last executing test programs: 4.981481566s ago: executing program 1 (id=7084): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1}, 0x28) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r8], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r3, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r9, 0x0, 0xcf, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 3.885333946s ago: executing program 2 (id=7105): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000480000004800000004000000030000000000000901000000000000000000000300000000030000000100000008000000050000000100001306000000070000000300000003000000080000000000000c01000000005f2e"], 0x0, 0x64, 0x0, 0x1, 0xfffffffa, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0xd}, @val={0x1, 0x80, 0x2, 0xbdb, 0x2, 0x4}, @ipv6=@tipc_packet={0xd, 0x6, 'PbM', 0x51, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, {[@routing={0xc, 0x6, 0x0, 0x6, 0x0, [@private0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, 0x2, 0x1000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x401, 0x6, 0x2, 0x4e22, 0x4e21}}, [0x0]}}}}, 0x87) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) 3.670276105s ago: executing program 2 (id=7108): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000540)=0x1000000, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x58, &(0x7f0000000180)}, 0x10) 3.587288708s ago: executing program 2 (id=7110): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) bind$phonet(0xffffffffffffffff, &(0x7f0000000380)={0x23, 0x78, 0x48, 0x81}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8050000", @ANYRES16=r6, @ANYBLOB="010025037000fbdbdf243900000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x5c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x48, 0x0, 0x0, 0xfffffffe, @vifc_lcl_addr=@local, @remote}, 0x10) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000044) 3.434828458s ago: executing program 3 (id=7112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000200)='@!@\x00', 0x200b00, &(0x7f0000000240)={@_ha_fsid={[0x7fff, 0x4]}, {0xb, 0xd, 0x9, 0x9}}, 0x10000, &(0x7f00000002c0), &(0x7f0000000300)=0xffffff01}) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x7f9, 0xb6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000001300)={{r4}, "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"}) 3.416620655s ago: executing program 2 (id=7114): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delqdisc={0x3c, 0x25, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x10}, {0xffe0, 0xe}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 3.38020009s ago: executing program 1 (id=7115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0x1, 0x4) 3.210934589s ago: executing program 3 (id=7116): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x80000001, 0x9}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x40, 0x0, 0x88, 0x0, 0xee01}, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0x6, 0x0, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x30, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x80}}, 0x8000084) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESDEC=r2], 0x84}}, 0x0) 3.179809658s ago: executing program 2 (id=7118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r2, 0x8001}, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x4, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xfffffff9, 0x57, 0x1bc4, 0x2, 0x4, 0x5, 0x400, 0x10000036}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xf02, 0x5, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x44005) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, 0x8) socket$netlink(0x10, 0x3, 0x10) getpeername(r1, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000140)=0x80) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @multicast2, @local}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 3.127017434s ago: executing program 4 (id=7119): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) 3.039478374s ago: executing program 3 (id=7120): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0xfffffff9, 0x81, 0x2, 0x10, r2, 0x1, '\x00', 0x0, r9, 0x3, 0x0, 0x5}, 0x50) (async) openat$cgroup_ro(r8, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x5, &(0x7f0000000200)=@framed={{}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xc}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x9, 0xff, 0xfffff014}, {0x6, 0x0, 0x0, 0x1}]}, 0x10) 2.984698248s ago: executing program 4 (id=7121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) read(r0, &(0x7f0000000000)=""/131, 0x83) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.938232837s ago: executing program 0 (id=7122): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x100000}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) socket(0x15, 0x800, 0x9) 2.879470458s ago: executing program 1 (id=7123): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="2c7ef8fec0caa09100e5bbdd3c05d7a2c7a39e8c0b7bcf481ff5e3cb2d98e97b4f", 0x21}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.865913126s ago: executing program 3 (id=7124): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x2c4, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf481}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fb5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fc00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000008}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc02}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2f, 0x3, "47d2aaab28fb397d4cd53d31e4e19f2f89d7b37044805e2780a1a308e7a6a6d9e17c8d3e39ccd0061c456f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x682}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4001a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x825}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x366}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) (async) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x2c4, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf481}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fb5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3fc00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000008}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc02}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2f, 0x3, "47d2aaab28fb397d4cd53d31e4e19f2f89d7b37044805e2780a1a308e7a6a6d9e17c8d3e39ccd0061c456f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x682}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4001a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x825}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x366}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf256600000008000300", @ANYRES32=r11, @ANYBLOB="0800b70063000000080026006c0900000800"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf256600000008000300", @ANYRES32=r11, @ANYBLOB="0800b70063000000080026006c0900000800"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r15, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r15, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2e, 0x26}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}}, 0x80) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r15, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2e, 0x26}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}}, 0x80) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000fbdbdfec251700000018000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a00060008021100000000000a000600ffffffffffff00000a001a000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 2.741366167s ago: executing program 4 (id=7125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2}]}}]}, 0x48}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x186}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4", 0xaf}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56fa4337820ad06b22c31773b6b4c59c17d5cfc1a", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="f77d2b5dc0f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022d60f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb664", 0xc2}], 0x1}}], 0x2, 0x2090) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000400)=0x2, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 551.102247ms ago: executing program 0 (id=7126): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfffffc, 0x1, 0x0, 0x8}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 549.753382ms ago: executing program 1 (id=7127): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xfffbffff) r3 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x20, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000152a0c44740a2d864000001000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000034000000080a010100000000000000000100000008000940000000000900020073797a32000000000900010073797a3014000000140000001100010000000000000000000000000ace23e02829af0a148999211ad25bb49a7595f0b5cab00e5a834f6e347c4458159e925458548101d4f25afe5934e38801518cc86c42e8e74198c76b27ded5162b2a8a61f2556cb907e29b1066620bc1e9205012c02c2658da1864e71507d08b23c5cf31a61ed335fcfebd30e74365a27ce10d7e49aa91713bf043ccaee2949ef147e59d1afc50e348824544f2f1a3a20d95b2b31c111278893531aebdfe85ab6846b8fa0c8a79a153a3758f1b1052f9b5b19f05f91b5db91efa270526a0cd89186d59d78db04256005bf4233acdb4f499f580002307d5649e893a3cf2c44eb2cd30d00ffe85b43fa7709f994a2b5783a170799a07168b50fb977546704f"], 0xa8}}, 0x0) 521.538681ms ago: executing program 3 (id=7128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000500)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}, 0x40088d4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x7, 0x0) getsockname(r4, &(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x3) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x28, r9, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r11, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8081) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4002016) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x2}}, 0x8800) 518.06935ms ago: executing program 4 (id=7129): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 467.477295ms ago: executing program 2 (id=7130): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r3, @ANYBLOB="98bb96aedf2300427ad0890b283a565767e2b2ddea644346d3bb9af440cda20b3fe3eaec85a6de4ae75a8e7197e623dcc4f9f55130aec0e2f25ff35f2b1691beea51026e0e388968556659c81ef19fb02ee14af23102dad7e5f5c395ab81a62b4773af285ac538c78ed36e0019f6bfb4c75c57dd6b159edcb1dd3a3ce2f5600b302b87586050c045c11c66e8340bf9f0405957c67fefc68488fead9f34a9e3ac30055ae9dc52bd637275ae69c4bfaea02c33df8ceb324f6d3368159e9758d714e8946301ea51f0c510c4e07f84ce375ecb5c4a39cdd26f967e40"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000140)={0x2, 'veth0_to_batadv\x00', {}, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c080059467bcc6739292db7019126780cd947000000000000007000fcdb0000fd07f01f00af9d00000000005cc5e40f7d279d434ff6422e03eb9d53e18204187e4d643868a62c72043f1c8055c52bf1a7b5c87b188d9c8560f84748bb006b21800dc9a404b6ef153b18bc18173a81a7d2489c0e7666"], 0x1c}}, 0x4000) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="a702c27bf06db98cdf8d6889422019c0b20a0a589054612bc8b9aa12732b5894b3c2d33be1f984c47d286b219241aefd3c8c01f9843c6e8fb0e19e0c0743a2532975634b87c108677948f86f35b5eecd56f3b769bcfa672442f58bd4199e03bf4ea9385cd1df984d2958938330a1cd148cde179da1e2f11ca51a529ea58803884e2b6978de1a4127626ec37a290e73ca8d6d8ddfdfd53755d167ba8b2cd2fbff86ac34b7db68e9875e4307792830f899f0c75e418f58ce82039ce193097579f3aceff36ec054c4672cc8969f69efe1015860c8ffffecec6de646fb793021c2bb996dc9f7e6a72620e7cd729f1c24e8eeb58eb51a928570468e1fb23641e00fa426f6c24450abbde87f8833f0ee367758834d877babd4a80518cdcb04d6352e52d8abd6443757bd6ca779f0e57b25698598cdf11f8b45108cb1384fccab4aec1347e71eafcfafaadd4360716c11eb4d11864131df20db52730a242f45ccd6bc3dc02589c0e2a979b752986c692a4dff8ab71c5574220ae28bdb94c7e4ecf4b04e9ca4b68db1b27d0c2e8eea02487f5df0cb948cb2520694a6cb1dee45e0ef6d10925020001e0b49e1887f2c7e7dd98a4c04578e393b8bb7827868953f7587f5262aaf9f3d0803cd7e1ebc476f9407df2a9fea1349c80e14d094e3e203b18bd5bdee5453ad7817c73c974e753cdf923e9333c001cef33d89f8882adc5b5a491baecf9deb9199fd9e4740070183159818f1d527b0c369d590ec4988b7ed124eb9b34c050d426165f3ac392f2fc0dad59578c2498a755113f1e2207312e72fad25b59c0886c1242ed416e58d8fbff8e2ccf89d1aa87cde308c36e3c53c842a661df51449bd224cd967310172ad7165e6976e47cb7d191544d54170fdabdf9482e2b24d8a58376ea7cf60b347b55a259bf2eddb9e9d3aca20422dedcc9af246ead386662fdf14735a6e0deec38d23fbcebcc30349badcfb85308bd61354451d8199d9f53db36019d3d8e0db0becc5e1439c8104414d4020fa1f7298705becf897902d550862f1630a36773f585d0b122555632b7c333282b06d99a352daa20fda91c4406778dc36dcc5e73b8fa3048c53e30c762ede7be96880a1e3229a0bf88f8cc4e1c89571182e3dbdb5df2720ddf34f111314040c2f4ed3daf234a960e19d902fe68b41701c7834d9b092132f0b189cda43512319479475623598c4d1a00787f2ef605ff9289b180bbf17b62abaa1bea1429bc468f6f5df7fffcc7784a69338701a1e0fb471d3b17dba61e22705fe087b803faae47d7e338099021461a412af3ad4f94d6cea74fd858e5f39acdd93fc59c8970e00efc6cd78311d0859fab70c7de88d099c86743c8324427c7e931c0b50f54ab2d66bfc5eb474a2efd8ba91923825bacffff39d074e018373a36b55885cc1e2bbb5f8f7b001942e9e3dfb7f35e7b44b7c513ecc91f518d0d0577b9926961bcea1b468ee5f3d50d0cf188c81790dbb156be77eb6e69f5e2b922e13d8b92baef4125d802cfed1a097e3d9abb2b03e6566c17d24f78a6a29687188f22030c4f0e75935aea670bc038cee6e7827c66b772fe3bc17e5dcb66a371cda6ab8f95c199f23c8cfb98862947604c87973540ba650de26ceeaa118af2f8d51593c0bfab9a49360c862b5d2f0cd4912d42ab3a4830700ce125195190e28c20c44700b4c547d762b9d76aae14bcae36412fb8911a385ba5bda57f8cfeadf8f6e409226534866a61ee15cb5ad80cf22110176cf59db4e82207e3a5c12fb2afc1474ac7f6dd6c3f59a1f35caf41b9c75b98e3fdcee8ba0f62e0f66049ec52252990cb74339316e2878d76e5768096d16eed915721cd4cf2fbb8740ce3a483d95b15c28037e4f08568ce29e297f0fb9178ac6a3050e3311e57567b6a43e29fda3f6fe0116dcbb9999442d92902dbd030a806284e4702b68c49012738eab4ca6917ac15c333d9956abcc259887c0d804421569f67cda25ae113bf60c763d41bc96e1bbc984681fab5c0d74a1c5934d588f6eefea6cf186fb15b0d9fc3c656504fc542a7005f7f6a621476388b3cbb1d2fa6214cc62faacb3769fc7b5826af801f59d06d19cccac68eeb050b9d7f79b6263350178024072581b17f193d9700f63f7280f09f250988532ff9fb2baf6150f8ca02723e653662430df0e1cba59535448534d8b99a4869aa0e5f5ddde36bcce7b4c5018342bc73b0bafec14f27baa86ebaa0ae465686786a59ab7e6f443dc37154f43ee6128391f074929e9ec2b02835d83e04fffc6f0eec6de6d18b8396cc73b9e7634e9ca2838ebd710be87a9fe8d5a8619891a003fcd1c2c7e71b0df7c1bbf1efc3b69ef52053d29830c38e5eb6b3355ed23212bce370c9168f5dd17d5259642946c07eacfe1288105fe0beefcbee1828e1faf5cd9e030c35749b83ff25372757cf1dc7d27d963392d403e1d02ceac641b0d297b9ad07c45584f1717e0fdc96e105bdc421c8a8ebc9af1d2862729b4bd720d73bce506b9e37aa765ca3d5875cb52c2ae76579854455035cbc91fd71bd011326f3bd1dd4fcd56b9fe052336b85b4ed79c3c2a40f57a3dedacc9154b3cbbdf766c7d916d5aed0ba2c2724bcd97ec20da3e40b7e9a724d513f9ef6ed94c8afcc25c38ec2eb9267ef4dd07c7783decc2bc3e8b67e71dd54472b67e5bbe614856b96e1a3951b0c34668269116147b349b8ca5efd06e88a46c4dabf81c11cc1b46ffb9b9f7a8911fc8ad8b489f03f6faf9f231553cb4ad74470c330715781c9544ab48c38369265513952cc9f1063f43077390dbc59d704336e5f504e683ce34d1b02e76d4d2a689d2b401172245e3165a98e74e2aab0c7251cf8d59d377df853795c3fced7998025d5f851fdfb797a3a8dffff9b7fab792dfb60dcace3aada03c58baa51d79e0b8cd04017d9b193a2f9d732c1cef477c1683d923f70718d4be2deba348a418f1453414e4482b79813e34e1b7dfd5ac854b80e412d1d642f5a7f6132ad6c6eae847d6900a0efefa7a73ade315c25c1c0ec843394d315c10cc8b775b61c42507cc12b323a8734cd70bb1608be5355544009cd739e3d11701bf861901f40c7575093f8b619188303161100aa828f3d8fff2ba09b4d98ecbfd86d649f8b8224403921b8c0045a0cf501792c92d7571fb6f4137149b3f2b564c8d59cd2274cfa8e2caeeb4e6c47120a5a1cb6f3b9f817b12fc2a960a9aec82569bd0397cc3b686363c74672fe6627f69ba74f23f8093de16fa9e01694d81dec03a26c2573bd9dae8bd0edb97f6ff1e41af299118d6e17f81b20df90b22034b487e553dc6efc6ec6b8dd4659af003f4d187e519092ebfd332d58b37069b0b71df37f34ca89d9ce58e9000f3e5af502a4c0e486aa489826f1b2f397da15929e51aca8ba61c1fe6a0acea6481423f7168146c1b6213988b051a8209ff5fedbebe8993ea28cc0877a3af310c3e9aab2f9fafeee0605741abf51d9ade538450ff627dbc5ed266e11521922671afe6bca00709e9499387831f0961d9d78d437ea05f30996d4c3748aec2ab32879f3b2c553fd28028e57211443d3187373c60dfe083edc1e8ca29f4962a0c32c4d822523aef785094c36bd1006b33ab84819b36fbdb9bfefe1f3b0203fc056c0d332e323f881e04419a533201764a2bf4f4d09cdc82ed7581d9c08eaab4250a85c2fa2344492f5fd8ee25141972f8dedfa4f2f4c37bd356be7bdd061c396c3533ebbc267bc30983dfd34ba255979d206fb600b07d8ad7ec4aa12449a6fb50d3fd3d7e1ff542204a67ffd2390e2e1cc26d3ea43946893cd39906055c3ca4f660b71ee4a818383fc7c7cce0abde2428fbb1f1516b82719556e4f38b2e0896de65706e5d924ff9dcf16941e7293d312f5a69aafc1819b1d49461a5f44ca927d6748cfb36b6cb786be2f9f8316d9ef3c24709c0830d4457fe59992ada7f87ba46701298cde81012e5fdcc90f31ccd951cc73b79b1b01e37764f998d7b8e1503fd4e3785c63c054cf22ec82c94acfd733e3c81a87359898b1577d1630e22dbe34139e0dbb941bc8223b8e5bc784109bcb050a0905de7a59be4ff9855b1db9a50ae6d460f8a55742d354748fefb71e532340b379c393d053bfd3045370f247c3e54acfc07ac00cfbf39017e627706c927ae5ecd095f826a3ec076872eee99257abcf128082ea82d171022eda335c5306f798298bdbaf019f86f3314706a7c916cb428ef97a0a196ce7fdec1897c0d9e23c517e211c7867869c468978660cecae91c94dbacea6d812d1deff6753d8051c4aae074ece8f574540b560ac601a8104e24ce86a36cb2adf446debaf06b8675a55424c497e8cc4a8dce43cf3371083e5fbc8d76223652b82821bfe221109b9877dcd5dc7a03679c36e5607a0075436ea8a5c5dbbdd5c8995c0b3e5d447552600c6b787540bb9ac5a9430b830fb10f6b16ee7528c2e297d61eeb79c20426b146cefb33eee2458630102b34668300ff6dea9e413f66cf78c623403eca9869109bc66a49a0cca38882bc35badb3ef121baef323320c72ca4cb999d9964ad42070b1e589c961bfcf224016ecf9dcaa951fe9da5ac6e54e435b3237b4e066012bf132e8d23dff0481e2b6ebaca7fe5d32308eef7c2546130bcc998b32b676abf6ffde6ac89d280e531f7bd01b6f6fbd17a25482461ff5994012db41cd222ea72dfcc384ad6bfd80fef24424a2ad2451f741c530ac493212938c5277e3885b75caf3a6eb92638733a4f038cbc8264d76db9c36fec68d01231cedf0718df59ab6d133730f0ae865fca192098b5a46837c3fc0da67c7d104329cbacaaa6109c772c7ea588dd29eed97301cf4d6d85063e923cb5441c33b8b51e4bd2233ef361fb2ffe72ab2620eab2bf5903db9a11a2d9bb45f4dd004a24590e5f0ba6741b775480fbdd6b3fd2c37daed23fb09936ee1688dd58ba8c9eab2070711f5948b7cd983b8e8332a8dd49a792e970b153c18515858efd68da892b8bf017dd656f392df7ec9c4ab74dc4ccb4e39bfa890f3b595503e5e9bad8d4910129124808e0ee592bc002e99ecbbc1eb94aaefa9ce730438c67044c8061396e6079a6bda4210cb44e52bd97e26aedd65aa8a2a1898f16bee6862699560295d222e0bb7d217bb2f7a257bf7e6d4f6155b907a523ea5e22a55b547d625bff7752f311780d66766f95d4be38a261cb4114f90f73597bed75430e7f6bdd6116544b252b2b29f00c50a717da2ab4911af8aebc1dba81b884b9f3d63f9ea6177102ddc07a59b50f19f756172c1b515f55758bdff3d3094fb1f82b2864ec11cce06895a61585f02b295c3a15c8cfab53ee7b81f1a6a1814b8eaf3bce97a9782274e7431920580cb1ef1d5aef26205568b17b56ce1472d3131f4b771e18a68b7cea6d8cf859af35982373e89c5d0f0442576eef8ef34d14b7d87db9037cbfa08f4b391103eefed276eaee90554c7b32daa44029b67ea514786ea1f187715bac8ea5bf4f0717723b55b5f6807e55830d46dfd515b754d8797ed772aec91c7c08a2ce4fbbe9ba35593fbd800d173b20b6ac32bf4f62e336bb589148b4b448da8cad255e633e31d59bd8b3732da0bebad997874ec786742fb8e673712714d19d99a1faeb0bdf8bfcc29997dd6560ea76ce97c6f861a8d99bf16bb4822f1a1439c2cedd66b9b4aba07eaf5f4e6f57a60975eff5cf4109a8e4d25eb12f9bcc527d14c886a6319f3d79c4c03eefab6acc0a559f425f9a03722333a7c392f7", 