface: gretap1 [ 378.366337][T14002] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.395518][T14002] batman_adv: batadv0: Interface activated: gretap1 [ 378.728531][T14013] lo speed is unknown, defaulting to 1000 [ 378.777101][T14013] lo speed is unknown, defaulting to 1000 [ 378.846201][T14013] wg1 speed is unknown, defaulting to 1000 [ 379.150690][T14027] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 379.192177][T14027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2024'. [ 379.499144][T14042] lo speed is unknown, defaulting to 1000 [ 379.520507][T14042] lo speed is unknown, defaulting to 1000 [ 379.700155][T14042] wg1 speed is unknown, defaulting to 1000 [ 379.813719][T13278] IPVS: starting estimator thread 0... [ 379.896158][T14049] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 379.962037][T14055] IPVS: using max 28 ests per chain, 67200 per kthread [ 380.463471][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 380.868922][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'. [ 381.129381][T14094] lo speed is unknown, defaulting to 1000 [ 381.236275][ T3960] IPVS: stop unused estimator thread 0... [ 381.244516][T14094] lo speed is unknown, defaulting to 1000 [ 381.526471][T14113] syzkaller0: entered promiscuous mode [ 381.533177][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 381.554442][T14113] syzkaller0: entered allmulticast mode [ 381.586040][T14094] wg1 speed is unknown, defaulting to 1000 [ 381.969462][T14135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.034373][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 382.097531][T14142] siw: device registration error -23 [ 384.801036][ T5232] udevd[5232]: worker [9555] /devices/virtual/block/nbd0 is taking a long time [ 385.126982][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2047'. [ 385.223490][T14136] lo speed is unknown, defaulting to 1000 [ 385.284948][T14136] lo speed is unknown, defaulting to 1000 [ 385.358884][T14136] wg1 speed is unknown, defaulting to 1000 [ 385.545923][T14157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2054'. [ 385.752624][T14159] tipc: Enabled bearer , priority 0 [ 385.822735][T14159] syzkaller0: entered promiscuous mode [ 385.846610][T14159] syzkaller0: entered allmulticast mode [ 385.948286][T14159] tipc: Resetting bearer [ 385.968536][T14158] tipc: Resetting bearer [ 386.014121][T14158] tipc: Disabling bearer [ 386.100484][T14180] vlan0: entered promiscuous mode [ 386.116732][T14180] vlan0: entered allmulticast mode [ 386.133688][T14180] veth0_vlan: entered allmulticast mode [ 386.673057][T14200] netlink: 'syz.2.2064': attribute type 32 has an invalid length. [ 387.105646][T14216] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 387.434795][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'. [ 387.455324][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 387.961818][T14238] lo speed is unknown, defaulting to 1000 [ 388.047777][T14238] lo speed is unknown, defaulting to 1000 [ 388.098127][T14238] wg1 speed is unknown, defaulting to 1000 [ 388.186721][T14249] !: renamed from dummy0 (while UP) [ 388.343445][T14248] lo speed is unknown, defaulting to 1000 [ 388.484776][T14248] lo speed is unknown, defaulting to 1000 [ 388.524508][T14248] wg1 speed is unknown, defaulting to 1000 [ 388.552811][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 388.625554][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 150 seconds [ 388.639485][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 150 seconds [ 388.651337][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 150 seconds [ 388.662989][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 150 seconds [ 390.022799][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 390.468320][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2096'. [ 390.578529][T14326] lo speed is unknown, defaulting to 1000 [ 390.587795][T14326] lo speed is unknown, defaulting to 1000 [ 390.631427][T14326] wg1 speed is unknown, defaulting to 1000 [ 391.021787][T14346] lo speed is unknown, defaulting to 1000 [ 391.042509][T14346] lo speed is unknown, defaulting to 1000 [ 391.056684][T14346] wg1 speed is unknown, defaulting to 1000 [ 391.236426][T14347] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 391.248381][T14347] nbd: error processing sock list [ 391.255009][T14347] block nbd3: shutting down sockets [ 391.362012][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 391.446886][T14363] syzkaller1: entered promiscuous mode [ 391.478253][T14363] syzkaller1: entered allmulticast mode [ 391.630628][T14371] netlink: 'syz.0.2109': attribute type 4 has an invalid length. [ 391.686639][T14371] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.2109'. [ 391.819858][T14376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2109'. [ 391.846604][T14380] netlink: 'syz.1.2111': attribute type 2 has an invalid length. [ 391.963798][T14380] : entered promiscuous mode [ 392.240475][T14388] tipc: Enabled bearer , priority 0 [ 392.257183][T14388] syzkaller0: entered promiscuous mode [ 392.273079][T14388] syzkaller0: entered allmulticast mode [ 392.356589][T14388] tipc: Resetting bearer [ 392.374413][T14386] tipc: Resetting bearer [ 392.450650][T14386] tipc: Disabling bearer [ 392.804370][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 393.353539][T14430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2124'. [ 393.609642][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 393.659666][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2129'. [ 393.829787][T14449] lo speed is unknown, defaulting to 1000 [ 393.933985][T14449] lo speed is unknown, defaulting to 1000 [ 393.949423][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2133'. [ 393.979317][T14449] wg1 speed is unknown, defaulting to 1000 [ 394.322352][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2136'. [ 394.363487][T14470] ip6gretap0: entered promiscuous mode [ 394.412594][T14470] ip6gretap0: left promiscuous mode [ 395.195702][T14506] syz_tun: entered allmulticast mode [ 395.239060][T14505] 8021q: VLANs not supported on wg0 [ 395.283122][T14504] syz_tun: left allmulticast mode [ 395.433385][T14519] netlink: 'syz.0.2149': attribute type 3 has an invalid length. [ 395.459056][T14520] netlink: 'syz.0.2149': attribute type 3 has an invalid length. [ 396.407832][T14543] tipc: Enabled bearer , priority 0 [ 396.416527][T14543] syzkaller0: entered promiscuous mode [ 396.422355][T14543] syzkaller0: entered allmulticast mode [ 396.540722][T14543] tipc: Resetting bearer [ 396.571484][T14542] tipc: Resetting bearer [ 396.622691][T14542] tipc: Disabling bearer [ 396.809840][T14551] batman_adv: batadv0: Adding interface: ip6gretap3 [ 396.818116][T14551] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.859885][T14551] batman_adv: batadv0: Interface activated: ip6gretap3 [ 396.890395][T14554] __nla_validate_parse: 2 callbacks suppressed [ 396.890421][T14554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'. [ 397.030911][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 397.065849][T14557] lo speed is unknown, defaulting to 1000 [ 397.081303][T14561] tipc: Enabled bearer , priority 0 [ 397.092372][T14557] lo speed is unknown, defaulting to 1000 [ 397.094619][T14561] veth0_vlan: left promiscuous mode [ 397.105551][T14561] veth0_vlan: entered promiscuous mode [ 397.111332][T14561] veth0_vlan: entered allmulticast mode [ 397.152831][T14557] wg1 speed is unknown, defaulting to 1000 [ 397.308392][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'. [ 397.318540][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2163'. [ 397.333025][T14558] tipc: Disabling bearer [ 397.626964][T14575] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2166'. [ 397.709122][T14572] lo speed is unknown, defaulting to 1000 [ 397.867068][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 397.915905][T14582] veth7: entered promiscuous mode [ 397.944425][T14572] lo speed is unknown, defaulting to 1000 [ 397.978332][T14572] wg1 speed is unknown, defaulting to 1000 [ 398.194450][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 398.497087][T14598] tipc: Enabled bearer , priority 0 [ 398.510100][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 398.529077][T14589] syzkaller0: entered promiscuous mode [ 398.539993][T14596] netlink: 'syz.4.2170': attribute type 11 has an invalid length. [ 398.557307][T14589] syzkaller0: entered allmulticast mode [ 398.683433][T14588] tipc: Resetting bearer [ 398.764848][T14588] tipc: Disabling bearer [ 398.927846][T14612] nbd: nbd1 already in use [ 399.095698][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 399.151489][T14622] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 399.199725][T14622] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2175'. [ 399.503896][T14635] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 400.041735][T14642] bond0: option primary_reselect: invalid value (17) [ 400.678256][T14641] lo speed is unknown, defaulting to 1000 [ 400.694805][T14641] lo speed is unknown, defaulting to 1000 [ 400.806191][T14641] wg1 speed is unknown, defaulting to 1000 [ 401.658591][T14702] lo speed is unknown, defaulting to 1000 [ 401.667993][T14702] lo speed is unknown, defaulting to 1000 [ 401.696935][T14702] wg1 speed is unknown, defaulting to 1000 [ 401.775717][T14705] lo speed is unknown, defaulting to 1000 [ 401.851373][T14705] lo speed is unknown, defaulting to 1000 [ 401.933113][T14705] wg1 speed is unknown, defaulting to 1000 [ 402.376118][T14723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.461548][T14723] __nla_validate_parse: 2 callbacks suppressed [ 402.461580][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2196'. [ 402.537908][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2196'. [ 403.633735][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 403.819048][T14758] netlink: 'syz.4.2205': attribute type 2 has an invalid length. [ 404.439143][T14776] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 404.663021][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 405.256393][ T63] syzkaller0: tun_net_xmit 76 [ 405.285771][ T979] syzkaller0: tun_net_xmit 76 [ 405.291651][ T979] syzkaller0: tun_net_xmit 48 [ 409.886430][T14818] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 409.945664][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 409.975344][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 409.998373][T14823] lo speed is unknown, defaulting to 1000 [ 410.053089][T14823] lo speed is unknown, defaulting to 1000 [ 410.053113][ T1135] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.085653][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 410.093701][ T1135] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.107744][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 410.107810][T14823] wg1 speed is unknown, defaulting to 1000 [ 410.127430][ T1135] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.142169][ T1135] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.331333][T14841] tipc: Enabled bearer , priority 0 [ 410.516848][T14841] tipc: Disabling bearer [ 410.606313][T14853] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 410.760794][T14853] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 411.001746][T14850] syzkaller0: entered promiscuous mode [ 411.031247][T14850] syzkaller0: entered allmulticast mode [ 414.780673][T14898] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.806229][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2238'. [ 415.113467][T14911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'. [ 415.141624][T14911] netlink: 'syz.0.2243': attribute type 3 has an invalid length. [ 415.197343][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'. [ 