0xfec}], 0x3}, 0x0) ioctl$FITHAW(r8, 0xc0045878) 453.332823ms ago: executing program 0 (id=7131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) recvmsg(r1, &(0x7f0000000580)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000440)=""/129, 0x81}], 0x5, &(0x7f0000000300)=""/10, 0xa}, 0x20) 356.936334ms ago: executing program 0 (id=7132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x19, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 303.418777ms ago: executing program 4 (id=7133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x48}}, 0x54) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r2, 0x1e, 0x3d, 0xde, 0xffffffff, 0x6}, 0x14) 253.475206ms ago: executing program 1 (id=7134): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 202.205291ms ago: executing program 0 (id=7135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630121000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd2a, 0x25dfdbfd, {0x7, r0}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r2, &(0x7f0000000800)="468ea009", 0x0}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x2c, 0x2d, 0x8, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x2, 0x3}, {0x6, 0xb}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xe8}}]}, 0x2c}}, 0x8000) 78.610038ms ago: executing program 4 (id=7136): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/4098, 0x1002}], 0x3}}], 0x1, 0x10002, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) socket$nl_route(0x10, 0x3, 0x0) 78.349075ms ago: executing program 3 (id=7137): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a3000000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x2, 0x29, 0x2e0, 0x5, 0xfffffffa, 0x101, 0x5, 0x9d, 0x10001, 0x7f, 0x2, 0xdc, 0x6, 0x3, 0x60b3, 0x0, 0xdfc, 0x2000000, 0x6, 0xb, 0x8, 0xf65}}) 15.258968ms ago: executing program 1 (id=7138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc86", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=7139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) syz_emit_ethernet(0x2f4, &(0x7f0000000380)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "841c6f", 0x2be, 0x2f, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x43}, {[@hopopts={0x5e, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x82, [0x8, 0x2]}}]}, @fragment={0x16, 0x0, 0x9, 0x0, 0x0, 0x6, 0x67}, @hopopts={0x6, 0x1e, '\x00', [@pad1, @pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0x7, 0x4, [0x7fffffff, 0x7e, 0x4, 0xa, 0x930, 0x1, 0x7, 0x4, 0x7, 0x7]}}, @generic={0x79, 0x6b, "51b26cac167e03ffa87576938780fac06ab5e8368bfeb283a2a86bbea290b38b3b21fe075c1bef54c996e72af409ab3c0ffc356b5c7d1ec778d9de645461ed63ccb247e9d0ba810edf40b39399f2cc013794abe58da71fe8e5b3a1a3b6090b7bb4dbcc197ebc2b7c34c6af"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xff03}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x9, [0x401, 0x16]}}]}, @routing={0x2, 0x2, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1d, 0x1, [0x2], "66868f5e24050773a21d9be2ad2e6dffba7294ee91a49b65b36c23c7fb"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7ff, 0x1000, 0x2]}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x61, 0x5, 0x8000], "f6f976e27737d10861"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x7f, 0x2, 0x0, 0x2, 0x3, 0x8}, 0x2, {0xffff, 0x3ff, 0x3, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000005, 0x8c4b815a5465c2b1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f7, &(0x7f0000003200)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) kernel console output (not intermixed with test programs): ith a down link [ 611.961991][T27031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5752'. [ 612.029804][T27031] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 612.049523][T27031] bond7 (unregistering): Released all slaves [ 612.108879][T27047] syzkaller0: entered promiscuous mode [ 612.114487][T27047] syzkaller0: entered allmulticast mode [ 612.167349][ T5828] Bluetooth: hci0: command tx timeout [ 612.200510][T26816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.237379][T27047] tipc: Enabled bearer , priority 0 [ 612.254457][T26816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.293454][T27046] tipc: Resetting bearer [ 612.335506][T27046] tipc: Disabling bearer [ 612.340207][T27063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5762'. [ 612.356335][T26816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.369285][T27061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5763'. [ 612.379264][T27061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5763'. [ 612.404619][T27063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5762'. [ 612.407448][T26816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.700819][T27085] xt_socket: unknown flags 0xe4 [ 612.837922][T26816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.896886][T26816] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.916731][T27093] IPVS: length: 8 != 1152 [ 612.921184][T27093] IPVS: length: 8 != 1152 [ 612.935497][T24933] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.942743][T24933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.954638][T27093] IPVS: length: 8 != 1152 [ 612.959724][T27093] IPVS: length: 8 != 1152 [ 612.966794][T27093] IPVS: length: 8 != 1152 [ 612.971214][T27093] IPVS: length: 8 != 1152 [ 612.994360][T24933] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.001639][T24933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.036099][T27093] IPVS: length: 8 != 1152 [ 613.040523][T27093] IPVS: length: 8 != 1152 [ 613.044913][T27093] IPVS: length: 8 != 1152 [ 613.152129][T27093] IPVS: length: 8 != 1152 [ 613.167743][T27093] IPVS: length: 8 != 1152 [ 613.172261][T27093] IPVS: length: 8 != 1152 [ 613.181889][T27093] IPVS: length: 8 != 1152 [ 613.183824][T27107] syzkaller0: entered promiscuous mode [ 613.187524][T27093] IPVS: length: 8 != 1152 [ 613.199638][T27093] IPVS: length: 8 != 1152 [ 613.204242][T27107] syzkaller0: entered allmulticast mode [ 613.213637][T27093] IPVS: length: 8 != 1152 [ 613.213671][T27093] IPVS: length: 8 != 1152 [ 613.213719][T27093] IPVS: length: 8 != 1152 [ 613.229987][T27093] IPVS: length: 8 != 1152 [ 613.231790][T27114] tipc: Enabled bearer , priority 0 [ 613.255257][T27106] tipc: Resetting bearer [ 613.276898][T27093] IPVS: length: 8 != 1152 [ 613.281402][T27093] IPVS: length: 8 != 1152 [ 613.288371][T27093] IPVS: length: 8 != 1152 [ 613.310982][T27093] IPVS: length: 8 != 1152 [ 613.315430][T27093] IPVS: length: 8 != 1152 [ 613.316602][T27106] tipc: Disabling bearer [ 613.320442][T27093] IPVS: length: 8 != 1152 [ 613.332973][T27093] IPVS: length: 8 != 1152 [ 613.339154][T27093] IPVS: length: 8 != 1152 [ 613.349437][T27093] IPVS: length: 8 != 1152 [ 613.355096][T27093] IPVS: length: 8 != 1152 [ 613.360217][T27093] IPVS: length: 8 != 1152 [ 613.372706][T27115] syzkaller0: entered promiscuous mode [ 613.379023][T27115] syzkaller0: entered allmulticast mode [ 613.389030][T27093] IPVS: length: 8 != 1152 [ 613.397046][T27093] IPVS: length: 8 != 1152 [ 613.401662][T27093] IPVS: length: 8 != 1152 [ 613.512912][T27120] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.5777'. [ 613.537756][T27120] netlink: 'syz.0.5777': attribute type 21 has an invalid length. [ 613.763886][T27139] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 613.833721][T27143] net_ratelimit: 58 callbacks suppressed [ 613.833743][T27143] openvswitch: netlink: IP tunnel TTL not specified. [ 613.863295][T26816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.886355][T27141] syzkaller0: entered promiscuous mode [ 613.891890][T27141] syzkaller0: entered allmulticast mode [ 614.085875][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 614.094058][ C1] lec:lec_tx_timeout: lec0 [ 614.102539][T27150] syzkaller0: entered promiscuous mode [ 614.122436][T27150] syzkaller0: entered allmulticast mode [ 614.152654][T27150] tipc: Enabled bearer , priority 0 [ 614.182723][T27149] tipc: Resetting bearer [ 614.237680][T27149] tipc: Disabling bearer [ 614.248160][ T5828] Bluetooth: hci0: command 0x0419 tx timeout [ 614.279777][T26816] veth0_vlan: entered promiscuous mode [ 614.373461][T26816] veth1_vlan: entered promiscuous mode [ 614.518779][T26816] veth0_macvtap: entered promiscuous mode [ 614.545732][T26816] veth1_macvtap: entered promiscuous mode [ 614.613686][T26816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.683418][T26816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.721401][T25243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.757988][T25243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.799643][T25243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.837258][T25243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.281717][T24934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.304029][T24934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.418888][ T9701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.427650][ T9701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.586943][T27220] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 615.612543][T27222] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 615.635611][T27226] __nla_validate_parse: 4 callbacks suppressed [ 615.635631][T27226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5689'. [ 615.781912][T27233] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5808'. [ 615.794790][T27232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5807'. [ 615.828059][T27233] tunl0: entered promiscuous mode [ 615.833794][T27233] netlink: 'syz.0.5808': attribute type 3 has an invalid length. [ 615.834064][T27231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5807'. [ 615.842617][T27233] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5808'. [ 615.969326][T27237] netlink: 'syz.0.5810': attribute type 13 has an invalid length. [ 616.012074][T27208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.032856][T27239] netlink: 'syz.0.5810': attribute type 16 has an invalid length. [ 616.042306][T27239] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5810'. [ 616.336443][ T5823] Bluetooth: hci0: command 0x0419 tx timeout [ 616.586536][T27265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5819'. [ 616.905045][T27277] bond1: entered promiscuous mode [ 616.960076][T27277] bond1: entered allmulticast mode [ 616.990280][T27277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.024591][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.037854][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.048936][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.058710][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.068840][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.266428][T27288] vlan5: entered promiscuous mode [ 617.279065][T27288] vlan5: entered allmulticast mode [ 617.344738][T27284] ip6_vti0 speed is unknown, defaulting to 1000 [ 617.453145][ T9698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.505914][ T9698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.545123][ T9698] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.563235][T27310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5832'. [ 617.720764][ T9698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.742288][ T9698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.787652][ T9698] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.944624][T27324] netlink: 'syz.0.5838': attribute type 1 has an invalid length. [ 617.955482][ T9698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.987597][ T9698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.030725][ T9698] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.276535][T27339] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5839'. [ 618.308692][ T9698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.332326][ T9698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.345596][T27345] netlink: 'syz.2.5840': attribute type 13 has an invalid length. [ 618.365497][ T9698] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.472585][T27339] bond2 (unregistering): Released all slaves [ 618.886184][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 618.896759][T27370] x_tables: duplicate underflow at hook 1 [ 618.923856][T27370] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5846'. [ 619.206588][ T5828] Bluetooth: hci5: command tx timeout [ 619.334882][T27387] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 619.453036][ T9698] bond5 (unregistering): (slave gretap2): Releasing active interface [ 619.583935][ T9698] bond2 (unregistering): (slave geneve2): Releasing active interface [ 620.061138][ T9698] bond5 (unregistering): (slave bridge10): Releasing active interface [ 620.099512][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 60 seconds [ 620.112215][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 60 seconds [ 620.124150][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 60 seconds [ 620.136619][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 60 seconds [ 620.183188][ T9698] bond0 (unregistering): Released all slaves [ 620.193265][ T9698] bond1 (unregistering): Released all slaves [ 620.214041][ T9698] bond2 (unregistering): Released all slaves [ 620.229914][ T9698] bond3 (unregistering): Released all slaves [ 620.244807][ T9698] bond4 (unregistering): Released all slaves [ 620.260109][ T9698] bond5 (unregistering): Released all slaves [ 620.381626][T27284] chnl_net:caif_netlink_parms(): no params data found [ 620.499748][ T9698] : left promiscuous mode [ 620.707029][ T9698] tipc: Disabling bearer [ 620.721372][ T9698] tipc: Left network mode [ 620.858601][T27429] __nla_validate_parse: 4 callbacks suppressed [ 620.858620][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5859'. [ 620.912904][T27284] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.925361][T27284] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.943474][T27284] bridge_slave_0: entered allmulticast mode [ 620.964233][T27284] bridge_slave_0: entered promiscuous mode [ 621.173943][T27284] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.186524][T27284] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.202604][T27284] bridge_slave_1: entered allmulticast mode [ 621.220460][T27284] bridge_slave_1: entered promiscuous mode [ 621.293887][ T5828] Bluetooth: hci5: command tx timeout [ 621.334500][T27462] netlink: 'syz.3.5861': attribute type 16 has an invalid length. [ 621.414389][T27462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5861'. [ 621.496638][T27459] lo: Caught tx_queue_len zero misconfig [ 621.693172][T27284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.770881][T27284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.878872][T27284] team0: Port device team_slave_0 added [ 621.888801][T27284] team0: Port device team_slave_1 added [ 621.947813][T27284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.954927][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.982301][T27284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.997194][T27284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.004350][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.031705][T27284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.097411][T27434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.103862][T27284] hsr_slave_0: entered promiscuous mode [ 622.104036][T27434] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 622.112632][T27284] hsr_slave_1: entered promiscuous mode [ 622.125646][T27284] debugfs: 'hsr0' already exists in 'hsr' [ 622.132390][T27284] Cannot create hsr debugfs directory [ 622.159556][T27434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 622.165514][T27434] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 622.228519][T27434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 622.243943][T27434] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 622.302049][T27434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.309379][T27434] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 622.435189][T27434] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 622.446874][T27434] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 622.563605][T27489] syzkaller0: entered promiscuous mode [ 622.573348][T27489] syzkaller0: entered allmulticast mode [ 622.582111][T27490] --map-set only usable from mangle table [ 622.724669][T27489] lo: Caught tx_queue_len zero misconfig [ 622.733349][T27489] netlink: 'syz.2.5868': attribute type 5 has an invalid length. [ 622.839251][T27499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5871'. [ 623.351038][ T9698] hsr_slave_0: left promiscuous mode [ 623.357679][ T9698] hsr_slave_1: left promiscuous mode [ 623.387337][ T9698] pim6reg (unregistering): left allmulticast mode [ 623.749991][T27284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 623.761393][T27284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 623.806495][T27284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 623.832001][T27284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 623.931736][ T9698] IPVS: stop unused estimator thread 0... [ 624.043381][T27284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.072709][T27284] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.086109][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 624.094156][ C1] lec:lec_tx_timeout: lec0 [ 624.100132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 624.114596][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.122277][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.159920][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.167255][ T9701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.470217][T27284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.578452][ T1299] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 624.844294][T27284] veth0_vlan: entered promiscuous mode [ 624.859913][T27284] veth1_vlan: entered promiscuous mode [ 624.908271][T27284] veth0_macvtap: entered promiscuous mode [ 624.920022][T27284] veth1_macvtap: entered promiscuous mode [ 624.950711][T27284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.973526][T27284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.996711][ T9698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.007071][T24926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.025266][T24926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.044389][T24926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.259279][T24926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.279284][T24926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.327767][T24926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.335650][T24926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.305978][ T5188] udevd[5188]: worker [24307] /devices/virtual/block/nbd2 is taking a long time [ 629.116306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 629.124345][ C1] lec:lec_tx_timeout: lec0 [ 634.006277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 639.046003][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 639.054162][ C1] lec:lec_tx_timeout: lec0 [ 639.058797][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 644.086741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 644.094850][ C1] lec:lec_tx_timeout: lec0 [ 644.936670][ T7887] lec:lec_start_xmit: lec0:No lecd attached [ 648.506601][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5874'. [ 648.590031][T27736] netlink: 'syz.2.5874': attribute type 7 has an invalid length. [ 648.852260][T27757] xt_hashlimit: max too large, truncated to 1048576 [ 648.864083][T27755] xt_hashlimit: max too large, truncated to 1048576 [ 650.085827][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 650.094014][ C1] lec:lec_tx_timeout: lec0 [ 650.099215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 650.170158][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 90 seconds [ 650.181509][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 90 seconds [ 650.192689][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 90 seconds [ 650.203816][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 90 seconds [ 655.106227][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 655.114428][ C1] lec:lec_tx_timeout: lec0 [ 659.205960][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 664.216304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 664.224318][ C1] lec:lec_tx_timeout: lec0 [ 664.246314][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 669.256515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 669.264560][ C1] lec:lec_tx_timeout: lec0 [ 669.285926][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 674.135475][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5887'. [ 674.156352][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5887'. [ 674.208997][T27771] Bluetooth: MGMT ver 1.23 [ 674.265278][T24924] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.298755][T24924] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.336524][T24924] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.364239][T27785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5891'. [ 674.380060][T24924] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.550497][T27797] netlink: 'syz.4.5895': attribute type 1 has an invalid length. [ 674.561191][T27797] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5895'. [ 674.574249][T27796] netlink: 'syz.2.5894': attribute type 1 has an invalid length. [ 674.585049][T27796] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5894'. [ 674.598414][T27802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5897'. [ 674.695035][T27813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 674.870853][T27825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.930363][T27834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5905'. [ 675.045788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 675.053980][ C1] lec:lec_tx_timeout: lec0 [ 675.059715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 675.143695][T27845] PKCS7: Unknown OID: [4] (bad) [ 675.149322][T27845] PKCS7: Only support pkcs7_signedData type [ 675.159932][T27844] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5909'. [ 675.192763][T27844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'. [ 675.213415][T27844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 675.298906][T27850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.317525][T27851] delete_channel: no stack [ 675.505543][T27847] syz_tun: entered allmulticast mode [ 675.631669][T27846] syz_tun: left allmulticast mode [ 676.553011][T27911] syzkaller0: entered promiscuous mode [ 676.566577][T27911] syzkaller0: entered allmulticast mode [ 676.701866][T27921] syzkaller0: entered promiscuous mode [ 676.714519][T27921] syzkaller0: entered allmulticast mode [ 676.802005][T27921] veth0: Caught tx_queue_len zero misconfig [ 676.830931][T27932] netlink: 'syz.1.5936': attribute type 1 has an invalid length. [ 676.904356][T27932] bond2: entered promiscuous mode [ 676.911599][T27932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 677.070294][T27939] bridge_slave_0: left allmulticast mode [ 677.083298][T27939] bridge_slave_0: left promiscuous mode [ 677.100141][T27939] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.140038][T27939] bridge_slave_1: left allmulticast mode [ 677.162368][T27939] bridge_slave_1: left promiscuous mode [ 677.170981][T27939] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.211733][T27939] bond0: (slave bond_slave_0): Releasing backup interface [ 677.231710][T27939] bond0: (slave bond_slave_1): Releasing backup interface [ 677.255526][T27939] team0: Port device team_slave_0 removed [ 677.273549][T27939] team0: Port device team_slave_1 removed [ 677.292768][T27939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.302115][T27939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.312456][T27939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.320864][T27939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.330994][T27939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 677.573195][T27971] netlink: 'syz.2.5947': attribute type 15 has an invalid length. [ 677.592592][T27962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.611242][T27962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 677.651742][T27975] syzkaller0: entered promiscuous mode [ 677.658790][T27975] syzkaller0: entered allmulticast mode [ 677.714531][T27962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.725601][T27962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 677.797509][T27962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.808494][T27962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 677.887472][T27962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.898286][T27962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 677.959459][T24933] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 677.970155][T24933] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 677.989267][T24934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 677.998675][T24934] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 678.014888][T24934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 678.023399][T24934] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 678.039711][T24934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 678.048197][T24934] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 680.085877][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 680.093951][ C1] lec:lec_tx_timeout: lec0 [ 680.247393][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 120 seconds [ 680.258447][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 120 seconds [ 680.269839][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 120 seconds [ 680.281024][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 120 seconds [ 686.013105][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 691.045845][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 691.054350][ C1] lec:lec_tx_timeout: lec0 [ 704.316254][T27984] block nbd3: Unsupported socket: should be TCP or UNIX. [ 704.358655][T27985] syzkaller1: entered promiscuous mode [ 704.360816][T27988] netlink: 'syz.1.5952': attribute type 2 has an invalid length. [ 704.391019][T27985] syzkaller1: entered allmulticast mode [ 704.407098][T27988] __nla_validate_parse: 8 callbacks suppressed [ 704.407118][T27988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 704.483702][T27992] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5956'. [ 704.498071][T27992] netem: invalid attributes len -24 [ 704.503324][T27992] netem: change failed [ 704.610767][T27999] netlink: 'syz.1.5959': attribute type 13 has an invalid length. [ 704.638444][T27996] syzkaller0: entered promiscuous mode [ 704.643986][T27996] syzkaller0: entered allmulticast mode [ 704.682500][T27998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5956'. [ 704.779425][T27992] bridge0: port 1(syz_tun) entered blocking state [ 704.793710][T27992] bridge0: port 1(syz_tun) entered disabled state [ 704.802132][T27992] syz_tun: entered allmulticast mode [ 704.809603][T28010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5962'. [ 704.821344][T27992] syz_tun: entered promiscuous mode [ 704.828195][T27992] bridge0: port 1(syz_tun) entered blocking state [ 704.835170][T27992] bridge0: port 1(syz_tun) entered forwarding state [ 704.849985][T28005] netlink: 81 bytes leftover after parsing attributes in process `syz.1.5959'. [ 704.859615][T28005] bond0: Caught tx_queue_len zero misconfig [ 704.948495][T28016] netlink: 'syz.2.5964': attribute type 29 has an invalid length. [ 704.969522][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5964'. [ 704.988639][T28018] netlink: 'syz.2.5964': attribute type 29 has an invalid length. [ 705.014602][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5964'. [ 705.170858][T28032] ipt_ECN: cannot use operation on non-tcp rule [ 706.977983][T28028] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 707.148827][T28043] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5971'. [ 707.293735][T28059] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5975'. [ 707.322118][T28059] 8021q: VLANs not supported on ip6_vti0 [ 707.333977][T28059] netlink: 'syz.2.5975': attribute type 1 has an invalid length. [ 707.349319][T28059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5975'. [ 707.417688][T28065] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 708.003206][T28106] openvswitch: netlink: IPv6 tunnel dst address is zero [ 708.641907][ T7887] lec:lec_start_xmit: lec0:No lecd attached [ 710.327980][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 150 seconds [ 710.339105][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 150 seconds [ 710.350247][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 150 seconds [ 710.361452][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 150 seconds [ 710.527087][T28084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.728954][T28120] __nla_validate_parse: 3 callbacks suppressed [ 710.728976][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5991'. [ 710.837450][T28128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5993'. [ 710.862075][T28125] syzkaller0: entered promiscuous mode [ 710.894083][T28125] syzkaller0: entered allmulticast mode [ 710.961782][T28135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'. [ 711.464067][T28173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6002'. [ 711.468766][T28171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6003'. [ 711.502496][T28175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6004'. [ 711.714854][T28186] xt_CONNSECMARK: invalid mode: 0 [ 711.736696][T28186] syzkaller0: entered promiscuous mode [ 711.738708][T28192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6010'. [ 711.742227][T28186] syzkaller0: entered allmulticast mode [ 711.950696][T28199] tipc: Started in network mode [ 711.955674][T28199] tipc: Node identity 722741c87c4e, cluster identity 4711 [ 711.996501][T28199] tipc: Enabled bearer , priority 0 [ 712.005423][T28208] netlink: 'syz.4.6014': attribute type 29 has an invalid length. [ 712.015053][T28208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6014'. [ 712.097792][T28216] netlink: 'syz.2.6015': attribute type 4 has an invalid length. [ 712.122567][T28216] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6015'. [ 712.136813][T28199] syzkaller0: entered promiscuous mode [ 712.146068][T28199] syzkaller0: entered allmulticast mode [ 712.153171][T28199] tipc: Resetting bearer [ 712.159431][T28209] netlink: 'syz.4.6014': attribute type 29 has an invalid length. [ 712.169392][T28209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6014'. [ 712.269064][T24924] tipc: Resetting bearer [ 712.302927][T28197] tipc: Resetting bearer [ 714.090221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 714.098290][ C1] lec:lec_tx_timeout: lec0 [ 714.229564][T28197] tipc: Disabling bearer [ 714.280043][T10546] tipc: Node number set to 241779144 [ 715.079495][T28297] netlink: 'syz.4.6040': attribute type 21 has an invalid length. [ 715.319403][T28319] netlink: 'syz.4.6046': attribute type 1 has an invalid length. [ 715.359343][T28319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.385036][T28319] bond1: (slave gretap1): making interface the new active one [ 715.396553][T28319] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 715.930583][T28351] __nla_validate_parse: 7 callbacks suppressed [ 715.930623][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 716.134857][T28356] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.6057'. [ 716.145549][T28360] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.6057'. [ 716.317265][T28375] netlink: 'syz.1.6064': attribute type 1 has an invalid