415.557910][T14931] sctp: [Deprecated]: syz.0.2248 (pid 14931) Use of int in maxseg socket option. [ 415.557910][T14931] Use struct sctp_assoc_value instead [ 415.647008][T14932] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2248'. [ 415.657514][T14937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2248'. [ 415.669349][T14933] netlink: 'syz.2.2249': attribute type 4 has an invalid length. [ 415.721544][T14934] netlink: 'syz.2.2249': attribute type 4 has an invalid length. [ 415.788333][T13278] lo speed is unknown, defaulting to 1000 [ 415.792344][T14940] netlink: 'syz.4.2250': attribute type 1 has an invalid length. [ 415.794656][T13278] syz2: Port: 1 Link ACTIVE [ 415.832768][T14940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.982832][T14940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.999600][T14940] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.024584][T14940] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 416.223021][T14957] bond0: (slave bond_slave_0): Releasing backup interface [ 416.275796][T14957] bond_slave_0: left promiscuous mode [ 416.312179][T14957] bond0: (slave bond_slave_1): Releasing backup interface [ 416.337211][T14957] bond_slave_1: left promiscuous mode [ 416.350916][T14957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.362232][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.378474][T14957] batman_adv: batadv0: Removing interface: ip6gretap1 [ 416.389174][T14957] batman_adv: batadv0: Removing interface: macvlan2 [ 416.398429][T14957] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 416.487639][T14967] tipc: Enabled bearer , priority 0 [ 416.527879][T14959] tipc: Resetting bearer [ 416.582480][T14969] caif0: entered promiscuous mode [ 416.678227][T14958] tipc: Disabling bearer [ 416.702838][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 416.764365][T14965] lo speed is unknown, defaulting to 1000 [ 416.771475][T14979] tipc: Enabled bearer , priority 0 [ 416.794187][T14965] lo speed is unknown, defaulting to 1000 [ 416.801009][T14974] syzkaller0: entered promiscuous mode [ 416.828319][T14974] syzkaller0: entered allmulticast mode [ 416.861139][T14965] wg1 speed is unknown, defaulting to 1000 [ 417.083099][T14979] syzkaller0: mtu less than device minimum [ 417.162787][T14973] tipc: Resetting bearer [ 417.268277][T14996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2264'. [ 417.304492][T14973] tipc: Disabling bearer [ 417.624698][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 417.654603][T15011] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2267'. [ 417.806341][T15010] sch_fq: defrate 6 ignored. [ 417.940623][T15020] tipc: Enabled bearer , priority 0 [ 418.167230][T15013] tipc: Disabling bearer [ 418.413712][T15035] lo speed is unknown, defaulting to 1000 [ 418.483027][T15035] wg1 speed is unknown, defaulting to 1000 [ 418.625610][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'. [ 418.725272][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 180 seconds [ 418.737110][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 180 seconds [ 418.749713][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 180 seconds [ 418.761834][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 180 seconds [ 418.884238][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 418.987705][T15045] erspan0: left allmulticast mode [ 419.578969][T15045] caif0: left promiscuous mode [ 420.249346][T15045] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 420.271432][T15045] veth5: left promiscuous mode [ 420.307555][T15045] bridge2: left promiscuous mode [ 420.313016][T15045] bridge2: left allmulticast mode [ 420.517169][T15045] ip6tnl2: left promiscuous mode [ 420.532447][T15045] macsec0: left promiscuous mode [ 420.538822][T15045] macsec0: left allmulticast mode [ 420.545949][T15045] bond4: left promiscuous mode [ 420.551339][T15045] bond4: left allmulticast mode [ 420.562558][T15045] macvlan3: left promiscuous mode [ 420.577567][T15045] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 420.622396][T15052] hsr_slave_0: left promiscuous mode [ 420.707436][ T5953] wg1 speed is unknown, defaulting to 1000 [ 420.713926][ T1135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.735100][ T5953] syz0: Port: 1 Link DOWN [ 420.745927][ T1135] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.881505][ T1135] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.925339][ T1135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.016960][T15091] netlink: 'syz.0.2283': attribute type 13 has an invalid length. [ 421.798360][T15120] netlink: 'syz.0.2293': attribute type 25 has an invalid length. [ 422.289507][T15133] syzkaller0: entered promiscuous mode [ 422.336221][T15133] syzkaller0: entered allmulticast mode [ 422.662961][T15150] __nla_validate_parse: 1 callbacks suppressed [ 422.662985][T15150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2298'. [ 422.792282][T15154] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 423.357816][T15166] netlink: 'syz.3.2304': attribute type 3 has an invalid length. [ 423.390330][T15166] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2304'. [ 424.114881][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2308'. [ 424.912157][T15189] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.2309:15189 [ 426.188540][T15150] sit3: entered promiscuous mode [ 426.193977][T15150] sit3: entered allmulticast mode [ 426.410356][T15196] tipc: Enabled bearer , priority 0 [ 426.451040][T15201] lo speed is unknown, defaulting to 1000 [ 426.507469][T15201] wg1 speed is unknown, defaulting to 1000 [ 426.678265][T15196] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 426.725830][T15208] nbd: must specify a device to reconfigure [ 426.876811][T15215] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 426.886947][T15215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2316'. [ 426.914980][T15195] tipc: Disabling bearer [ 426.966415][T15217] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 427.134246][T15212] lo speed is unknown, defaulting to 1000 [ 427.142763][T15212] wg1 speed is unknown, defaulting to 1000 [ 427.529019][T15230] C: renamed from team_slave_0 [ 427.549354][T15231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2318'. [ 427.551177][T15230] netlink: 'syz.0.2319': attribute type 8 has an invalid length. [ 427.560004][T15231] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2318'. [ 427.588743][T15231] netlink: 'syz.3.2318': attribute type 5 has an invalid length. [ 427.616611][T15230] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 427.617286][T15231] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2318'. [ 427.840356][T15235] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2318'. [ 427.841070][T15231] lo speed is unknown, defaulting to 1000 [ 428.198329][T15231] wg1 speed is unknown, defaulting to 1000 [ 429.237822][T15277] lo speed is unknown, defaulting to 1000 [ 429.276167][T15277] wg1 speed is unknown, defaulting to 1000 [ 429.522564][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 430.414079][T15312] tipc: Enabling of bearer rejected, failed to enable media [ 430.583940][T15306] lo speed is unknown, defaulting to 1000 [ 430.612403][T15321] lo speed is unknown, defaulting to 1000 [ 430.618678][T15306] wg1 speed is unknown, defaulting to 1000 [ 430.669860][T15321] wg1 speed is unknown, defaulting to 1000 [ 430.678586][T15328] lo speed is unknown, defaulting to 1000 [ 430.730336][T15328] wg1 speed is unknown, defaulting to 1000 [ 430.760564][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2343'. [ 430.787614][T15335] netlink: 'syz.1.2343': attribute type 7 has an invalid length. [ 430.806818][T15335] netlink: 'syz.1.2343': attribute type 8 has an invalid length. [ 430.826647][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 431.643452][T15354] IPv6: Can't replace route, no match found [ 431.882272][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 431.889609][T15358] lo speed is unknown, defaulting to 1000 [ 432.121307][T15361] erspan0: left allmulticast mode [ 432.140492][T15361] veth0_vlan: left allmulticast mode [ 432.152919][T15358] wg1 speed is unknown, defaulting to 1000 [ 432.214064][T15361] macvlan2: left promiscuous mode [ 432.237483][T15361] veth5: left promiscuous mode [ 432.246335][T15361] bridge1: left allmulticast mode [ 432.259092][T15361] bond5: left promiscuous mode [ 432.302053][T15361] bond6: left promiscuous mode [ 432.320855][T15361] bond6: left allmulticast mode [ 432.336738][T15361] batman_adv: batadv0: Interface deactivated: gretap1 [ 432.389714][T15361] veth7: left promiscuous mode [ 432.530043][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.557528][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.752200][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.777692][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.286741][T15401] lo speed is unknown, defaulting to 1000 [ 433.302212][T15401] wg1 speed is unknown, defaulting to 1000 [ 433.705948][T15413] lo speed is unknown, defaulting to 1000 [ 433.713982][T15413] wg1 speed is unknown, defaulting to 1000 [ 434.036682][T15429] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 434.178878][T15429] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 434.214186][T15429] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 434.273311][T15429] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 434.285339][ T13] bond0: (slave wlan1): interface is now down [ 434.315738][ T13] bond0: (slave wlan1): interface is now down [ 434.344404][ T13] bond0: now running without any active interface! [ 434.583619][T15442] tipc: New replicast peer: 255.127.0.0 [ 434.605556][T15442] tipc: Enabled bearer , priority 10 [ 434.677597][T15442] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2367'. [ 435.307728][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 435.318141][T15463] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.389546][T15468] netlink: 'syz.2.2373': attribute type 1 has an invalid length. [ 435.468043][T15465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'. [ 435.615144][ T5924] tipc: Node number set to 2832426866 [ 436.007736][T15492] tipc: Can't bind to reserved service type 0 [ 436.192713][T15491] lo speed is unknown, defaulting to 1000 [ 436.221575][T15491] wg1 speed is unknown, defaulting to 1000 [ 436.422525][T15506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2382'. [ 437.198517][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'. [ 437.252525][T15524] veth4: entered promiscuous mode [ 437.268581][T15524] veth4: entered allmulticast mode [ 437.554114][T15533] netlink: 'syz.3.2389': attribute type 4 has an invalid length. [ 438.131866][T15547] tipc: Enabled bearer , priority 0 [ 438.444831][T15545] tipc: Disabling bearer [ 438.805442][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 438.814799][T15567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2397'. [ 438.863007][T15570] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2398'. [ 439.869533][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2402'. [ 440.463619][T15597] lo speed is unknown, defaulting to 1000 [ 440.557218][T15597] wg1 speed is unknown, defaulting to 1000 [ 442.142367][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 442.305619][T15641] team0: entered promiscuous mode [ 442.311964][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 442.909100][T15641] team0 (unregistering): left promiscuous mode [ 443.396171][T15665] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 443.420691][T15665] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2422'. [ 443.448170][T15667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.455602][T15667] IPv6: NLM_F_CREATE should be set when creating new route [ 443.463413][T15667] IPv6: NLM_F_CREATE should be set when creating new route [ 443.730440][T15673] lo speed is unknown, defaulting to 1000 [ 443.797553][T15673] wg1 speed is unknown, defaulting to 1000 [ 443.988466][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.013293][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.173621][ T1135] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 444.230346][T15699] netlink: 'syz.2.2432': attribute type 10 has an invalid length. [ 444.280855][T15699] netlink: 'syz.2.2432': attribute type 10 has an invalid length. [ 444.731578][T15710] lo speed is unknown, defaulting to 1000 [ 444.806743][T15713] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.816098][T15713] bridge0: port 1(bond8) entered blocking state [ 444.825177][T15713] bridge0: port 1(bond8) entered disabled state [ 444.831902][T15713] bond8: entered allmulticast mode [ 444.840723][T15713] bond8: entered promiscuous mode [ 444.849091][T15710] wg1 speed is unknown, defaulting to 1000 [ 445.298796][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 446.525853][T15768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2447'. [ 446.570443][T15767] lo speed is unknown, defaulting to 1000 [ 446.605538][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 446.914145][T15767] wg1 speed is unknown, defaulting to 1000 [ 447.511566][T15804] netlink: 'syz.3.2456': attribute type 2 has an invalid length. [ 447.726183][T15813] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2458'. [ 447.931311][T15817] batadv_slave_0: entered promiscuous mode [ 447.947744][T15817] batadv_slave_0: entered allmulticast mode [ 448.003681][T15819] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 448.029956][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 448.054336][T15818] delete_channel: no stack [ 448.335667][T15845] netlink: 'syz.1.2466': attribute type 1 has an invalid length. [ 448.383112][T15845] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2466'. [ 448.460601][T15845] netlink: 'syz.1.2466': attribute type 2 has an invalid length. [ 448.477249][T15845] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2466'. [ 448.676777][T15861] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 448.779880][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 448.789590][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 210 seconds [ 448.789767][T15867] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2473'. [ 448.803073][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 210 seconds [ 448.826104][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 210 seconds [ 448.838195][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 210 seconds [ 448.932733][T15873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2474'. [ 449.007544][T15851] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 449.087419][T15880] debugfs: 'žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' already exists in 'ieee80211' [ 449.147422][T15863] IPv6: sit2: Disabled Multicast RS [ 449.154178][T15863] sit2: entered allmulticast mode [ 449.587445][T15892] lo speed is unknown, defaulting to 1000 [ 449.648396][T15892] wg1 speed is unknown, defaulting to 1000 [ 449.855911][T15910] netlink: 'syz.3.2485': attribute type 83 has an invalid length. [ 450.636603][T15942] __nla_validate_parse: 2 callbacks suppressed [ 450.636628][T15942] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2493'. [ 450.775403][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 450.791991][T15949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2492'. [ 450.811969][T15948] 8021q: VLANs not supported on wg0 [ 450.996612][T15956] lo speed is unknown, defaulting to 1000 [ 451.023500][T15956] wg1 speed is unknown, defaulting to 1000 [ 451.119678][T15963] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2498'. [ 451.605981][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 451.686146][T15980] nbd: illegal input index -1 [ 451.738274][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 451.749625][T15982] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 451.761016][T15982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2505'. [ 452.043638][T15995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2507'. [ 452.113636][T15995] IPVS: set_ctl: invalid protocol: 255 172.20.20.65:20004 [ 452.159094][T15999] tipc: Enabling of bearer rejected, failed to enable media [ 452.556844][T16017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2512'. [ 452.960010][T16033] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 453.005116][T16033] netlink: 'syz.4.2515': attribute type 2 has an invalid length. [ 453.041082][T16033] netlink: 'syz.4.2515': attribute type 8 has an invalid length. [ 453.070303][T16033] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.2515'. [ 453.196335][T16040] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 453.220293][T16040] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 453.314088][T16043] lo speed is unknown, defaulting to 1000 [ 453.383675][T16043] wg1 speed is unknown, defaulting to 1000 [ 454.610161][T16083] lo speed is unknown, defaulting to 1000 [ 454.618618][T16083] wg1 speed is unknown, defaulting to 1000 [ 455.494323][T16112] netlink: 'syz.2.2536': attribute type 14 has an invalid length. [ 455.651923][T16115] __nla_validate_parse: 1 callbacks suppressed [ 455.651949][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 455.695179][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 455.861076][T16123] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 455.889830][T16117] lo speed is unknown, defaulting to 1000 [ 455.917237][T16117] wg1 speed is unknown, defaulting to 1000 [ 456.189160][T16128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 456.302185][T16132] tipc: Enabled bearer , priority 0 [ 456.371568][T16134] syzkaller0: entered promiscuous mode [ 456.393871][T16134] syzkaller0: entered allmulticast mode [ 456.469409][T16137] netlink: 'syz.0.2545': attribute type 2 has an invalid length. [ 456.572123][T16146] netlink: 'syz.2.2544': attribute type 2 has an invalid length. [ 456.578113][T16147] siw: device registration error -23 [ 456.587461][T16144] tipc: Enabled bearer , priority 0 [ 456.607602][T16142] syzkaller0: entered promiscuous mode [ 456.616198][T16142] syzkaller0: entered allmulticast mode [ 456.657085][T16132] tipc: Resetting bearer [ 456.665484][T16142] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2543'. [ 456.675447][T16147] siw: device registration error -23 [ 456.693537][T16142] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2543'. [ 456.706938][T16142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2543'. [ 456.717015][T16131] tipc: Resetting bearer [ 456.778377][T16131] tipc: Disabling bearer [ 457.023165][T16165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.065464][T16170] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2552'. [ 457.073812][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2551'. [ 457.213122][T16144] tipc: Resetting bearer [ 457.222397][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2551'. [ 457.310492][T16144] tipc: Disabling bearer [ 457.409579][T16179] pim6reg1: entered promiscuous mode [ 457.425708][T16179] pim6reg1: entered allmulticast mode [ 457.500567][T16174] lo speed is unknown, defaulting to 1000 [ 457.670625][T16174] wg1 speed is unknown, defaulting to 1000 [ 457.784071][T16200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'. [ 458.917462][T16235] tipc: Enabling of bearer rejected, failed to enable media [ 458.948160][T16245] syzkaller0: entered promiscuous mode [ 458.954241][T16245] syzkaller0: entered allmulticast mode [ 459.832700][T16259] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 459.997490][T16274] netlink: 'syz.1.2573': attribute type 4 has an invalid length. [ 460.711532][T16308] __nla_validate_parse: 8 callbacks suppressed [ 460.711558][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 461.035208][T16318] lo speed is unknown, defaulting to 1000 [ 461.080718][T16318] wg1 speed is unknown, defaulting to 1000 [ 461.148821][T16322] tipc: Enabled bearer , priority 0 [ 461.172872][T16311] netlink: 'syz.3.2583': attribute type 13 has an invalid length. [ 461.190897][T16322] syzkaller0: entered promiscuous mode [ 461.205310][T16322] syzkaller0: entered allmulticast mode [ 461.220022][T16311] netlink: 'syz.3.2583': attribute type 17 has an invalid length. [ 461.490259][T16333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.018449][T16311] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 462.197604][T16331] tipc: Resetting bearer [ 462.340740][T16316] tipc: Resetting bearer [ 462.562422][T16316] tipc: Disabling bearer [ 462.709137][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 463.098955][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 463.265437][T16363] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 464.017035][T16406] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2604'. [ 464.071318][T16408] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2603'. [ 464.141293][T16408] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 464.283199][T16415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2606'. [ 465.217646][T16437] netlink: 'syz.3.2611': attribute type 13 has an invalid length. [ 465.245299][T16437] netlink: 'syz.3.2611': attribute type 17 has an invalid length. [ 465.358054][T16437] 0ªî{X¹¦: left promiscuous mode [ 465.411919][T16437] 0ªî{X¹¦: refused to change device tx_queue_len [ 465.422626][T16437] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 465.444819][ T5924] lo speed is unknown, defaulting to 1000 [ 465.463099][T16440] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2612'. [ 465.475582][ T5924] syz1: Port: 1 Link ACTIVE [ 466.267856][T16480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2620'. [ 466.469535][T16484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2622'. [ 466.563018][T16486] netlink: 'syz.2.2623': attribute type 10 has an invalid length. [ 466.598406][T16486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.702205][T16495] netlink: 'syz.2.2623': attribute type 10 has an invalid length. [ 466.755307][T16495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2623'. [ 466.758659][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 466.764739][T16495] batadv0: entered promiscuous mode [ 466.764768][T16495] batadv0: entered allmulticast mode [ 466.785245][T16495] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 466.877210][T16500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.976737][T16504] netlink: 212172 bytes leftover after parsing attributes in process `syz.3.2629'. [ 467.179114][T16509] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 467.226203][T16515] lo speed is unknown, defaulting to 1000 [ 467.257355][T16515] wg1 speed is unknown, defaulting to 1000 [ 467.656183][T16533] netlink: 'syz.2.2637': attribute type 21 has an invalid length. [ 467.905369][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.111904][T16534] lo speed is unknown, defaulting to 1000 [ 468.164958][T16534] wg1 speed is unknown, defaulting to 1000 [ 468.677393][T16557] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 468.852650][T16566] xt_socket: unknown flags 0xd0 [ 469.554951][T16590] netlink: 'syz.1.2649': attribute type 303 has an invalid length. [ 469.596684][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 469.968971][T16611] tipc: Enabled bearer , priority 0 [ 470.097443][T16611] tipc: Disabling bearer [ 470.503114][T16629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.684971][T16632] Set syz1 is full, maxelem 