length. [ 716.434220][T28390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 716.447392][T28375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 716.485603][T28380] bond4: Unable to set up delay as MII monitoring is disabled [ 716.499859][T28380] bond4 (unregistering): Released all slaves [ 716.544878][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 716.804173][T28408] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6070'. [ 716.825700][T28413] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6070'. [ 716.842808][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6070'. [ 716.854875][T28408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6070'. [ 716.877705][T28408] geneve4: entered promiscuous mode [ 716.883075][T28408] geneve4: entered allmulticast mode [ 716.892816][T24937] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 716.925479][T24937] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 716.958863][T24937] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 716.985239][T24937] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 717.026739][T28416] hsr0: entered promiscuous mode [ 717.045920][T28416] hsr0: entered allmulticast mode [ 717.051014][T28416] hsr_slave_0: entered allmulticast mode [ 717.058985][T28416] hsr_slave_1: entered allmulticast mode [ 717.092354][T28425] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 717.278195][T28435] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 717.314487][T28437] gtp0: entered promiscuous mode [ 717.332850][T28437] gtp0: entered allmulticast mode [ 717.340708][T28441] openvswitch: netlink: IP tunnel dst address not specified [ 717.522191][T28456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6085'. [ 717.540639][T28451] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 717.552595][T28451] bond10 (unregistering): Released all slaves [ 717.572794][T28458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.271839][T28508] netlink: 'syz.4.6103': attribute type 4 has an invalid length. [ 718.759454][T28543] netlink: 'syz.0.6111': attribute type 142 has an invalid length. [ 719.493712][T28586] PKCS7: Unknown OID: [4] (bad) [ 719.514781][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 719.528136][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 719.540314][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 719.555272][T28586] PKCS7: Only support pkcs7_signedData type [ 719.562951][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 719.576373][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 719.635136][T28590] netlink: 'syz.2.6124': attribute type 1 has an invalid length. [ 719.875642][T28584] ip6_vti0 speed is unknown, defaulting to 1000 [ 720.034106][T28608] netlink: 'syz.4.6131': attribute type 9 has an invalid length. [ 720.048118][T28608] netlink: 'syz.4.6131': attribute type 9 has an invalid length. [ 720.337907][T28618] netlink: 'syz.4.6137': attribute type 13 has an invalid length. [ 720.355452][T28618] veth0_macvtap: left promiscuous mode [ 720.368409][T28618] macvtap0: entered allmulticast mode [ 720.379503][T28618] macvtap0: refused to change device tx_queue_len [ 720.453804][T28624] netlink: 'syz.4.6137': attribute type 13 has an invalid length. [ 720.490304][T28624] netlink: 'syz.4.6137': attribute type 17 has an invalid length. [ 720.814472][T28624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 721.053552][T28584] chnl_net:caif_netlink_parms(): no params data found [ 721.229294][T28653] __nla_validate_parse: 9 callbacks suppressed [ 721.229314][T28653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6146'. [ 721.245415][T28653] netlink: 'syz.2.6146': attribute type 7 has an invalid length. [ 721.275563][T28653] netlink: 'syz.2.6146': attribute type 8 has an invalid length. [ 721.311903][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6146'. [ 721.353195][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6146'. [ 721.365652][T28584] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.384401][T28584] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.396898][T28584] bridge_slave_0: entered allmulticast mode [ 721.407273][T28584] bridge_slave_0: entered promiscuous mode [ 721.418503][T28658] lo: Caught tx_queue_len zero misconfig [ 721.426676][T28584] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.433869][T28584] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.441641][T28584] bridge_slave_1: entered allmulticast mode [ 721.450225][T28584] bridge_slave_1: entered promiscuous mode [ 721.475317][T28658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6148'. [ 721.493843][T28584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.504894][T28662] tipc: Enabling of bearer rejected, failed to enable media [ 721.515104][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'. [ 721.519512][T28584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.610402][ T5828] Bluetooth: hci1: command tx timeout [ 721.618160][T28584] team0: Port device team_slave_0 added [ 721.628782][T28584] team0: Port device team_slave_1 added [ 721.714492][T28669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6152'. [ 721.757369][T28584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.764455][T28584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.774780][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 721.830926][T28584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.834491][T28678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6154'. [ 721.845137][T28680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6155'. [ 721.868389][T28584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.875479][T28584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.902784][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6154'. [ 721.928966][T28584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.029963][T28687] Cannot find map_set index 65533 as target [ 722.081050][T28689] tunl0: entered promiscuous mode [ 722.154631][T28691] syzkaller1: entered promiscuous mode [ 722.176920][T28691] syzkaller1: entered allmulticast mode [ 722.267474][T28584] hsr_slave_0: entered promiscuous mode [ 722.274658][T28584] hsr_slave_1: entered promiscuous mode [ 722.281346][T28584] debugfs: 'hsr0' already exists in 'hsr' [ 722.289047][T28584] Cannot create hsr debugfs directory [ 722.315463][T28705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.423461][T28706] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 722.441352][T28706] bond10: option packets_per_slave: allowed values 0 - 65535 [ 722.452142][T28706] bond10 (unregistering): Released all slaves [ 722.543908][T28713] syzkaller0: entered promiscuous mode [ 722.559881][T28713] syzkaller0: entered allmulticast mode [ 722.700957][T28713] tipc: Started in network mode [ 722.709984][T28713] tipc: Node identity ba5afd734db8, cluster identity 4711 [ 722.720530][T28713] tipc: Enabled bearer , priority 0 [ 722.791673][T28712] tipc: Resetting bearer [ 722.836796][T28712] tipc: Disabling bearer [ 723.457910][T28584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.480773][T28584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.493115][T28584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34823 - 0 [ 723.572267][T28745] bond0: entered promiscuous mode [ 723.581675][T28745] batadv0: entered promiscuous mode [ 723.590350][T28745] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 723.601321][T28745] hsr1: entered promiscuous mode [ 723.607512][T28745] hsr1: entered allmulticast mode [ 723.612701][T28745] bond0: entered allmulticast mode [ 723.619035][T28745] batadv0: entered allmulticast mode [ 723.624962][T28745] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 723.652564][T28745] bond0: left promiscuous mode [ 723.659338][T28745] batadv0: left promiscuous mode [ 723.690340][ T5828] Bluetooth: hci1: command tx timeout [ 723.733300][T28584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.761740][T28584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.807326][T28584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34823 - 0 [ 723.812353][T28764] validate_nla: 2 callbacks suppressed [ 723.812371][T28764] netlink: 'syz.3.6179': attribute type 1 has an invalid length. [ 724.002436][T28764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.047919][T28584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.058810][T28584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.069890][T28584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34823 - 0 [ 724.166832][T28584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.178729][T28584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.189565][T28584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34823 - 0 [ 724.301447][T28584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.311589][T28584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.322273][T28584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.332505][T28584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.407434][T28584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.428299][T28584] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.441106][T24937] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.448332][T24937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.465787][T24933] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.473166][T24933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.679508][T28584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.720757][T28584] veth0_vlan: entered promiscuous mode [ 724.732354][T28584] veth1_vlan: entered promiscuous mode [ 724.764392][T28584] veth0_macvtap: entered promiscuous mode [ 724.775132][T28584] veth1_macvtap: entered promiscuous mode [ 724.794249][T28584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.811836][T28584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.827043][T24934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.838015][T24934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.849977][T24934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.860693][T24934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.954498][T24937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.969471][T24937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.999283][T24937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.008410][T24937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.766931][ T5828] Bluetooth: hci1: command tx timeout [ 727.856244][ T5828] Bluetooth: hci1: command tx timeout [ 740.004424][ T5188] udevd[5188]: worker [24307] /devices/virtual/block/nbd2 timeout; kill it [ 740.013967][ T5188] udevd[5188]: seq 27852 '/devices/virtual/block/nbd2' killed [ 740.410481][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 180 seconds [ 740.421429][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 180 seconds [ 740.432971][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 180 seconds [ 740.444562][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 180 seconds [ 747.451171][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 749.264906][T28810] netlink: 'syz.3.6189': attribute type 1 has an invalid length. [ 749.297804][T28810] __nla_validate_parse: 8 callbacks suppressed [ 749.297824][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6189'. [ 749.609789][T28831] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 749.687894][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6195'. [ 749.884973][T28850] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6198'. [ 749.920148][T28853] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6198'. [ 749.969993][T28850] netlink: Unknown conntrack attr (type=2304, max=9) [ 749.973505][T28854] block nbd3: Unsupported socket: should be TCP or UNIX. [ 749.988964][T28863] sctp: [Deprecated]: syz.2.6201 (pid 28863) Use of int in max_burst socket option deprecated. [ 749.988964][T28863] Use struct sctp_assoc_value instead [ 750.006427][T28853] netlink: Unknown conntrack attr (type=2304, max=9) [ 750.050303][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6199'. [ 750.285546][T28877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 750.298352][T28877] team0: Device macvlan2 is already an upper device of the team interface [ 750.596454][T28887] lo speed is unknown, defaulting to 1000 [ 750.602366][T28887] lo speed is unknown, defaulting to 1000 [ 750.620937][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 750.643322][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 750.661580][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 750.668998][T28887] lo speed is unknown, defaulting to 1000 [ 750.683072][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 750.693075][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 750.710425][T28893] tipc: Enabled bearer , priority 0 [ 750.712175][T28887] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 750.759588][T28897] netlink: 'syz.0.6208': attribute type 4 has an invalid length. [ 750.778227][T28891] syzkaller0: MTU too low for tipc bearer [ 750.789357][T28891] tipc: Disabling bearer [ 750.867155][T28887] lo speed is unknown, defaulting to 1000 [ 750.869961][T28890] ip6_vti0 speed is unknown, defaulting to 1000 [ 750.877102][T28887] lo speed is unknown, defaulting to 1000 [ 750.897712][T28887] lo speed is unknown, defaulting to 1000 [ 750.905568][T28887] lo speed is unknown, defaulting to 1000 [ 750.992144][T28887] lo speed is unknown, defaulting to 1000 [ 751.022701][T28887] lo speed is unknown, defaulting to 1000 [ 751.048726][T28887] lo speed is unknown, defaulting to 1000 [ 751.115550][T28887] lo speed is unknown, defaulting to 1000 [ 751.243683][T28912] bond2: (slave veth3): Enslaving as an active interface with a down link [ 751.276369][T28887] lo speed is unknown, defaulting to 1000 [ 751.285185][T28887] lo speed is unknown, defaulting to 1000 [ 751.349327][T28908] bond2: (slave veth5): Enslaving as an active interface with a down link [ 751.375238][T28920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6217'. [ 751.748566][T24926] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 751.771248][T24926] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 751.919600][T24926] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 751.963138][T24926] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 752.063782][T24926] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 752.078184][T24926] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 752.227869][T24926] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 752.252707][T24926] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 752.398349][T28973] tipc: Enabled bearer , priority 0 [ 752.424427][T28973] +: renamed from syzkaller0 [ 752.438538][T28982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.451619][T28979] block nbd0: Unsupported socket: should be TCP or UNIX. [ 752.452520][T28973] tipc: Disabling bearer [ 752.461829][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6229'. [ 752.588425][T28985] xt_CT: No such helper "pptp" [ 752.758261][T24926] bridge_slave_0: left allmulticast mode [ 752.771161][T24926] bridge_slave_0: left promiscuous mode [ 752.784871][T24926] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.815168][ T5823] Bluetooth: hci3: command tx timeout [ 753.046143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.054302][ C1] lec:lec_tx_timeout: lec0 [ 753.173009][T29016] netlink: 'syz.4.6238': attribute type 21 has an invalid length. [ 753.393553][T24926] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 753.781716][T24926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.792993][T24926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.804115][T24926] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 753.815427][T24926] bond0 (unregistering): Released all slaves [ 753.828139][T24926] bond1 (unregistering): Released all slaves [ 753.843635][T24926] bond2 (unregistering): Released all slaves [ 753.860247][T24926] bond3 (unregistering): Released all slaves [ 753.880539][T24926] bond4 (unregistering): Released all slaves [ 753.894350][T24926] bond5 (unregistering): Released all slaves [ 753.915173][T24926] bond6 (unregistering): Released all slaves [ 753.929712][T24926] bond7 (unregistering): Released all slaves [ 753.945927][T24926] bond8 (unregistering): Released all slaves [ 753.962592][T24926] bond9 (unregistering): Released all slaves [ 753.975618][T28890] chnl_net:caif_netlink_parms(): no params data found [ 754.030054][T29009] bridge0: port 3(ipvlan2) entered blocking state [ 754.057469][T29009] bridge0: port 3(ipvlan2) entered disabled state [ 754.071233][T29009] ipvlan2: entered allmulticast mode [ 754.078452][T29009] bridge0: entered allmulticast mode [ 754.088650][T29009] ipvlan2: left allmulticast mode [ 754.093817][T29009] bridge0: left allmulticast mode [ 754.150197][T29016] netlink: 'syz.4.6238': attribute type 1 has an invalid length. [ 754.171385][T29020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6239'. [ 754.274806][T24926] tipc: Left network mode [ 754.896169][ T5823] Bluetooth: hci3: command tx timeout [ 754.936445][T29056] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6247'. [ 754.961286][T28890] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.990397][T28890] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.013601][T28890] bridge_slave_0: entered allmulticast mode [ 755.035119][T28890] bridge_slave_0: entered promiscuous mode [ 755.061861][T29059] bond4: entered allmulticast mode [ 755.075264][T28890] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.095001][T28890] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.106955][T28890] bridge_slave_1: entered allmulticast mode [ 755.125280][T28890] bridge_slave_1: entered promiscuous mode [ 755.337430][T28890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.354051][T28890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.511065][T28890] team0: Port device team_slave_0 added [ 755.550314][T28890] team0: Port device team_slave_1 added [ 755.794771][T28890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.812488][T28890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.841236][T28890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.855818][T28890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.893180][T28890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.960215][T28890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.023645][T29102] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6258'. [ 756.238708][T28890] hsr_slave_0: entered promiscuous mode [ 756.256342][T28890] hsr_slave_1: entered promiscuous mode [ 756.272493][T28890] debugfs: 'hsr0' already exists in 'hsr' [ 756.286802][T28890] Cannot create hsr debugfs directory [ 756.335006][T29115] block nbd0: Unsupported socket: should be TCP or UNIX. [ 756.793309][T24926] hsr_slave_0: left promiscuous mode [ 756.810671][T24926] hsr_slave_1: left promiscuous mode [ 756.823255][T24926] veth0_macvtap: left promiscuous mode [ 756.831402][T24926] veth1_vlan: left promiscuous mode [ 756.838276][T24926] veth0_vlan: left promiscuous mode [ 756.838387][T29135] netlink: 'syz.1.6266': attribute type 1 has an invalid length. [ 756.899083][T29136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6266'. [ 756.968355][ T5823] Bluetooth: hci3: command tx timeout [ 757.079538][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6266'. [ 757.298111][T24926] team0 (unregistering): Port device team_slave_1 removed [ 757.318054][T24926] team0 (unregistering): Port device team_slave_0 removed [ 757.549993][T29135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.577094][T29143] bond5: entered promiscuous mode [ 757.582550][T29143] bond5: entered allmulticast mode [ 757.700630][T29159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.745377][T29161] veth1: Caught tx_queue_len zero misconfig [ 758.215209][T29180] nbd: must specify a device to reconfigure [ 758.220223][T24926] IPVS: stop unused estimator thread 0... [ 759.048061][ T5823] Bluetooth: hci3: command tx timeout [ 759.167423][T29227] netlink: 'syz.1.6286': attribute type 1 has an invalid length. [ 759.195306][T28890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 759.319841][T28890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.339322][T28890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.383273][T28890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.688816][T29259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6293'. [ 759.721002][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6293'. [ 759.774930][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6293'. [ 759.794149][T29263] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6292'. [ 759.865497][T29266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6294'. [ 760.000308][T28890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.082716][T28890] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.107070][T29271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'. [ 760.128058][T24921] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.135268][T24921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.203213][T29271] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 760.213033][T24937] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.228676][T24937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.359172][T29287] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 760.392679][T29293] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6300'. [ 760.668997][T29304] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 760.674975][T29304] syzkaller1: Linktype set failed because interface is up [ 760.726244][T22346] syzkaller1: tun_net_xmit 90 [ 760.942578][T28890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.071257][T29326] syzkaller0: entered promiscuous mode [ 761.100085][T29326] syzkaller0: entered allmulticast mode [ 761.270065][T28890] veth0_vlan: entered promiscuous mode [ 761.341487][T28890] veth1_vlan: entered promiscuous mode [ 761.469354][T28890] veth0_macvtap: entered promiscuous mode [ 761.501178][T28890] veth1_macvtap: entered promiscuous mode [ 761.542279][T28890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.567178][T28890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.583705][T29348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6310'. [ 761.601434][T24933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.614748][T29349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6310'. [ 761.643212][T24933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.668322][T24933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.688281][T29353] netlink: 'syz.4.6312': attribute type 1 has an invalid length. [ 761.735246][T24933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.981722][T24933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.026864][T24933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.138127][ T9698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.162934][ T9698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.201931][T29376] netlink: 'syz.4.6318': attribute type 4 has an invalid length. [ 762.226633][T29378] netlink: zone id is out of range [ 762.247781][T29378] netlink: zone id is out of range [ 762.271469][T29378] netlink: zone id is out of range [ 762.299095][T29378] netlink: zone id is out of range [ 762.320382][T29378] netlink: zone id is out of range [ 762.344345][T29378] netlink: zone id is out of range [ 762.378252][T29378] netlink: zone id is out of range [ 762.396374][T29378] netlink: zone id is out of range [ 762.420463][T29378] netlink: zone id is out of range [ 762.677238][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'. [ 762.700849][T29412] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6328'. [ 763.679921][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 763.717343][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 763.728424][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 763.760341][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 763.772366][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 763.852066][T29461] netlink: 'syz.0.6338': attribute type 7 has an invalid length. [ 763.883755][T29461] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6338'. [ 764.197841][T29477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6340'. [ 764.207064][T29477] net_ratelimit: 30 callbacks suppressed [ 764.207093][T29477] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 764.208717][T29453] ip6_vti0 speed is unknown, defaulting to 1000 [ 764.332568][T29481] Cannot find add_set index 2 as target [ 764.360499][T29481] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6342'. [ 764.434156][T29481] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.443025][T29481] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.523911][T29488] IPv6: Can't replace route, no match found [ 764.685503][T24937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 764.702832][T29493] openvswitch: netlink: IP tunnel dst address not specified [ 764.725268][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6344'. [ 764.757740][T24937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.884947][T29499] syzkaller0: entered promiscuous mode [ 764.904382][T29499] syzkaller0: entered allmulticast mode [ 764.937814][T29501] netlink: 'syz.0.6346': attribute type 1 has an invalid length. [ 764.979180][T24937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 765.006482][T24937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 765.121224][T29501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.132566][T29453] lo speed is unknown, defaulting to 1000 [ 765.180313][T29518] __nla_validate_parse: 1 callbacks suppressed [ 765.180335][T29518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6347'. [ 765.201261][T29506] bond1: (slave veth3): Enslaving as an active interface with a down link [ 765.228411][T29518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6347'. [ 765.233015][T29509] bond1: (slave veth0_to_bond): making interface the new active one [ 765.248886][T29509] veth0_to_bond: entered promiscuous mode [ 765.255201][T29509] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 765.298062][T24937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 765.310556][T24937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 765.358090][T29516] bond1: (slave veth5): Enslaving as an active interface with a down link [ 765.440535][T24937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 765.460516][T24937] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 765.847558][ T5828] Bluetooth: hci4: command tx timeout [ 766.173952][T29557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6360'. [ 766.233478][T29557] geneve2: entered promiscuous mode [ 766.270589][T24937] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 766.287209][T24937] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 766.294434][T24937] bridge0: port 2(wlan0) entered disabled state [ 766.312043][T24937] bridge_slave_0: left allmulticast mode [ 766.323986][T24937] bridge_slave_0: left promiscuous mode [ 766.340947][T24937] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.365376][T24937] veth7: left allmulticast mode [ 766.372874][T24937] veth7: left promiscuous mode [ 766.378754][T24937] bridge1: port 1(veth7) entered disabled state [ 766.414406][T29574] netlink: 'syz.4.6365': attribute type 27 has an invalid length. [ 766.613995][T24937] bond6 (unregistering): (slave gretap4): Releasing active interface [ 766.900509][T24937] bond7 (unregistering): (slave bridge5): Releasing active interface [ 767.021585][T24937] bond8 (unregistering): (slave bridge7): Removing an active aggregator [ 767.030965][T24937] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 767.040114][T24937] bridge7 (unregistering): left promiscuous mode [ 767.047383][T24937] bridge7 (unregistering): left allmulticast mode [ 767.121215][T24937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.132259][T24937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.143438][T24937] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 767.153398][T24937] bond0 (unregistering): Released all slaves [ 767.164944][T24937] bond1 (unregistering): (slave bond2): Releasing active interface [ 767.174964][T24937] bond1 (unregistering): Released all slaves [ 767.189238][T24937] bond2 (unregistering): Released all slaves [ 767.203016][T24937] bond3 (unregistering): Released all slaves [ 767.224531][T24937] bond4 (unregistering): left allmulticast mode [ 767.231975][T24937] bond4 (unregistering): Released all slaves [ 767.246721][T24937] bond5 (unregistering): Released all slaves [ 767.270327][T24937] bond6 (unregistering): Released all slaves [ 767.285094][T24937] bond7 (unregistering): Released all slaves [ 767.299320][T24937] bond8 (unregistering): Released all slaves [ 767.319394][T24937] bond9 (unregistering): Released all slaves [ 767.336861][T24937] bond10 (unregistering): Released all slaves [ 767.569137][T29453] chnl_net:caif_netlink_parms(): no params data found [ 767.660776][T29589] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6367'. [ 767.682590][T24937] 9: left promiscuous mode [ 767.715818][T29591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6368'. [ 767.725449][T29591] netlink: 'syz.2.6368': attribute type 7 has an invalid length. [ 767.734187][T29591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6368'. [ 767.931233][ T5828] Bluetooth: hci4: command tx timeout [ 768.558914][T29600] syzkaller0: entered promiscuous mode [ 768.568755][T29600] syzkaller0: entered allmulticast mode [ 768.629335][T24937] tipc: Disabling bearer [ 768.637602][T24937] tipc: Left network mode [ 768.684202][T24937] IPVS: stopping backup sync thread 27139 ... [ 768.717969][T29637] netlink: 'syz.2.6376': attribute type 13 has an invalid length. [ 768.775131][T29639] netlink: 'syz.2.6376': attribute type 13 has an invalid length. [ 768.864517][T29637] veth0_macvtap: left promiscuous mode [ 768.878710][T29637] macvtap0: entered allmulticast mode [ 768.925042][T29637] macvtap0: refused to change device tx_queue_len [ 768.975397][T29639] macvtap0: refused to change device tx_queue_len [ 769.033799][T29646] xt_bpf: check failed: parse error [ 769.125684][T29453] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.134278][T29453] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.176621][T29453] bridge_slave_0: entered allmulticast mode [ 769.190951][T29453] bridge_slave_0: entered promiscuous mode [ 769.220967][T29453] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.236754][T29453] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.246600][T29453] bridge_slave_1: entered allmulticast mode [ 769.265051][T29453] bridge_slave_1: entered promiscuous mode [ 769.402482][T29453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.428207][T29655] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 769.473703][T29651] syzkaller0: entered promiscuous mode [ 769.480573][T29667] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '/dev/net/tun' [ 769.483627][T29651] syzkaller0: entered allmulticast mode [ 769.510322][T29663] bridge_slave_0: left allmulticast mode [ 769.518903][T29663] bridge_slave_0: left promiscuous mode [ 769.535112][T29663] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.553457][T29663] bridge_slave_1: left allmulticast mode [ 769.560011][T29663] bridge_slave_1: left promiscuous mode [ 769.568017][T29663] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.593236][T29663] bond0: (slave bond_slave_0): Releasing backup interface [ 769.637200][T29663] bond0: (slave bond_slave_1): Releasing backup interface [ 769.684520][T29663] team0: Port device team_slave_0 removed [ 769.708693][T29663] team0: Port device team_slave_1 removed [ 769.718913][T29663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.729184][T29663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.740894][T29663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.751619][T29663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.762970][T29663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 769.792910][T29453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.841975][T29653] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 769.969385][T29657] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 770.006777][ T5828] Bluetooth: hci4: command tx timeout [ 770.131912][T29657] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 770.193161][T29453] team0: Port device team_slave_0 added [ 770.201942][T29657] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 770.210845][T29657] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 770.220988][T29657] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 770.253743][T29695] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 770.299685][T29690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6387'. [ 770.341809][T29453] team0: Port device team_slave_1 added [ 770.473527][T29453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.490995][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 210 seconds [ 770.502510][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 210 seconds [ 770.514242][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 210 seconds [ 770.526810][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 210 seconds [ 770.538120][T29453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.567664][T29453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.597748][T29453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.614381][T29453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.643909][T29453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.807739][T29716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6393'. [ 770.918420][T29718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6394'. [ 770.944669][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6393'. [ 