65536 reached [ 470.686979][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 470.700045][T16632] netlink: 'syz.3.2661': attribute type 10 has an invalid length. [ 470.744285][T16634] bridge13: entered allmulticast mode [ 471.140343][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 471.291289][T16652] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 471.359850][T16650] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 471.524301][T16658] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.572245][T16658] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:32768 [ 471.779992][T16661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.812984][T16671] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2673'. [ 471.865869][T16675] netlink: 'syz.3.2673': attribute type 46 has an invalid length. [ 471.895703][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 471.948794][T16676] netlink: 'syz.3.2673': attribute type 46 has an invalid length. [ 472.914213][T16713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.020898][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2684'. [ 473.144221][T16713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2684'. [ 473.452324][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2690'. [ 473.463973][T16736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'. [ 473.937274][T16750] openvswitch: netlink: Message has 24 unknown bytes. [ 473.960406][T16750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.093094][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2696'. [ 474.720044][T16783] openvswitch: netlink: IPv4 tun info is not correct [ 474.748201][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2704'. [ 474.932714][T16788] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 475.004584][T16788] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 475.228373][T16803] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2712'. [ 475.328542][T16810] netlink: 'syz.3.2714': attribute type 21 has an invalid length. [ 475.355255][T16810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2714'. [ 475.445685][T16816] netlink: 'syz.2.2715': attribute type 2 has an invalid length. [ 475.521591][T16816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.553820][T16816] bond8: left promiscuous mode [ 475.598210][T16820] netlink: 'syz.1.2717': attribute type 11 has an invalid length. [ 475.732733][T16812] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 476.335230][T16852] bond0: entered promiscuous mode [ 476.349463][T16852] bond0: left promiscuous mode [ 476.727043][T16864] netlink: 'syz.0.2727': attribute type 8 has an invalid length. [ 476.829534][T16867] __nla_validate_parse: 6 callbacks suppressed [ 476.829561][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 476.969271][T16871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2728'. [ 477.271944][T16879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2732'. [ 477.309754][T16879] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2732'. [ 477.676070][T16890] gtp3: entered promiscuous mode [ 478.069369][T16914] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2741'. [ 478.189134][T16924] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2743'. [ 478.305775][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 478.325862][T16927] tap0: tun_chr_ioctl cmd 1074025681 [ 478.348519][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.348671][T16927] tap0: tun_chr_ioctl cmd 1074025677 [ 478.371153][T16927] tap0: linktype set to 804 [ 478.394875][T16928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2745'. [ 478.631266][T16944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.779027][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2752'. [ 478.876193][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 240 seconds [ 478.888867][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 240 seconds [ 478.903305][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 240 seconds [ 478.916508][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 240 seconds [ 479.053949][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'. [ 479.256298][T16972] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 479.290401][T16973] pim6reg: entered allmulticast mode [ 479.374309][T16979] pim6reg: left allmulticast mode [ 479.940048][T16984] bond5: (slave geneve2): making interface the new active one [ 479.973357][T16984] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 480.018789][T16997] batadv0: entered promiscuous mode [ 480.037433][T16997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.050186][ T3574] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 480.083893][ T3574] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 480.109503][ T3574] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 480.123330][ T3574] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 480.164359][T17005] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 480.174136][T17005] netlink: 'syz.4.2766': attribute type 4 has an invalid length. [ 480.195722][T17005] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 480.203719][T17005] netlink: 'syz.4.2766': attribute type 4 has an invalid length. [ 480.735715][T17018] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4. [ 481.014859][T17030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 481.206685][T17045] vlan4: entered promiscuous mode [ 481.214478][T17045] veth1: entered promiscuous mode [ 481.217266][T17030] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 481.480898][T17056] lo speed is unknown, defaulting to 1000 [ 481.490648][T17056] wg1 speed is unknown, defaulting to 1000 [ 481.752320][T17077] netlink: 'syz.3.2788': attribute type 1 has an invalid length. [ 482.050165][T17095] __nla_validate_parse: 10 callbacks suppressed [ 482.050193][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2790'. [ 482.285580][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 483.018145][T17128] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 483.043919][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2798'. [ 483.136862][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 483.191977][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2798'. [ 483.643035][T17160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2808'. [ 483.653817][T17159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2804'. [ 483.908405][T17148] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2804'. [ 483.937578][T17160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'. [ 483.978740][T17161] tipc: Enabled bearer , priority 0 [ 484.001540][T17164] sit2: entered promiscuous mode [ 484.031575][T17165] syzkaller0: entered promiscuous mode [ 484.038149][T17165] syzkaller0: entered allmulticast mode [ 484.044274][T17152] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2804'. [ 484.103901][T17155] tipc: Resetting bearer [ 484.155476][T17150] tipc: Resetting bearer [ 484.265924][T17150] tipc: Disabling bearer [ 484.695915][T17194] pimreg: entered allmulticast mode [ 484.720087][T17194] pimreg: left allmulticast mode [ 485.813932][T17228] netlink: 'syz.4.2822': attribute type 10 has an invalid length. [ 486.137876][T17242] tipc: New replicast peer: 255.255.255.255 [ 486.161823][T17242] tipc: Enabled bearer , priority 10 [ 486.888771][T17278] netlink: 'syz.1.2835': attribute type 10 has an invalid length. [ 486.939160][T17278] !: entered promiscuous mode [ 486.979749][T17278] team0: Port device 0! added [ 487.122496][T17289] __nla_validate_parse: 13 callbacks suppressed [ 487.122522][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 487.651167][T17316] batadv0: entered promiscuous mode [ 487.657470][T17316] batadv0: entered allmulticast mode [ 487.665670][T17316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.673959][T17314] tipc: Enabled bearer , priority 0 [ 487.836282][T17314] tipc: Disabling bearer [ 488.070090][T17332] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2848'. [ 488.084097][T17332] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 488.102961][T17332] 1ªî{X¹¦: entered allmulticast mode [ 488.121139][T17332] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 488.151455][T17335] netlink: 'syz.3.2848': attribute type 2 has an invalid length. [ 488.184369][T17335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2848'. [ 488.292668][T17334] lo speed is unknown, defaulting to 1000 [ 488.307477][T17334] wg1 speed is unknown, defaulting to 1000 [ 488.482766][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 490.046463][T17382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2859'. [ 492.167777][ T5232] udevd[5232]: worker [9555] /devices/virtual/block/nbd0 timeout; kill it [ 492.178959][ T5232] udevd[5232]: seq 15700 '/devices/virtual/block/nbd0' killed [ 493.160353][T17387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2860'. [ 493.361861][T17394] Bluetooth: MGMT ver 1.23 [ 493.606418][T17409] netlink: 'syz.2.2865': attribute type 1 has an invalid length. [ 493.634785][T17409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2865'. [ 493.682809][T17405] lo speed is unknown, defaulting to 1000 [ 493.771848][T17405] wg1 speed is unknown, defaulting to 1000 [ 493.869892][T17416] pim6reg1: entered allmulticast mode [ 493.917309][T17426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2870'. [ 494.019445][T17426] netlink: 'syz.2.2870': attribute type 2 has an invalid length. [ 494.083338][T17426] k›*·]‘: entered promiscuous mode [ 494.162560][T17432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.205384][T17432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.302433][T17437] bridge: RTM_NEWNEIGH with invalid ether address [ 494.468189][T17448] delete_channel: no stack [ 494.691917][T17447] lo speed is unknown, defaulting to 1000 [ 494.720768][T17447] wg1 speed is unknown, defaulting to 1000 [ 495.065430][T17462] tipc: Enabled bearer , priority 0 [ 495.377101][T17462] tipc: Disabling bearer [ 495.774886][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.792366][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.815387][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.829431][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.842449][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.049980][T17487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2887'. [ 496.083581][T17482] lo speed is unknown, defaulting to 1000 [ 496.167220][T17482] wg1 speed is unknown, defaulting to 1000 [ 496.482671][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 496.492803][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 496.717066][T17513] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 497.090573][T17482] chnl_net:caif_netlink_parms(): no params data found [ 497.155318][T17524] tipc: New replicast peer: 255.255.255.255 [ 497.167719][T17524] tipc: Enabled bearer , priority 10 [ 497.455596][T17531] syzkaller0: entered promiscuous mode [ 497.461946][T17531] syzkaller0: entered allmulticast mode [ 497.578856][T17482] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.609102][T17482] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.619712][T17482] bridge_slave_0: entered allmulticast mode [ 497.646014][T17482] bridge_slave_0: entered promiscuous mode [ 497.700219][T17482] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.725536][T17482] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.734034][T17482] bridge_slave_1: entered allmulticast mode [ 497.743305][T17482] bridge_slave_1: entered promiscuous mode [ 497.828098][T17554] sctp: [Deprecated]: syz.0.2908 (pid 17554) Use of int in maxseg socket option. [ 497.828098][T17554] Use struct sctp_assoc_value instead [ 497.850649][T17555] sctp: [Deprecated]: syz.0.2908 (pid 17555) Use of int in maxseg socket option. [ 497.850649][T17555] Use struct sctp_assoc_value instead [ 497.907414][ T5873] Bluetooth: hci5: command tx timeout [ 497.989973][T17482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.014039][T17482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.071719][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 498.179371][T17482] team0: Port device team_slave_0 added [ 498.211838][T17482] team0: Port device team_slave_1 added [ 498.451107][T17482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.477531][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.516946][T17482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.550182][T17482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.560850][T17482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.632700][T17482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.117464][T17605] tipc: Enabled bearer , priority 0 [ 499.177700][T17482] hsr_slave_0: entered promiscuous mode [ 499.198562][T17482] hsr_slave_1: entered promiscuous mode [ 499.206917][T17482] debugfs: 'hsr0' already exists in 'hsr' [ 499.213139][T17482] Cannot create hsr debugfs directory [ 499.259664][T17605] tipc: Disabling bearer [ 499.382510][T17622] netlink: 'syz.0.2928': attribute type 7 has an invalid length. [ 499.670145][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 499.926433][T17482] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.972148][T17641] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 499.983894][T17645] !: left promiscuous mode [ 499.989786][ T5873] Bluetooth: hci5: command tx timeout [ 500.054381][T17645] team0: Port device 0! removed [ 500.089008][T17645] bond3: (slave vti0): Releasing backup interface [ 500.118783][T17645] batman_adv: batadv0: Removing interface: ip6gretap3 [ 500.204084][T17482] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.279377][T17666] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2939'. [ 500.312729][T17482] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.482145][T17482] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.525283][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'. [ 500.568036][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 500.596572][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 500.627338][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 500.649372][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 500.722180][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 500.758131][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 500.795934][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 500.891701][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 500.984932][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 501.007307][T17689] bridge6: entered promiscuous mode [ 501.014584][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.030966][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 501.054118][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.073636][T17680] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2941'. [ 501.084751][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.121346][T17482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.147130][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.161107][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.173364][T17482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.189269][T17680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 501.244086][T17482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.297261][T17482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.316603][T17703] tipc: Enabled bearer , priority 0 [ 501.327299][T17703] syzkaller0: entered promiscuous mode [ 501.335726][T17703] syzkaller0: entered allmulticast mode [ 501.349513][T17709] netlink: 'syz.0.2949': attribute type 4 has an invalid length. [ 501.372575][T17708] netlink: 'syz.0.2949': attribute type 4 has an invalid length. [ 501.448656][T17703] tipc: Resetting bearer [ 501.920764][T17482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.981371][T17741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.051639][T17747] netlink: 'syz.4.2957': attribute type 1 has an invalid length. [ 502.093147][ T5873] Bluetooth: hci5: command tx timeout [ 502.144743][T17482] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.224650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.232554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.303012][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.311751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.537813][T17767] vlan0: entered promiscuous mode [ 502.563859][T17767] bridge0: entered promiscuous mode [ 502.661132][T17765] lo speed is unknown, defaulting to 1000 [ 502.697565][T17765] wg1 speed is unknown, defaulting to 1000 [ 503.420413][T17798] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 503.448619][T17482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.680393][T17482] veth0_vlan: entered promiscuous mode [ 503.718080][T17482] veth1_vlan: entered promiscuous mode [ 504.029047][T17816] vlan3: entered promiscuous mode [ 504.034544][T17816] bond0: entered promiscuous mode [ 504.046472][T17816] vlan3: entered allmulticast mode [ 504.052453][T17816] bond0: entered allmulticast mode [ 504.071631][T17822] tipc: Enabled bearer , priority 0 [ 504.090314][T17820] syzkaller0: entered promiscuous mode [ 504.116058][T17820] syzkaller0: entered allmulticast mode [ 504.147148][ T5873] Bluetooth: hci5: command tx timeout [ 504.262398][T17482] veth0_macvtap: entered promiscuous mode [ 504.293310][T17482] veth1_macvtap: entered promiscuous mode [ 504.524427][T17482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.604786][T17482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.652561][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.727811][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.740126][T17847] __nla_validate_parse: 79 callbacks suppressed [ 504.740150][T17847] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2981'. [ 504.782078][T17849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2982'. [ 504.790192][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.821302][T17845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2981'. [ 504.844836][T17848] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2982'. [ 504.916688][T17849] bond9: entered promiscuous mode [ 504.922471][T17849] 8021q: adding VLAN 0 to HW filter on device bond9 [ 505.137523][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2986'. [ 505.369643][T17849] bond9 (unregistering): Released all slaves [ 505.411679][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.441669][T17819] tipc: Resetting bearer [ 505.522941][T17819] tipc: Disabling bearer [ 505.682051][T17862] bridge15: port 1(veth7) entered blocking state [ 505.693542][T17862] bridge15: port 1(veth7) entered disabled state [ 505.701595][T17862] veth7: entered allmulticast mode [ 505.710267][T17862] veth7: entered promiscuous mode [ 506.112659][T17879] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 506.289326][T17856] lo speed is unknown, defaulting to 1000 [ 506.433363][T17856] wg1 speed is unknown, defaulting to 1000 [ 506.528927][T17894] !: renamed from dummy0 (while UP) [ 506.578186][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.607771][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.927144][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.948309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.392857][T17931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3005'. [ 507.488220][T17931] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 507.720985][T17938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3008'. [ 507.841704][T17944] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 507.893798][T17942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3009'. [ 507.944044][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3009'. [ 507.979545][T17942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3009'. [ 508.473974][T17968] IPVS: Unknown mcast interface: macvtap0 [ 508.497333][T17968] net_ratelimit: 55 callbacks suppressed [ 508.497359][T17968] openvswitch: netlink: IP tunnel dst address not specified [ 508.768593][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.781031][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.795443][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.821146][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.829656][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.949276][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 270 seconds [ 508.961004][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 270 seconds [ 508.973643][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 270 seconds [ 508.986116][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 270 seconds [ 509.049095][T17977] lo speed is unknown, defaulting to 1000 [ 509.060404][T17977] wg1 speed is unknown, defaulting to 1000 [ 509.326414][T17994] IPVS: Scheduler module ip_vs_ not found [ 509.441966][T17991] lo speed is unknown, defaulting to 1000 [ 509.559335][T17991] wg1 speed is unknown, defaulting to 1000 [ 509.804316][T17977] chnl_net:caif_netlink_parms(): no params data found [ 509.818027][T18010] lo speed is unknown, defaulting to 1000 [ 509.951893][T18010] wg1 speed is unknown, defaulting to 1000 [ 510.012424][T18011] lo speed is unknown, defaulting to 1000 [ 510.131431][T18011] wg1 speed is unknown, defaulting to 1000 [ 510.561275][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.649602][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.702875][T18029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.847676][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.865541][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.865807][ T5873] Bluetooth: hci1: command tx timeout [ 510.893985][T17977] bridge_slave_0: entered allmulticast mode [ 510.957674][T17977] bridge_slave_0: entered promiscuous mode [ 511.027370][T18047] netlink: 'syz.2.3034': attribute type 10 has an invalid length. [ 511.146564][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.164930][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.187526][T17977] bridge_slave_1: entered allmulticast mode [ 511.196418][T17977] bridge_slave_1: entered promiscuous mode [ 511.214253][T18047] syz_tun: entered promiscuous mode [ 511.323008][ T30] audit: type=1800 audit(1755487367.510:6): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3036" name="memory.events" dev="tmpfs" ino=3129 res=0 errno=0 [ 511.405228][ T30] audit: type=1804 audit(1755487367.540:7): pid=18054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3036" name="memory.events" dev="tmpfs" ino=3129 res=1 errno=0 [ 511.935718][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.088207][T18069] syzkaller0: entered promiscuous mode [ 512.103035][T18069] syzkaller0: entered allmulticast mode [ 512.118816][T18079] netlink: 'syz.3.3042': attribute type 11 has an invalid length. [ 512.122156][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.138409][T18068] tipc: Enabled bearer , priority 0 [ 512.373743][T18068] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 512.466159][T18069] tipc: Resetting bearer [ 512.481257][T18067] tipc: Resetting bearer [ 512.520049][T18067] tipc: Disabling bearer [ 512.534022][T17977] team0: Port device team_slave_0 added [ 512.557862][T17977] team0: Port device team_slave_1 added [ 512.671212][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.680241][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.700050][T18085] __nla_validate_parse: 2 callbacks suppressed [ 