770.958824][T29711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6393'. [ 770.978626][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6393'. [ 770.989323][T29724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6395'. [ 771.006148][T29711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6393'. [ 771.016173][T29711] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6393'. [ 771.043939][T29721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6395'. [ 771.062024][T29453] hsr_slave_0: entered promiscuous mode [ 771.076571][T29453] hsr_slave_1: entered promiscuous mode [ 771.083067][T29453] debugfs: 'hsr0' already exists in 'hsr' [ 771.093954][T29453] Cannot create hsr debugfs directory [ 771.784787][T24937] hsr_slave_0: left promiscuous mode [ 771.805260][T24937] veth0_macvtap: left allmulticast mode [ 771.944980][T24937] pimreg3 (unregistering): left allmulticast mode [ 772.086427][ T5828] Bluetooth: hci4: command tx timeout [ 772.522862][T29756] tipc: Enabling of bearer rejected, failed to enable media [ 772.556247][ T7887] lec:lec_start_xmit: lec0:No lecd attached [ 772.672889][T29772] wg2: entered promiscuous mode [ 772.684857][T29772] wg2: entered allmulticast mode [ 772.710746][T29771] vcan1: entered promiscuous mode [ 772.716063][T29771] vcan1: entered allmulticast mode [ 772.878781][T29787] IPVS: set_ctl: invalid protocol: 33 172.20.20.65:20004 [ 773.312166][T29801] validate_nla: 1 callbacks suppressed [ 773.312189][T29801] netlink: 'syz.1.6414': attribute type 16 has an invalid length. [ 773.334876][T29801] netlink: 'syz.1.6414': attribute type 17 has an invalid length. [ 773.602473][T29814] siw: device registration error -23 [ 773.742160][T29453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.774331][T29453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 773.793083][T29828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.804009][T29827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.819867][T29453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 773.836804][T29453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 773.865477][T29827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.896393][T29830] netlink: 'syz.1.6422': attribute type 7 has an invalid length. [ 773.948979][T29828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.966772][T22348] lo speed is unknown, defaulting to 1000 [ 774.031176][T24933] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.062523][T29835] openvswitch: netlink: IP tunnel dst address not specified [ 774.070126][T24933] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.096648][T24933] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.111874][T24933] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 774.302797][T29855] x_tables: duplicate underflow at hook 1 [ 774.313484][T29453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.393032][T29453] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.449650][T24926] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.456904][T24926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.552605][T24937] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.559957][T24937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.145649][T29899] syzkaller0: entered promiscuous mode [ 775.166934][T29899] syzkaller0: entered allmulticast mode [ 775.244198][T29905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 775.354072][T29913] Cannot find map_set index 65533 as target [ 775.423933][T29907] ip6_vti0 speed is unknown, defaulting to 1000 [ 775.482949][T29453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.597821][T29453] veth0_vlan: entered promiscuous mode [ 775.661635][T29925] ip6gretap0: mtu less than device minimum [ 775.681839][T29453] veth1_vlan: entered promiscuous mode [ 775.807032][T29453] veth0_macvtap: entered promiscuous mode [ 775.830849][T29453] veth1_macvtap: entered promiscuous mode [ 775.931505][T29937] netlink: 'syz.4.6446': attribute type 23 has an invalid length. [ 776.031156][T29907] lo speed is unknown, defaulting to 1000 [ 776.044407][T29453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.075326][T29453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.165292][ T9698] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.280264][ T9698] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.293095][T29951] __nla_validate_parse: 13 callbacks suppressed [ 776.293117][T29951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6448'. [ 776.299504][ T9698] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.299547][ T9698] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.407922][T29955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6450'. [ 776.638606][T29964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6453'. [ 776.673437][T29964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6453'. [ 776.719429][T29972] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6454'. [ 776.744617][T29967] bridge0: port 3(syz_tun) entered blocking state [ 776.759955][T29967] bridge0: port 3(syz_tun) entered disabled state [ 776.770726][T29967] syz_tun: entered allmulticast mode [ 776.813544][T29967] syz_tun: entered promiscuous mode [ 776.829198][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.848520][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.927790][ T9695] veth0_to_bond: left promiscuous mode [ 776.993998][T29978] netlink: 83 bytes leftover after parsing attributes in process `syz.0.6455'. [ 777.027180][T24937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.035053][T24937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.222214][T29984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6457'. [ 777.263566][T29990] netlink: 'syz.3.6332': attribute type 3 has an invalid length. [ 777.272498][T29990] netlink: 766 bytes leftover after parsing attributes in process `syz.3.6332'. [ 777.300064][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6458'. [ 777.498961][T29999] netlink: 'syz.4.6460': attribute type 27 has an invalid length. [ 777.711154][T30013] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 777.861179][T30017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6461'. [ 778.087141][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 778.095236][ C1] lec:lec_tx_timeout: lec0 [ 778.232316][T30033] netlink: 'syz.2.6467': attribute type 1 has an invalid length. [ 778.308804][T30034] erspan1: entered allmulticast mode [ 778.510825][T30052] vlan2: entered allmulticast mode [ 778.518710][T30052] erspan0: entered allmulticast mode [ 778.524401][T30052] bridge0: port 3(vlan2) entered blocking state [ 778.545897][T30052] bridge0: port 3(vlan2) entered disabled state [ 778.555527][T30052] vlan2: entered promiscuous mode [ 778.565520][T30052] erspan0: entered promiscuous mode [ 778.713421][T30063] netem: change failed [ 778.770551][T30057] veth0_to_bond: entered allmulticast mode [ 778.817305][T24926] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 778.873983][T24926] bond1: now running without any active interface! [ 778.939969][T30077] syz.4.6478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 778.999657][T30077] CPU: 0 UID: 0 PID: 30077 Comm: syz.4.6478 Not tainted syzkaller #0 PREEMPT(full) [ 778.999686][T30077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.999698][T30077] Call Trace: [ 778.999705][T30077] [ 778.999713][T30077] dump_stack_lvl+0xe8/0x150 [ 778.999744][T30077] warn_alloc+0x249/0x340 [ 778.999771][T30077] ? stack_trace_save+0xa9/0x100 [ 778.999800][T30077] ? __pfx_warn_alloc+0x10/0x10 [ 778.999832][T30077] ? kasan_save_track+0x4f/0x80 [ 778.999855][T30077] ? kasan_save_track+0x3e/0x80 [ 778.999875][T30077] ? __kasan_kmalloc+0x93/0xb0 [ 778.999907][T30077] ? __kmalloc_cache_noprof+0x31c/0x660 [ 778.999929][T30077] ? xskq_create+0x56/0x170 [ 778.999948][T30077] ? xsk_setsockopt+0x54c/0x990 [ 778.999965][T30077] ? do_sock_setsockopt+0x17c/0x1b0 [ 778.999986][T30077] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 779.000007][T30077] ? do_syscall_64+0x14d/0xf80 [ 779.000035][T30077] __vmalloc_node_range_noprof+0x132/0x1730 [ 779.000095][T30077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 779.000126][T30077] ? __kasan_kmalloc+0x93/0xb0 [ 779.000156][T30077] vmalloc_user_noprof+0xad/0xe0 [ 779.000182][T30077] ? xskq_create+0xbf/0x170 [ 779.000215][T30077] xskq_create+0xbf/0x170 [ 779.000239][T30077] xsk_init_queue+0xad/0x110 [ 779.000262][T30077] xsk_setsockopt+0x54c/0x990 [ 779.000285][T30077] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.000306][T30077] ? __pfx_aa_sk_perm+0x10/0x10 [ 779.000336][T30077] ? aa_sock_opt_perm+0xff/0x1a0 [ 779.000366][T30077] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 779.000392][T30077] ? __pfx_xsk_setsockopt+0x10/0x10 [ 779.000414][T30077] do_sock_setsockopt+0x17c/0x1b0 [ 779.000443][T30077] __x64_sys_setsockopt+0x13d/0x1b0 [ 779.000473][T30077] do_syscall_64+0x14d/0xf80 [ 779.000497][T30077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.000516][T30077] ? trace_irq_disable+0x37/0x100 [ 779.000536][T30077] ? clear_bhb_loop+0x40/0x90 [ 779.000560][T30077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.000580][T30077] RIP: 0033:0x7fcebe79c629 [ 779.000598][T30077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.000615][T30077] RSP: 002b:00007fcebf5c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 779.000638][T30077] RAX: ffffffffffffffda RBX: 00007fcebea15fa0 RCX: 00007fcebe79c629 [ 779.000652][T30077] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 779.000665][T30077] RBP: 00007fcebe832b39 R08: 0000000000000004 R09: 0000000000000000 [ 779.000689][T30077] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.000702][T30077] R13: 00007fcebea16038 R14: 00007fcebea15fa0 R15: 00007ffcdc454588 [ 779.000736][T30077] [ 779.001604][T30077] Mem-Info: [ 779.148232][T30073] xfrm1: entered promiscuous mode [ 779.217904][T30077] active_anon:6554 inactive_anon:0 isolated_anon:0 [ 779.217904][T30077] active_file:3084 inactive_file:40492 isolated_file:0 [ 779.217904][T30077] unevictable:768 dirty:106 writeback:0 [ 779.217904][T30077] slab_reclaimable:13263 slab_unreclaimable:136977 [ 779.217904][T30077] mapped:29588 shmem:1423 pagetables:3625 [ 779.217904][T30077] sec_pagetables:0 bounce:0 [ 779.217904][T30077] kernel_misc_reclaimable:0 [ 779.217904][T30077] free:1279133 free_pcp:8352 free_cma:0 [ 779.377416][T30077] Node 0 active_anon:26216kB inactive_anon:0kB active_file:12336kB inactive_file:161764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118252kB dirty:424kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16764kB pagetables:14452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.426759][T30073] xfrm1: entered allmulticast mode [ 779.492079][T30073] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 779.532615][T30077] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 779.558342][T30073] team1: entered promiscuous mode [ 779.568784][T30073] team1: entered allmulticast mode [ 779.603723][T30077] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.677958][T30098] netlink: 'syz.3.6484': attribute type 1 has an invalid length. [ 779.686793][T30097] netlink: 'syz.3.6484': attribute type 1 has an invalid length. [ 779.694945][T30077] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 779.711383][T30077] Node 0 DMA32 free:1159260kB boost:0kB min:34204kB low:42752kB high:51300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25616kB inactive_anon:0kB active_file:12336kB inactive_file:161764kB unevictable:1536kB writepending:424kB zspages:0kB present:3129332kB managed:2554016kB mlocked:0kB bounce:0kB free_pcp:35780kB local_pcp:13564kB free_cma:0kB [ 779.782814][T30077] lowmem_reserve[]: 0 0 0 0 0 [ 779.795394][T30101] netlink: 'syz.0.6485': attribute type 1 has an invalid length. [ 779.795798][T30077] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:924kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 779.868837][T30077] lowmem_reserve[]: 0 0 0 0 0 [ 779.873635][T30077] Node 1 Normal free:3940328kB boost:0kB min:55684kB low:69604kB high:83524kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 779.912062][T30098] veth3: entered promiscuous mode [ 779.923319][T30098] bond0: (slave veth3): Enslaving as an active interface with an up link [ 779.934781][T30077] lowmem_reserve[]: 0 0 0 0 0 [ 779.943967][T30077] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 779.980806][T30102] veth5: entered promiscuous mode [ 779.986786][T30077] Node 0 DMA32: 8461*4kB (UME) 6575*8kB (UME) 3547*16kB (UME) 1141*32kB (UME) 345*64kB (UME) 453*128kB (UME) 450*256kB (UME) 345*512kB (UME) 173*1024kB (UME) 31*2048kB (UM) 90*4096kB (M) = 1160892kB [ 779.986993][T30077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 779.987120][T30077] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 11*16kB (UME) 8*32kB (UME) 6*64kB (UM) 7*128kB (UM) 7*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 959*4096kB (UM) = 3940328kB [ 780.063957][T30102] bond0: (slave veth5): Enslaving as an active interface with an up link [ 780.095157][T30118] netlink: 'syz.1.6488': attribute type 1 has an invalid length. [ 780.126197][T30077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.147604][T30077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.162381][T30077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 780.177115][T30077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 780.180624][T30118] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 780.186921][T30077] 44945 total pagecache pages [ 780.186938][T30077] 0 pages in swap cache [ 780.186947][T30077] Free swap = 124996kB [ 780.186956][T30077] Total swap = 124996kB [ 780.186966][T30077] 2097051 pages RAM [ 780.186975][T30077] 0 pages HighMem/MovableOnly [ 780.186984][T30077] 426701 pages reserved [ 780.186993][T30077] 0 pages cma reserved [ 780.480443][T30138] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 780.487536][T30138] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 780.541273][T30143] netlink: 'syz.4.6496': attribute type 1 has an invalid length. [ 780.627799][T30143] bond4: entered promiscuous mode [ 780.647788][T30143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 780.721940][T30143] bond4: (slave bridge2): making interface the new active one [ 780.747002][T30143] bridge2: entered promiscuous mode [ 780.770657][T30143] bridge2: left promiscuous mode [ 780.864053][T30164] syz_tun: entered allmulticast mode [ 780.957155][T30153] syz_tun: left allmulticast mode [ 781.300277][T30192] __nla_validate_parse: 18 callbacks suppressed [ 781.300297][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6511'. [ 781.318848][T30192] netlink: 'syz.2.6511': attribute type 21 has an invalid length. [ 781.333311][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6511'. [ 781.433344][T30201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6516'. [ 781.460238][T30203] netlink: 'syz.0.6516': attribute type 21 has an invalid length. [ 781.746340][T22346] IPVS: starting estimator thread 0... [ 781.763176][T30224] netlink: 'syz.1.6522': attribute type 5 has an invalid length. [ 781.823684][T30230] IPVS: sh: FWM 3 0x00000003 - no destination available [ 781.838144][T30222] IPVS: using max 30 ests per chain, 72000 per kthread [ 782.433391][T30257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6529'. [ 782.856529][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 782.888610][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 782.899863][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 782.936757][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 782.979864][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 782.996443][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 783.036897][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 783.069497][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 783.094022][T30274] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 783.829435][T30302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6544'. [ 783.941958][T30302] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 783.962458][T30302] bond7 (unregistering): Released all slaves [ 784.178093][T30330] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6552'. [ 784.183839][T30318] bridge2: entered promiscuous mode [ 784.187616][T30330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6552'. [ 784.208003][T30318] bridge2: entered allmulticast mode [ 784.503593][T30343] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 784.571493][T30350] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6558'. [ 784.609763][T30346] netlink: 'syz.0.6557': attribute type 30 has an invalid length. [ 784.618054][T30346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.785140][T30364] Bluetooth: MGMT ver 1.23 [ 784.795552][T30364] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 785.082348][T30374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6565'. [ 785.247433][T30383] netlink: 'syz.1.6569': attribute type 10 has an invalid length. [ 