512.700076][T18085] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3046'. [ 512.709014][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.748235][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.760636][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.790113][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.946528][ T5873] Bluetooth: hci1: command tx timeout [ 513.022963][T17977] hsr_slave_0: entered promiscuous mode [ 513.037359][T17977] hsr_slave_1: entered promiscuous mode [ 513.043985][T17977] debugfs: 'hsr0' already exists in 'hsr' [ 513.055598][T17977] Cannot create hsr debugfs directory [ 513.397219][T18089] lo speed is unknown, defaulting to 1000 [ 513.463683][T18089] wg1 speed is unknown, defaulting to 1000 [ 513.942427][T17977] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.267271][T18130] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 514.291200][T17977] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.402931][T17977] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.536581][T17977] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 514.632375][T18144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3062'. [ 515.004210][T17977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 515.025652][ T5873] Bluetooth: hci1: command tx timeout [ 515.104226][T17977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 515.128658][T17977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 515.172421][T18157] syzkaller0: entered promiscuous mode [ 515.184324][T18157] syzkaller0: entered allmulticast mode [ 515.201007][T18163] netlink: 'syz.1.3068': attribute type 4 has an invalid length. [ 515.213925][T17977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.225122][T18163] netlink: 'syz.1.3068': attribute type 4 has an invalid length. [ 515.389434][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 516.021040][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.125724][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.296842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.304504][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.437719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.445636][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.536252][T18211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.572683][T18212] lo speed is unknown, defaulting to 1000 [ 516.656268][T18212] wg1 speed is unknown, defaulting to 1000 [ 516.688579][T17977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.118747][ T5873] Bluetooth: hci1: command tx timeout [ 517.778459][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.300627][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 518.316338][T18268] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 518.345540][T18268] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3094'. [ 518.366010][T18268] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 518.401766][T18268] netlink: 'syz.3.3094': attribute type 2 has an invalid length. [ 518.722324][T18279] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3098'. [ 518.832159][T17977] veth0_vlan: entered promiscuous mode [ 518.877109][T17977] veth1_vlan: entered promiscuous mode [ 519.117290][T17977] veth0_macvtap: entered promiscuous mode [ 519.152106][T18289] netlink: 'syz.1.3099': attribute type 12 has an invalid length. [ 519.195281][T18289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3099'. [ 519.254216][T17977] veth1_macvtap: entered promiscuous mode [ 519.668327][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.792622][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.950597][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.992027][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.071564][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.169868][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.492552][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.542541][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.760803][T18359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3113'. [ 520.848852][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.905811][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.017104][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 522.372600][T18402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3128'. [ 522.476885][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 522.537827][T18405] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 522.722187][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.743678][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.765420][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.779475][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.803983][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.942226][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3135'. [ 523.014838][T18429] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 523.026334][T18425] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 523.469471][T18410] lo speed is unknown, defaulting to 1000 [ 523.491644][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 523.544782][T18410] wg1 speed is unknown, defaulting to 1000 [ 523.921354][T18442] lo speed is unknown, defaulting to 1000 [ 524.029714][T18442] wg1 speed is unknown, defaulting to 1000 [ 524.139154][T18452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3139'. [ 524.460011][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 524.527942][T18456] netlink: 'syz.4.3141': attribute type 6 has an invalid length. [ 524.832358][T18473] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.3145'. [ 524.885620][ T5863] Bluetooth: hci0: command tx timeout [ 525.033836][T18479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.076793][T18473] bond9 (unregistering): Released all slaves [ 525.104033][T18481] openvswitch: netlink: Key 6 has unexpected len 42 expected 2 [ 525.370872][T18475] vlan3: entered allmulticast mode [ 525.376553][T18475] bond0: entered allmulticast mode [ 525.391453][T18410] chnl_net:caif_netlink_parms(): no params data found [ 526.141151][T18410] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.159755][T18410] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.178043][T18410] bridge_slave_0: entered allmulticast mode [ 526.197022][T18410] bridge_slave_0: entered promiscuous mode [ 526.285502][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.293106][T18410] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.326916][T18410] bridge_slave_1: entered allmulticast mode [ 526.337543][T18410] bridge_slave_1: entered promiscuous mode [ 526.581736][T18410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.638040][T18410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.730055][T18544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.839029][T18410] team0: Port device team_slave_0 added [ 526.897923][T18410] team0: Port device team_slave_1 added [ 526.920799][T18543] syzkaller1: entered promiscuous mode [ 526.931835][T18543] syzkaller1: entered allmulticast mode [ 526.955117][ T5863] Bluetooth: hci0: command tx timeout [ 527.097770][T18410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.105372][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.164441][T18410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.233542][T18410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.252554][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.305153][T18410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.330883][T18552] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3164'. [ 527.547439][T18410] hsr_slave_0: entered promiscuous mode [ 527.568294][T18410] hsr_slave_1: entered promiscuous mode [ 527.575587][T18410] debugfs: 'hsr0' already exists in 'hsr' [ 527.582023][T18410] Cannot create hsr debugfs directory [ 527.590025][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 527.608780][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 527.632462][T18560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 527.825255][T18563] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3167'. [ 527.835867][T18561] dvmrp1: entered allmulticast mode [ 527.854937][T18563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3167'. [ 527.978973][T18566] lo speed is unknown, defaulting to 1000 [ 528.008781][T18566] wg1 speed is unknown, defaulting to 1000 [ 528.153198][T18575] netlink: 'syz.2.3169': attribute type 10 has an invalid length. [ 528.727043][T18589] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 528.792187][T18589] syzkaller0: entered promiscuous mode [ 528.808844][T18589] syzkaller0: entered allmulticast mode [ 528.860770][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 528.922676][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 528.939063][T18587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.027743][ T5863] Bluetooth: hci0: command tx timeout [ 529.078501][T18587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.523655][T18410] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.565431][T18621] tipc: Enabled bearer , priority 0 [ 529.577101][T18621] syzkaller0: entered promiscuous mode [ 529.594080][T18621] syzkaller0: entered allmulticast mode [ 529.610834][T18410] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.686022][T18621] tipc: Resetting bearer [ 529.720911][T18410] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 529.744044][T18410] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 529.865767][T18617] tipc: Resetting bearer [ 529.908675][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 529.971566][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3182'. [ 530.023930][T18617] tipc: Disabling bearer [ 530.416281][T18626] lo speed is unknown, defaulting to 1000 [ 530.416836][T18645] netlink: 'syz.2.3184': attribute type 1 has an invalid length. [ 530.507758][T18626] wg1 speed is unknown, defaulting to 1000 [ 530.766384][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3187'. [ 530.802249][ T5863] Bluetooth: hci4: command tx timeout [ 530.822440][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3187'. [ 531.088904][T18410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.105712][ T5863] Bluetooth: hci0: command tx timeout [ 531.124790][T18670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.132513][T18670] IPv6: NLM_F_CREATE should be set when creating new route [ 531.137925][T18410] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.167979][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.175637][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.218452][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.226039][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.251637][T18673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.194167][T18709] netlink: 'syz.2.3197': attribute type 4 has an invalid length. [ 532.244332][T18707] netlink: 'syz.2.3197': attribute type 4 has an invalid length. [ 532.254152][T18410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.268163][T18709] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3197'. [ 532.280901][T18707] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3197'. [ 532.458376][T18410] veth0_vlan: entered promiscuous mode [ 532.530827][T18410] veth1_vlan: entered promiscuous mode [ 532.619068][T18410] veth0_macvtap: entered promiscuous mode [ 532.637486][T18694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.669842][T18410] veth1_macvtap: entered promiscuous mode [ 532.825627][T18724] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3200'. [ 532.889502][T18725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3200'. [ 