785.273983][T30383] bridge_slave_1: left allmulticast mode [ 785.295578][T30383] bridge_slave_1: left promiscuous mode [ 785.332958][T30383] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.388820][T30383] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 785.671116][T30401] syzkaller0: entered promiscuous mode [ 785.679033][T30401] syzkaller0: entered allmulticast mode [ 785.991314][ T9695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.006792][T30416] sit0: entered promiscuous mode [ 786.039931][T30416] netlink: 'syz.2.6578': attribute type 1 has an invalid length. [ 786.056511][T30416] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6578'. [ 786.274548][T30436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.281984][T30436] IPv6: NLM_F_CREATE should be set when creating new route [ 786.304216][T30438] tipc: Enabled bearer , priority 0 [ 786.312169][T30438] syzkaller0: entered promiscuous mode [ 786.318279][T30438] syzkaller0: entered allmulticast mode [ 786.344909][T30438] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 786.420415][T30438] tipc: Resetting bearer [ 786.473485][T30435] tipc: Resetting bearer [ 786.523244][T30435] tipc: Disabling bearer [ 786.651678][T30458] netlink: 'syz.1.6590': attribute type 1 has an invalid length. [ 786.668918][T30458] netlink: 'syz.1.6590': attribute type 2 has an invalid length. [ 786.693711][T30454] bond0: entered allmulticast mode [ 786.705626][T30454] bond_slave_0: entered allmulticast mode [ 786.714130][T30458] netlink: 'syz.1.6590': attribute type 1 has an invalid length. [ 786.724187][T30454] bond_slave_1: entered allmulticast mode [ 786.747704][T30449] ip6_vti0 speed is unknown, defaulting to 1000 [ 786.766705][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6591'. [ 786.823699][T30468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6591'. [ 786.892366][T30463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.929433][T30463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.007328][T30477] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6595'. [ 787.019616][T30477] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6595'. [ 787.041985][T30477] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6595'. [ 787.060220][T30482] x_tables: duplicate underflow at hook 2 [ 787.097604][T30480] netlink: 'syz.3.6596': attribute type 1 has an invalid length. [ 787.148700][T30487] netlink: 'syz.4.6598': attribute type 83 has an invalid length. [ 787.178122][T30489] netlink: 'syz.4.6598': attribute type 83 has an invalid length. [ 787.341972][T30449] lo speed is unknown, defaulting to 1000 [ 787.678427][T30503] syzkaller0: entered promiscuous mode [ 787.683964][T30503] syzkaller0: entered allmulticast mode [ 788.217584][T30529] netlink: 'syz.2.6611': attribute type 26 has an invalid length. [ 788.225481][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6611'. [ 788.285062][T30536] netlink: 'syz.0.6613': attribute type 11 has an invalid length. [ 790.211813][T30529] netlink: 'syz.2.6611': attribute type 26 has an invalid length. [ 790.216592][T30543] tipc: Enabling of bearer rejected, failed to enable media [ 790.220079][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6611'. [ 790.238468][T30539] tipc: Enabling of bearer rejected, failed to enable media [ 790.477025][T30574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6620'. [ 790.478902][T30573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6621'. [ 790.498621][T30567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6618'. [ 790.673973][T30586] netlink: 'syz.2.6622': attribute type 3 has an invalid length. [ 790.697741][T30580] tipc: Enabling of bearer rejected, failed to enable media [ 790.990866][T30596] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 791.234181][T30610] syzkaller0: entered promiscuous mode [ 791.246061][T30610] syzkaller0: entered allmulticast mode [ 791.276664][T30610] tipc: Started in network mode [ 791.282808][T30610] tipc: Node identity 3e72f2bd4e0a, cluster identity 4711 [ 791.304432][T30610] tipc: Enabled bearer , priority 0 [ 791.337932][T30609] tipc: Resetting bearer [ 791.379612][T30620] net_ratelimit: 5319 callbacks suppressed [ 791.379633][T30620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.397139][T30609] tipc: Disabling bearer [ 791.595323][T30628] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 791.689670][T30637] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 791.800323][T30645] __nla_validate_parse: 3 callbacks suppressed [ 791.800345][T30645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6643'. [ 791.949364][T30649] netlink: 'syz.4.6644': attribute type 1 has an invalid length. [ 792.233844][T30663] syzkaller0: entered promiscuous mode [ 792.253922][T30663] syzkaller0: entered allmulticast mode [ 792.280148][T30663] tipc: Enabled bearer , priority 0 [ 792.332593][T30662] tipc: Resetting bearer [ 792.339661][T30659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6647'. [ 792.427930][T30662] tipc: Disabling bearer [ 792.880060][T30682] xt_l2tp: v2 doesn't support IP mode [ 792.900638][T30678] syzkaller0: entered promiscuous mode [ 792.908698][T30682] xt_l2tp: v2 doesn't support IP mode [ 792.916860][T30678] syzkaller0: entered allmulticast mode [ 793.136976][T30695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6657'. [ 793.223576][T30704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6662'. [ 793.232661][T30704] tc_dump_action: action bad kind [ 793.241311][T30704] netlink: 'syz.3.6662': attribute type 3 has an invalid length. [ 793.241381][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6663'. [ 793.423270][T30716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.509275][T30720] syzkaller0: entered promiscuous mode [ 793.514769][T30720] syzkaller0: entered allmulticast mode [ 793.568287][T30728] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 793.594448][T30730] netlink: 401 bytes leftover after parsing attributes in process `syz.3.6670'. [ 793.613562][T30728] bond2 (unregistering): Released all slaves [ 795.517017][T30744] netlink: 'syz.3.6673': attribute type 29 has an invalid length. [ 795.550591][T30743] ip6_vti0 speed is unknown, defaulting to 1000 [ 795.733902][T30750] tipc: Enabling of bearer rejected, failed to enable media [ 795.757955][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6674'. [ 795.780275][T30748] netlink: 'syz.3.6674': attribute type 11 has an invalid length. [ 795.799208][T30748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6674'. [ 795.860057][T30748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6674'. [ 795.888711][T30748] netlink: 'syz.3.6674': attribute type 11 has an invalid length. [ 795.908084][T30748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6674'. [ 795.921367][T25257] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.943050][T25257] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.957075][T25257] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.976330][T25257] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 796.003349][T30743] lo speed is unknown, defaulting to 1000 [ 796.332368][T30761] syz_tun: entered allmulticast mode [ 796.358021][T30760] syz_tun: left allmulticast mode [ 796.377170][T30776] syzkaller1: entered allmulticast mode [ 796.425055][T30770] netlink: 'syz.2.6681': attribute type 13 has an invalid length. [ 797.084186][T30804] netlink: 'syz.4.6687': attribute type 21 has an invalid length. [ 797.098719][T30804] __nla_validate_parse: 1 callbacks suppressed [ 797.098741][T30804] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6687'. [ 797.224374][T30808] syz_tun: left allmulticast mode [ 797.234904][T30808] syz_tun: left promiscuous mode [ 797.241247][T30808] bridge0: port 3(syz_tun) entered disabled state [ 797.283100][T30808] bridge_slave_0: left allmulticast mode [ 797.297245][T30808] bridge_slave_0: left promiscuous mode [ 797.308131][T30808] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.333876][T30808] bond0: (slave bridge_slave_1): Releasing backup interface [ 797.376484][T30808] bond0: (slave bond_slave_0): Releasing backup interface [ 797.409912][T30808] bond0: (slave bond_slave_1): Releasing backup interface [ 797.489055][T30808] team0: Port device team_slave_0 removed [ 797.548911][T30808] team0: Port device team_slave_1 removed [ 797.707529][T30808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.769002][T30808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.829812][T30808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.926163][T30808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.125183][T30808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 799.020417][T30894] netlink: 'syz.3.6700': attribute type 6 has an invalid length. [ 799.054436][T30894] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 799.062902][T30894] netlink: 'syz.3.6700': attribute type 2 has an invalid length. [ 799.072579][T30894] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 799.081139][T30894] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 799.097799][T30894] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 799.106445][T30903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 799.120633][T30902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6708'. [ 799.167673][T30905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6709'. [ 799.187516][T30905] vxcan0: entered allmulticast mode [ 799.403209][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6711'. [ 799.406862][T30919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6712'. [ 799.431144][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6711'. [ 799.456262][T30917] gretap0: entered promiscuous mode [ 799.468649][T30917] gretap0: left promiscuous mode [ 799.504764][T30925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6714'. [ 799.633104][T30931] netlink: 'syz.3.6716': attribute type 11 has an invalid length. [ 799.657527][T30931] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.6716'. [ 799.795135][T30935] xfrm1: entered allmulticast mode [ 799.845323][T30940] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 799.871744][T30943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6722'. [ 800.018395][T30950] sctp: [Deprecated]: syz.0.6723 (pid 30950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.018395][T30950] Use struct sctp_sack_info instead [ 800.051747][T30950] sctp: [Deprecated]: syz.0.6723 (pid 30950) Use of int in maxseg socket option. [ 800.051747][T30950] Use struct sctp_assoc_value instead [ 800.530364][T30979] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 800.568468][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 240 seconds [ 800.579350][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 240 seconds [ 800.590796][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 240 seconds [ 800.602244][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 240 seconds [ 800.657424][T30979] syzkaller0: entered promiscuous mode [ 800.670114][T30979] syzkaller0: entered allmulticast mode [ 800.841816][T30988] validate_nla: 2 callbacks suppressed [ 800.841837][T30988] netlink: 'syz.3.6736': attribute type 1 has an invalid length. [ 800.907770][T30995] tipc: Enabling of bearer rejected, failed to enable media [ 800.919090][T30995] netlink: 'syz.4.6738': attribute type 1 has an invalid length. [ 800.930101][T30995] netlink: 'syz.4.6738': attribute type 2 has an invalid length. [ 801.057112][T30994] bond4: option all_slaves_active: invalid value (222) [ 801.092837][T30994] bond4 (unregistering): Released all slaves [ 801.409930][T31017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.830130][T31042] vlan2: entered allmulticast mode [ 801.835335][T31042] ip6gretap0: entered allmulticast mode [ 801.864590][T31043] netlink: 'syz.4.6749': attribute type 2 has an invalid length. [ 801.879184][T31042] netlink: 'syz.0.6748': attribute type 4 has an invalid length. [ 801.963757][T31047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.201498][T31062] sctp: [Deprecated]: syz.4.6753 (pid 31062) Use of int in maxseg socket option. [ 802.201498][T31062] Use struct sctp_assoc_value instead [ 802.262269][T31047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.512604][T31047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.571541][T31077] netlink: 'syz.4.6758': attribute type 10 has an invalid length. [ 802.589480][T31073] __nla_validate_parse: 12 callbacks suppressed [ 802.589502][T31073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6757'. [ 802.627849][T31077] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6758'. [ 802.745589][T31047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.846367][T31081] gtp0: entered promiscuous mode [ 802.852186][T31081] gtp0: entered allmulticast mode [ 802.954394][T31097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6763'. [ 802.994446][T31097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6763'. [ 803.211677][T25257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.255193][T25257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.337877][T31110] syzkaller0: entered promiscuous mode [ 803.370849][T31110] syzkaller0: entered allmulticast mode [ 803.594606][T24911] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.655273][T24930] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.859294][T31138] syzkaller0: entered promiscuous mode [ 803.870500][T31138] syzkaller0: entered allmulticast mode [ 803.987949][T31138] tipc: Enabled bearer , priority 0 [ 804.012368][T31134] tipc: Resetting bearer [ 804.100100][T31134] tipc: Disabling bearer [ 804.168769][T31157] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6777'. [ 804.189315][T31159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6778'. [ 804.204954][T31151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6776'. [ 804.222220][T31159] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 804.228254][T31157] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6777'. [ 804.671288][T31184] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 804.731989][T31188] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.6785'. [ 804.745325][T31188] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 804.962748][T31200] syzkaller0: entered promiscuous mode [ 804.969339][T31200] syzkaller0: entered allmulticast mode [ 804.981580][T31200] tipc: Enabled bearer , priority 0 [ 804.996396][T31199] tipc: Resetting bearer [ 805.043451][T31199] tipc: Disabling bearer [ 805.072338][T31207] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6791'. [ 805.251946][T22348] IPVS: starting estimator thread 0... [ 805.257855][T31216] IPVS: ip_vs_edit_dest(): server weight less than zero [ 805.355871][T31220] IPVS: using max 25 ests per chain, 60000 per kthread [ 805.491407][T31237] netlink: 'syz.4.6802': attribute type 4 has an invalid length. [ 805.535130][T31237] `: renamed from bond0 (while UP) [ 805.740187][T31247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 805.801983][T31255] netlink: 'syz.0.6809': attribute type 7 has an invalid length. [ 805.813759][T31255] netlink: 'syz.0.6809': attribute type 8 has an invalid length. [ 805.841730][T31255] netlink: 'syz.0.6809': attribute type 7 has an invalid length. [ 805.856570][T31255] netlink: 'syz.0.6809': attribute type 8 has an invalid length. [ 806.031404][T31270] batadv0: entered allmulticast mode [ 806.290315][T31288] netlink: 'syz.3.6818': attribute type 30 has an invalid length. [ 806.490680][T31301] netlink: 'syz.4.6822': attribute type 1 has an invalid length. [ 806.607525][T31305] netlink: 'syz.3.6824': attribute type 3 has an invalid length. [ 807.275284][T31338] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 807.661300][T31349] __nla_validate_parse: 15 callbacks suppressed [ 807.661322][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6837'. [ 807.684299][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6838'. [ 807.859386][T31360] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6837'. [ 807.876404][T31360] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 808.895403][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 809.685623][T31362] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 809.936368][T31371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.958900][T31371] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.990989][T31385] netlink: 'syz.2.6845': attribute type 1 has an invalid length. [ 810.018857][T31385] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6845'. [ 810.056246][T31385] netlink: 'syz.2.6845': attribute type 1 has an invalid length. [ 810.064384][T31385] netlink: 'syz.2.6845': attribute type 8 has an invalid length. [ 810.108206][T31385] netlink: 606 bytes leftover after parsing attributes in process `syz.2.6845'. [ 810.139722][T31371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.156311][T31371] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.211945][T31394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6848'. [ 