532.911805][T18724] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.924914][T18724] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.982177][T18410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.022753][T18410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.136304][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.156031][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.181166][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.198981][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.553540][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.595072][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.693834][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.737254][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.960718][T18771] sock: sock_timestamping_bind_phc: sock not bind to device [ 534.122455][T18771] wireguard0: entered promiscuous mode [ 534.138147][T18771] wireguard0: entered allmulticast mode [ 534.356298][T18783] netlink: 'syz.0.3216': attribute type 5 has an invalid length. [ 534.395222][T18783] netlink: 'syz.0.3216': attribute type 7 has an invalid length. [ 534.571210][T18783] : entered promiscuous mode [ 534.870360][T18784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.282103][T18805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.298880][T18805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.311580][T18805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.338765][T18805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.352148][T18784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.367593][T18812] __nla_validate_parse: 3 callbacks suppressed [ 535.367616][T18812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3224'. [ 535.390310][T18805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.452074][T18811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3223'. [ 535.583919][T18784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.645730][T18814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3223'. [ 535.888693][T18784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.923254][T18829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.043311][T18804] lo speed is unknown, defaulting to 1000 [ 536.091987][T18804] wg1 speed is unknown, defaulting to 1000 [ 536.440146][T18845] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3230'. [ 536.480089][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.582195][ T3574] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.676393][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.742674][T18862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3232'. [ 536.818288][T18855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 536.850742][ T3574] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.036186][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'. [ 537.038191][T18804] chnl_net:caif_netlink_parms(): no params data found [ 537.406927][T18804] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.414925][T18804] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.423005][T18804] bridge_slave_0: entered allmulticast mode [ 537.433105][T18804] bridge_slave_0: entered promiscuous mode [ 537.439756][ T5863] Bluetooth: hci2: command tx timeout [ 537.451770][T18804] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.460819][T18804] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.471363][T18804] bridge_slave_1: entered allmulticast mode [ 537.480728][T18804] bridge_slave_1: entered promiscuous mode [ 537.681245][T18804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.717755][T18804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.949057][T18804] team0: Port device team_slave_0 added [ 537.982575][T18890] lo speed is unknown, defaulting to 1000 [ 537.991583][T18804] team0: Port device team_slave_1 added [ 538.050491][T18905] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3246'. [ 538.081816][T18890] wg1 speed is unknown, defaulting to 1000 [ 538.187802][T18905] batadv1: entered promiscuous mode [ 538.211239][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 538.215399][T18905] batadv1: entered allmulticast mode [ 538.227753][T18911] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3246'. [ 538.321990][T18804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.330297][T18804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.358509][T18804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.449583][T18906] lo speed is unknown, defaulting to 1000 [ 538.451597][T18804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.485563][T18804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.533522][T18804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.659854][T18906] wg1 speed is unknown, defaulting to 1000 [ 538.888313][T18804] hsr_slave_0: entered promiscuous mode [ 538.916684][T18804] hsr_slave_1: entered promiscuous mode [ 538.926654][T18804] debugfs: 'hsr0' already exists in 'hsr' [ 538.932914][T18804] Cannot create hsr debugfs directory [ 539.035195][ T97] block nbd0: Possible stuck request ffff8880251c5080: control (read@0,1024B). Runtime 300 seconds [ 539.048630][ T97] block nbd0: Possible stuck request ffff8880251c5240: control (read@1024,1024B). Runtime 300 seconds [ 539.061141][ T97] block nbd0: Possible stuck request ffff8880251c5400: control (read@2048,1024B). Runtime 300 seconds [ 539.074430][ T97] block nbd0: Possible stuck request ffff8880251c55c0: control (read@3072,1024B). Runtime 300 seconds [ 539.505345][ T5863] Bluetooth: hci2: command tx timeout [ 540.579249][T18804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.581076][T18957] __nla_validate_parse: 3 callbacks suppressed [ 540.581096][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3258'. [ 540.608767][T18959] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 540.621237][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 540.642622][T18804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.971118][T18973] netlink: 'syz.3.3263': attribute type 13 has an invalid length. [ 540.994490][T18973] netlink: 'syz.3.3263': attribute type 17 has an invalid length. [ 541.114362][T18804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 541.153326][T18804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 541.552065][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.560186][T18973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.568379][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.576767][T18973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.586288][ T5863] Bluetooth: hci2: command tx timeout [ 541.691811][T18973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.910510][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3267'. [ 542.002354][T18975] lo speed is unknown, defaulting to 1000 [ 542.106433][T18975] wg1 speed is unknown, defaulting to 1000 [ 542.128194][T18981] lo speed is unknown, defaulting to 1000 [ 542.162266][T18981] wg1 speed is unknown, defaulting to 1000 [ 542.208790][T19011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3269'. [ 542.219537][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3270'. [ 542.897116][T19025] tipc: Started in network mode [ 542.907384][T19025] tipc: Node identity 4ec7db4be805, cluster identity 4711 [ 542.916747][T19025] tipc: Enabled bearer , priority 0 [ 542.944475][T19030] syzkaller0: entered promiscuous mode [ 542.951752][T19030] syzkaller0: entered allmulticast mode [ 542.964796][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 542.988440][T19025] tipc: Resetting bearer [ 543.114403][T19024] tipc: Resetting bearer [ 543.202330][T19024] tipc: Disabling bearer [ 543.255742][T18804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.353330][T18804] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.406757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.414933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.486601][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.494234][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.646025][T19050] tipc: Enabled bearer , priority 0 [ 543.665777][ T5863] Bluetooth: hci2: command tx timeout [ 543.678440][T19050] syzkaller0: entered promiscuous mode [ 543.684358][T19050] syzkaller0: entered allmulticast mode [ 543.838473][T19050] tipc: Resetting bearer [ 543.859695][T13278] IPVS: starting estimator thread 0... [ 543.882211][T19048] tipc: Resetting bearer [ 543.952840][T19048] tipc: Disabling bearer [ 543.989392][T19058] IPVS: using max 26 ests per chain, 62400 per kthread [ 544.263474][T19062] netlink: 'syz.4.3280': attribute type 10 has an invalid length. [ 544.324519][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 544.395113][T19062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.452598][T19062] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 544.502370][T19067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.527755][T19070] netlink: 'syz.0.3283': attribute type 3 has an invalid length. [ 544.651669][T18804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.989632][T18804] veth0_vlan: entered promiscuous mode [ 545.150098][T18804] veth1_vlan: entered promiscuous mode [ 545.174800][T19088] lo speed is unknown, defaulting to 1000 [ 545.377506][T19088] wg1 speed is unknown, defaulting to 1000 [ 545.674782][T19102] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3291'. [ 545.837038][T18804] veth0_macvtap: entered promiscuous mode [ 546.119689][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.129856][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.548406][T19102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.614312][T19102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.081481][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.116097][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.148058][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 547.160814][T19118] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 547.171218][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 547.183492][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 547.204312][T18804] veth1_macvtap: entered promiscuous mode [ 547.254200][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.286490][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.470619][T18804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.570705][T18804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.651379][T19126] netlink: 'syz.4.3297': attribute type 4 has an invalid length. [ 547.685619][T19130] netlink: 'syz.4.3297': attribute type 2 has an invalid length. [ 547.710701][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.768849][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.814807][T19134] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3299'. [ 547.818716][T19130] : entered promiscuous mode [ 547.842000][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.884074][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.006986][T19137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.339152][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.353099][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.492816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.509546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.600360][T19157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3307'. [ 548.613437][T19159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3305'. [ 548.724256][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 549.040594][T19177] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 549.062080][T19177] netlink: 600 bytes leftover after parsing attributes in process `syz.2.3310'. [ 549.095971][T19180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3312'. [ 549.309895][T19186] lo speed is unknown, defaulting to 1000 [ 549.322189][T19186] wg1 speed is unknown, defaulting to 1000 [ 550.369935][T18805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.382239][T18805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 550.394512][T18805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 550.447063][T18805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 550.492664][T18805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.564162][T19211] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 551.004049][T19215] lo speed is unknown, defaulting to 1000 [ 551.324096][T19215] wg1 speed is unknown, defaulting to 1000 [ 551.324129][T19223] lo speed is unknown, defaulting to 1000 [ 551.401604][T19228] __nla_validate_parse: 59 callbacks suppressed [ 551.401632][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3324'. [ 551.405302][T19223] wg1 speed is unknown, defaulting to 1000 [ 551.640956][T19231] netlink: 'syz.2.3325': attribute type 21 has an invalid length. [ 551.715373][T19231] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3325'. [ 551.794778][T19231] netlink: 'syz.2.3325': attribute type 5 has an invalid length. [ 551.840528][T19231] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3325'. [ 552.627245][T18805] Bluetooth: hci3: command tx timeout [ 553.198840][T19264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3332'. [ 553.897194][ T1135] dvmrp1 (unregistering): left allmulticast mode [ 554.715522][T18805] Bluetooth: hci3: command tx timeout [ 554.895999][ T1135] bond0 (unregistering): Released all slaves [ 555.238708][ T1135] bond1 (unregistering): Released all slaves [ 555.634239][ T1135] bond2 (unregistering): Released all slaves [ 555.676917][ T1135] bond3 (unregistering): Released all slaves [ 555.740484][T19266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3334'. [ 555.933544][ T1135] bond4 (unregistering): Released all slaves [ 555.952938][T19269] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 555.959382][ T1135] bond5 (unregistering): Released all slaves [ 556.337355][T19260] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.344890][T19260] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.408024][T19274] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 556.421749][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 556.431878][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3335'. [ 556.750062][T19260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.786088][T18805] Bluetooth: hci3: command tx timeout [ 557.151325][T19215] chnl_net:caif_netlink_parms(): no params data found [ 557.194033][ T1135] : left promiscuous mode [ 557.302129][ T3574] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.324238][ T3574] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.334560][ T3574] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.453646][ T3574] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.480551][ T1135] tipc: Left network mode [ 557.480582][T19259] lo speed is unknown, defaulting to 1000 [ 557.538880][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 557.671158][T19259] wg1 speed is unknown, defaulting to 1000 [ 557.696542][T19296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 557.728873][T19292] team0: No ports can be present during mode change [ 557.803348][T19299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3342'. [ 557.825938][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 557.879523][T19286] lo speed is unknown, defaulting to 1000 [ 557.953066][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'. [ 558.006611][T19286] wg1 speed is unknown, defaulting to 1000 [ 558.006815][T19215] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.022681][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.031062][T19215] bridge_slave_0: entered allmulticast mode [ 558.055399][T19215] bridge_slave_0: entered promiscuous mode [ 558.120367][T19215] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.145652][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.161717][T19215] bridge_slave_1: entered allmulticast mode [ 558.240579][T19215] bridge_slave_1: entered promiscuous mode [ 558.641543][T19215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.769024][T19215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.866474][T18805] Bluetooth: hci3: command tx timeout [ 559.080243][T19215] team0: Port device team_slave_0 added [ 559.137830][T19329] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3349'. [ 559.169103][T19215] team0: Port device team_slave_1 added [ 559.284649][T19329] 0·: renamed from hsr0 [ 559.304498][T19329] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 559.317089][T19329] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.328916][T19329] 0·: entered allmulticast mode [ 559.334345][T19329] hsr_slave_0: entered allmulticast mode [ 559.340648][T19329] hsr_slave_1: entered allmulticast mode [ 559.359787][T19329] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 559.482186][T19215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.500210][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.544104][T19215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.589021][T19215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.598769][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.630938][T19215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.717715][ T1135] ------------[ cut here ]------------ [ 559.724064][ T1135] WARNING: CPU: 1 PID: 1135 at net/wireless/core.c:204 cfg80211_switch_netns+0x58a/0x5b0 [ 559.734903][ T1135] Modules linked in: [ 559.739876][ T1135] CPU: 1 UID: 0 PID: 1135 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 559.753515][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.764187][ T1135] Workqueue: netns cleanup_net [ 559.769639][ T1135] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 559.776752][ T1135] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b2 3d 5b f7 eb 82 e8 eb d4 f7 f6 e9 63 fe ff ff e8 e1 d4 f7 f6 e9 59 fe ff ff e8 d7 d4 f7 f6 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 559.800941][ T1135] RSP: 0018:ffffc90003e3f860 EFLAGS: 00010293 [ 559.808364][ T1135] RAX: ffffffff8ac7d6b9 RBX: ffff88802f870d80 RCX: ffff888026d15a00 [ 559.817924][ T1135] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 559.826177][ T1135] RBP: 00000000ffffffef R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 559.834373][ T1135] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88802f870700 [ 559.842505][ T1135] R13: ffff88802e8a7f00 R14: dffffc0000000000 R15: ffff88802f8708f0 [ 559.851218][ T1135] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 559.860687][ T1135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.867590][ T1135] CR2: 0000000000000000 CR3: 0000000075122000 CR4: 00000000003526f0 [ 559.876191][ T1135] Call Trace: [ 559.879977][ T1135] [ 559.883051][ T1135] cfg80211_pernet_exit+0xa2/0x140 [ 559.888369][ T1135] ops_undo_list+0x49a/0x990 [ 559.893182][ T1135] ? __pfx_ops_undo_list+0x10/0x10 [ 559.898892][ T1135] ? do_raw_spin_unlock+0x122/0x240 [ 559.904309][ T1135] cleanup_net+0x4c5/0x800 [ 559.909645][ T1135] ? __pfx_cleanup_net+0x10/0x10 [ 559.916201][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.922005][ T1135] ? process_scheduled_works+0x9ef/0x17b0 [ 559.928800][ T1135] ? process_scheduled_works+0x9ef/0x17b0 [ 559.934623][ T1135] process_scheduled_works+0xade/0x17b0 [ 559.945062][ T1135] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.951523][ T1135] worker_thread+0x8a0/0xda0 [ 559.956726][ T1135] kthread+0x70e/0x8a0 [ 559.961242][ T1135] ? __pfx_worker_thread+0x10/0x10 [ 559.966831][ T1135] ? __pfx_kthread+0x10/0x10 [ 559.972385][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.978089][ T1135] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.983881][ T1135] ? __pfx_kthread+0x10/0x10 [ 559.989233][ T1135] ret_from_fork+0x3f9/0x770 [ 559.994516][ T1135] ? __pfx_ret_from_fork+0x10/0x10 [ 560.000107][ T1135] ? __switch_to_asm+0x39/0x70 [ 560.005494][ T1135] ? __switch_to_asm+0x33/0x70 [ 560.010405][ T1135] ? __pfx_kthread+0x10/0x10 [ 560.016014][ T1135] ret_from_fork_asm+0x1a/0x30 [ 560.020962][ T1135] [ 560.024287][ T1135] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 560.031886][ T1135] CPU: 1 UID: 0 PID: 1135 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 560.045135][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.055597][ T1135] Workqueue: netns cleanup_net [ 560.061161][ T1135] Call Trace: [ 560.064841][ T1135] [ 560.068001][ T1135] dump_stack_lvl+0x99/0x250 [ 560.072734][ T1135] ? __asan_memcpy+0x40/0x70 [ 560.077464][ T1135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.083252][ T1135] ? __pfx__printk+0x10/0x10 [ 560.087966][ T1135] vpanic+0x281/0x750 [ 560.092055][ T1135] ? __pfx__printk+0x10/0x10 [ 560.096855][ T1135] ? __pfx_vpanic+0x10/0x10 [ 560.101661][ T1135] ? is_bpf_text_address+0x26/0x2b0 [ 560.107312][ T1135] panic+0xb9/0xc0 [ 560.111133][ T1135] ? __pfx_panic+0x10/0x10 [ 560.116047][ T1135] __warn+0x31b/0x4b0 [ 560.120330][ T1135] ? cfg80211_switch_netns+0x58a/0x5b0 [ 560.126282][ T1135] ? cfg80211_switch_netns+0x58a/0x5b0 [ 560.132246][ T1135] report_bug+0x2be/0x4f0 [ 560.137118][ T1135] ? cfg80211_switch_netns+0x58a/0x5b0 [ 560.143065][ T1135] ? cfg80211_switch_netns+0x58a/0x5b0 [ 560.148550][ T1135] ? cfg80211_switch_netns+0x58c/0x5b0 [ 560.154939][ T1135] handle_bug+0x84/0x160 [ 560.159484][ T1135] exc_invalid_op+0x1a/0x50 [ 560.164345][ T1135] asm_exc_invalid_op+0x1a/0x20 [ 560.169207][ T1135] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 560.175694][ T1135] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b2 3d 5b f7 eb 82 e8 eb d4 f7 f6 e9 63 fe ff ff e8 e1 d4 f7 f6 e9 59 fe ff ff e8 d7 d4 f7 f6 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 560.196843][ T1135] RSP: 0018:ffffc90003e3f860 EFLAGS: 00010293 [ 560.203359][ T1135] RAX: ffffffff8ac7d6b9 RBX: ffff88802f870d80 RCX: ffff888026d15a00 [ 560.211985][ T1135] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 560.220409][ T1135] RBP: 00000000ffffffef R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 560.229152][ T1135] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff88802f870700 [ 560.237338][ T1135] R13: ffff88802e8a7f00 R14: dffffc0000000000 R15: ffff88802f8708f0 [ 560.245671][ T1135] ? cfg80211_switch_netns+0x589/0x5b0 [ 560.251346][ T1135] cfg80211_pernet_exit+0xa2/0x140 [ 560.256717][ T1135] ops_undo_list+0x49a/0x990 [ 560.261829][ T1135] ? __pfx_ops_undo_list+0x10/0x10 [ 560.267141][ T1135] ? do_raw_spin_unlock+0x122/0x240 [ 560.272537][ T1135] cleanup_net+0x4c5/0x800 [ 560.277073][ T1135] ? __pfx_cleanup_net+0x10/0x10 [ 560.282146][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.287757][ T1135] ? process_scheduled_works+0x9ef/0x17b0 [ 560.294097][ T1135] ? process_scheduled_works+0x9ef/0x17b0 [ 560.300133][ T1135] process_scheduled_works+0xade/0x17b0 [ 560.306067][ T1135] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.312250][ T1135] worker_thread+0x8a0/0xda0 [ 560.317270][ T1135] kthread+0x70e/0x8a0 [ 560.321454][ T1135] ? __pfx_worker_thread+0x10/0x10 [ 560.327069][ T1135] ? __pfx_kthread+0x10/0x10 [ 560.332045][ T1135] ? _raw_spin_unlock_irq+0x23/0x50 [ 560.337520][ T1135] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.343039][ T1135] ? __pfx_kthread+0x10/0x10 [ 560.348253][ T1135] ret_from_fork+0x3f9/0x770 [ 560.353290][ T1135] ? __pfx_ret_from_fork+0x10/0x10 [ 560.358505][ T1135] ? __switch_to_asm+0x39/0x70 [ 560.363383][ T1135] ? __switch_to_asm+0x33/0x70 [ 560.368457][ T1135] ? __pfx_kthread+0x10/0x10 [ 560.373384][ T1135] ret_from_fork_asm+0x1a/0x30 [ 560.378929][ T1135] [ 560.393928][ T1135] Kernel Offset: disabled [ 560.398356][ T1135] Rebooting in 86400 seconds..