810.250986][T31387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6846'. [ 810.260635][T31396] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 810.260662][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6849'. [ 810.298804][T31371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.317721][T31371] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.422812][T31391] team0: Port device team_slave_0 removed [ 810.495579][T31371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.509660][T31371] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.744762][T31413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.783371][T24921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.812899][T24921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.832859][T24921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.841786][T24921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.851797][T31415] nbd3: detected capacity change from 0 to 128 [ 810.862960][ T5828] block nbd3: Receive control failed (result -104) [ 810.913585][T24921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.936738][T24921] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.973420][T24921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.982935][T24921] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.141047][T31431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 811.148563][T31431] IPv6: NLM_F_CREATE should be set when creating new route [ 811.567651][T31455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6866'. [ 811.668895][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6867'. [ 812.222921][T31496] syzkaller1: entered promiscuous mode [ 812.229113][T31496] syzkaller1: entered allmulticast mode [ 812.244020][T31497] tipc: Started in network mode [ 812.251943][T31497] tipc: Node identity 84e, cluster identity 4711 [ 812.260202][T31497] tipc: Node number set to 2126 [ 812.283728][T31497] sctp: [Deprecated]: syz.3.6875 (pid 31497) Use of int in max_burst socket option. [ 812.283728][T31497] Use struct sctp_assoc_value instead [ 812.322751][T31499] syzkaller1: entered promiscuous mode [ 812.330516][T31499] syzkaller1: entered allmulticast mode [ 812.427598][T31506] netlink: 'syz.3.6877': attribute type 16 has an invalid length. [ 812.444690][T31506] netlink: 'syz.3.6877': attribute type 17 has an invalid length. [ 812.559806][T31506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.721914][T31517] __nla_validate_parse: 5 callbacks suppressed [ 812.721934][T31517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6880'. [ 812.741790][T31522] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 812.774553][T31522] bond4: (slave lo): Enslaving as an active interface with an up link [ 812.802119][T31522] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 812.846484][T31523] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 812.951207][T31530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6883'. [ 812.961890][T31530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 813.050727][T31532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6884'. [ 813.093079][T31532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6884'. [ 813.242104][T31543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6887'. [ 813.278757][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6887'. [ 813.298563][T31548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.407014][T31551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 813.424547][T31551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6891'. [ 813.472545][T31551] netlink: 'syz.2.6891': attribute type 1 has an invalid length. [ 813.614660][T31560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6894'. [ 813.844360][T31572] veth7: entered promiscuous mode [ 813.934739][T31586] IPVS: persistence engine module ip_vs_pe_ not found [ 813.979387][T31594] netlink: 'syz.3.6904': attribute type 1 has an invalid length. [ 814.050263][T31599] netlink: 'syz.4.6905': attribute type 39 has an invalid length. [ 814.085737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 814.093927][ C1] lec:lec_tx_timeout: lec0 [ 814.238763][T31613] Cannot find del_set index 0 as target [ 814.354042][T31620] netlink: 'syz.0.6913': attribute type 1 has an invalid length. [ 814.537724][T31635] syz_tun: entered allmulticast mode [ 814.546328][T31631] syz_tun: left allmulticast mode [ 815.129712][T31667] tipc: Failed to remove unknown binding: 66,0,0/0:1188209137/1188209138 [ 815.153426][T31667] tipc: Failed to remove unknown binding: 66,0,0/0:1188209137/1188209138 [ 815.187011][T31660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 815.202990][T31667] netlink: 'syz.0.6925': attribute type 1 has an invalid length. [ 815.239053][T31668] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 815.279661][T31682] bond7 (unregistering): (slave dummy0): Releasing backup interface [ 815.323316][T31682] bond7 (unregistering): Released all slaves [ 815.451192][T31667] bond4: entered promiscuous mode [ 815.473518][T31667] bond4: entered allmulticast mode [ 815.483683][T31667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.542590][T31684] macvlan2: entered promiscuous mode [ 815.580440][T31684] macvlan2: entered allmulticast mode [ 815.589489][T31684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 815.990654][T31730] syzkaller0: entered promiscuous mode [ 816.006720][T31730] syzkaller0: entered allmulticast mode [ 816.092454][T31734] : entered promiscuous mode [ 818.036343][T31687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.222730][T31744] __nla_validate_parse: 18 callbacks suppressed [ 818.222751][T31744] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6938'. [ 818.279620][T31747] syzkaller1: entered promiscuous mode [ 818.287777][T31747] syzkaller1: entered allmulticast mode [ 818.329836][T31755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6940'. [ 818.864714][T31781] delete_channel: no stack [ 819.038026][T31739] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 819.044364][T31787] syzkaller0: entered promiscuous mode [ 819.074896][T31787] syzkaller0: entered allmulticast mode [ 819.152629][T31792] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6952'. [ 819.254975][T31794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6950'. [ 819.913788][T31844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6968'. [ 819.971003][T31844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6968'. [ 820.111568][T31854] netlink: 'syz.1.6971': attribute type 1 has an invalid length. [ 820.144571][T31854] netlink: 'syz.1.6971': attribute type 4 has an invalid length. [ 820.156869][T31854] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.6971'. [ 820.168049][T31853] syzkaller0: entered promiscuous mode [ 820.173941][T31853] syzkaller0: entered allmulticast mode [ 820.247516][ T5828] Bluetooth: hci1: command 0x0401 tx timeout [ 820.465274][T31874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6977'. [ 820.475592][T31874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6977'. [ 820.487722][T31874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6977'. [ 820.732258][T31890] x_tables: unsorted underflow at hook 2 [ 821.226916][T31915] netlink: 'syz.4.6989': attribute type 26 has an invalid length. [ 821.527122][T31923] netlink: 'syz.3.6993': attribute type 13 has an invalid length. [ 821.549785][T31923] lec:lec_start_xmit: lec0:No lecd attached [ 821.572648][T31933] netlink: 'syz.0.6997': attribute type 1 has an invalid length. [ 821.576857][T31932] syzkaller0: entered promiscuous mode [ 821.586543][T31932] syzkaller0: entered allmulticast mode [ 821.739067][T31944] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 821.747993][T31953] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 822.486521][T31976] syzkaller0: entered promiscuous mode [ 822.492260][T31976] syzkaller0: entered allmulticast mode [ 822.506359][T24930] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.580805][T24930] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.590015][T24930] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.627473][T24930] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.783936][T31998] gretap0: entered promiscuous mode [ 822.810081][T31998] gretap0: left promiscuous mode [ 823.395017][T32044] netlink: 'syz.0.7025': attribute type 10 has an invalid length. [ 823.433144][T32044] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 823.618460][T32060] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 823.697391][T32071] netlink: 'syz.2.7033': attribute type 1 has an invalid length. [ 823.705201][T32071] __nla_validate_parse: 19 callbacks suppressed [ 823.705221][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7033'. [ 823.791257][T32071] pimreg: entered allmulticast mode [ 823.968770][T32077] ip6_vti0 speed is unknown, defaulting to 1000 [ 824.206436][T32096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7040'. [ 824.769752][T32077] lo speed is unknown, defaulting to 1000 [ 825.038854][T32112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7046'. [ 825.084956][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7047'. [ 826.719799][T32150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.860059][T32165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7061'. [ 826.974232][T32169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7063'. [ 826.990802][T32169] veth0: Caught tx_queue_len zero misconfig [ 827.000698][T32170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7063'. [ 827.045752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 827.053812][ C1] lec:lec_tx_timeout: lec0 [ 827.061002][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 827.073668][T32174] netlink: 'syz.1.7063': attribute type 3 has an invalid length. [ 827.101864][T32178] geneve2: entered promiscuous mode [ 827.483033][T32207] netlink: 'syz.3.7076': attribute type 4 has an invalid length. [ 827.501662][T32207] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7076'. [ 827.537705][T32208] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7075'. [ 827.558086][T32210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7077'. [ 827.596100][T32210] syzkaller1: entered promiscuous mode [ 827.611553][T32210] syzkaller1: entered allmulticast mode [ 828.392167][T32270] netlink: 'syz.3.7095': attribute type 1 has an invalid length. [ 828.396543][T32266] netlink: 'syz.4.7093': attribute type 4 has an invalid length. [ 828.432238][ T63] tipc: Subscription rejected, illegal request [ 828.591936][T32278] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 828.609584][T32278] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 828.623218][T32278] team0: Failed to send options change via netlink (err -105) [ 828.641027][T32278] team0: Port device batadv1 added [ 828.864412][T32297] __nla_validate_parse: 10 callbacks suppressed [ 828.864435][T32297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7104'. [ 828.899825][T32297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7104'. [ 828.931977][T32299] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7105'. [ 828.954721][T32297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7104'. [ 829.094154][T32307] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7109'. [ 829.186134][T32307] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.7109'. [ 829.246094][T32311] syz_tun: entered allmulticast mode [ 829.264217][T32310] syz_tun: left allmulticast mode [ 829.463225][T32323] syzkaller0: entered promiscuous mode [ 829.468954][T32323] syzkaller0: entered allmulticast mode [ 829.558965][T32326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7116'. [ 829.770957][T32331] syzkaller0: entered promiscuous mode [ 829.777413][T32331] syzkaller0: entered allmulticast mode [ 830.654169][ T5165] block nbd2: Possible stuck request ffff888026430000: control (read@0,1024B). Runtime 270 seconds [ 830.665395][ T5165] block nbd2: Possible stuck request ffff888026430200: control (read@1024,1024B). Runtime 270 seconds [ 830.677407][ T5165] block nbd2: Possible stuck request ffff888026430400: control (read@2048,1024B). Runtime 270 seconds [ 830.688518][ T5165] block nbd2: Possible stuck request ffff888026430600: control (read@3072,1024B). Runtime 270 seconds [ 832.086234][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 832.094408][ C1] lec:lec_tx_timeout: lec0 [ 832.294507][T32373] sch_fq: defrate 0 ignored. [ 832.332521][T32380] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7131'. [ 832.351884][T32377] netlink: 'syz.3.7128': attribute type 4 has an invalid length. [ 832.364741][T32377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 832.430390][T32384] netlink: 'syz.0.7132': attribute type 25 has an invalid length. [ 832.485489][T32386] sctp: [Deprecated]: syz.4.7133 (pid 32386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.485489][T32386] Use struct sctp_sack_info instead [ 832.508729][T32386] sctp: [Deprecated]: syz.4.7133 (pid 32386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 832.508729][T32386] Use struct sctp_sack_info instead [ 832.578017][T32388] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7134'. [ 832.773536][ T9692] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 832.785834][ T9692] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 832.794272][ T9692] CPU: 0 UID: 0 PID: 9692 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 832.803907][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 832.814245][ T9692] Workqueue: krdsd rds_tcp_accept_worker [ 832.820432][ T9692] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 832.826282][ T9692] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 832.845918][ T9692] RSP: 0018:ffffc90019a3f960 EFLAGS: 00010202 [ 832.852097][ T9692] RAX: 1ffff1100b2eb003 RBX: 0000000000000012 RCX: 0000000000000000 [ 832.860072][ T9692] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 832.868235][ T9692] RBP: ffffc90019a3fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 832.876297][ T9692] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff8880328ab080 [ 832.884454][ T9692] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92003347f34 [ 832.892452][ T9692] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 832.901491][ T9692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.908091][ T9692] CR2: 0000200000e86020 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 832.916185][ T9692] Call Trace: [ 832.919490][ T9692] [ 832.922445][ T9692] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 832.928020][ T9692] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.933072][ T9692] ? lock_acquire+0x106/0x330 [ 832.938024][ T9692] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 832.943928][ T9692] ? process_scheduled_works+0xa0f/0x17a0 [ 832.949775][ T9692] ? process_scheduled_works+0xa0f/0x17a0 [ 832.955697][ T9692] rds_tcp_accept_worker+0x1d/0x70 [ 832.960931][ T9692] ? process_scheduled_works+0xa0f/0x17a0 [ 832.966803][ T9692] process_scheduled_works+0xaec/0x17a0 [ 832.972377][ T9692] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.978362][ T9692] ? assign_work+0x3d5/0x5e0 [ 832.983433][ T9692] worker_thread+0xa50/0xfc0 [ 832.988155][ T9692] kthread+0x388/0x470 [ 832.992242][ T9692] ? __pfx_worker_thread+0x10/0x10 [ 832.997453][ T9692] ? __pfx_kthread+0x10/0x10 [ 833.002156][ T9692] ret_from_fork+0x51e/0xb90 [ 833.006856][ T9692] ? __pfx_ret_from_fork+0x10/0x10 [ 833.011986][ T9692] ? __switch_to+0xc7d/0x1400 [ 833.016841][ T9692] ? __pfx_kthread+0x10/0x10 [ 833.021441][ T9692] ret_from_fork_asm+0x1a/0x30 [ 833.026222][ T9692] [ 833.029241][ T9692] Modules linked in: [ 833.034066][ T9692] ---[ end trace 0000000000000000 ]--- [ 833.077491][ T9692] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 833.083495][ T9692] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e3 41 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 833.106746][ T9692] RSP: 0018:ffffc90019a3f960 EFLAGS: 00010202 [ 833.108939][T32399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.113130][ T9692] RAX: 1ffff1100b2eb003 RBX: 0000000000000012 RCX: 0000000000000000 [ 833.130050][ T9692] RDX: 0000000000000006 RSI: ffffffff8dee23a3 RDI: 00000000ffffffff [ 833.130187][T32399] bond0: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 833.139185][ T9692] RBP: ffffc90019a3fad8 R08: ffffffff90109277 R09: 1ffffffff202124e [ 833.158526][ T9692] R10: dffffc0000000000 R11: fffffbfff202124f R12: ffff8880328ab080 [ 833.168330][ T9692] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff92003347f34 [ 833.177448][ T9692] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 833.187655][ T9692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.194546][ T9692] CR2: 00007f29c7de9d40 CR3: 0000000079326000 CR4: 00000000003526f0 [ 833.195466][T32399] bond0: (slave ip6tnl4): Error -95 calling set_mac_address [ 833.203674][ T9692] Kernel panic - not syncing: Fatal exception [ 833.210608][ T9692] Kernel Offset: disabled