last executing test programs: 2.274802338s ago: executing program 1 (id=9006): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000440)='GPL\x00', 0x2, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x24, '\x00', 0x0, @fallback=0x26, r0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="0911008d0c00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111dc000000000006000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xd21, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) 2.154973044s ago: executing program 1 (id=9008): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002000000fe8000000000000000000000000000000400000000000f00000000000000000000000000ac1414bb000000000000000000000000000000003200000002"], 0x23c}}, 0x4004000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast2, 0x7f}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r3) 1.483010336s ago: executing program 1 (id=9013): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000f9dbdf2511000000050012000700000008000300", @ANYRES32=r4, @ANYBLOB="0000008a"], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4040004) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x100, 0x0, 0x4}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@mcast2, @private2, @empty, 0xfffffffb, 0xff, 0x552, 0x400, 0x8, 0x200000, r6}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r9, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/116, 0xbf}, {&(0x7f0000000900)=""/80, 0x49}, {&(0x7f0000000200)=""/77, 0x78}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/9, 0x9}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0x800, 0x7fffffff) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 1.300508107s ago: executing program 0 (id=8927): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xb8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r3, 0xe44a0000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0xfffffffd}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) close(r3) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x1, [0x2, 0xfffffffffffffff8, 0x1, 0x0, 0x3], [0x5, 0x4, 0x61d2, 0xb0, 0x4, 0x100000000, 0x5, 0x1, 0x2, 0x5, 0x2, 0x4, 0x9, 0x6, 0x1, 0xa7, 0x7, 0x4010000000, 0xf7, 0xffffffff, 0x4, 0x9, 0x8, 0x9, 0x81, 0x1fe000, 0x2ac, 0x1ff, 0x2, 0x4, 0x7, 0x9, 0x4, 0x4, 0x2, 0xf, 0xa, 0xfffffffffffffffa, 0x52, 0x8, 0x3, 0xea39, 0x6, 0x3ff, 0x51, 0xfffffffffffffff8, 0x8, 0x6, 0x5, 0x0, 0x1000, 0xa, 0x7, 0x2, 0xb636, 0x81, 0xf, 0x8, 0x3, 0x4, 0xa, 0x9, 0x81, 0x8, 0x5, 0x2, 0x600000000000, 0x7, 0x5, 0x7fffffff, 0x1400000000000, 0x7c2e, 0x6, 0x40, 0x7, 0x7, 0x9, 0x9, 0x2, 0x6aca, 0x32, 0x4, 0xe658, 0x80000001, 0x7fff, 0x3, 0x5, 0xffffffff, 0x78, 0x7, 0x7fffffffffffffff, 0x8000000000000000, 0x6, 0x800, 0x5, 0xe807, 0x8000, 0x0, 0x1, 0x91d, 0x6, 0x9, 0x8, 0x4, 0x100000000, 0x4, 0x8, 0x466, 0x1, 0x100000000, 0x2, 0x1, 0x0, 0x3, 0x800, 0x5, 0x8000, 0x9, 0x2, 0xdd, 0x8000000000000001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001100)={r9, 0x4, 0x0, [0x2, 0x9, 0x2, 0x0, 0x7fff], [0x4, 0x5, 0x2, 0x0, 0x1, 0x0, 0x1, 0x7963055b, 0x4, 0xffffffffffffffc7, 0x432f, 0xac, 0x0, 0xfffffffffffffe01, 0x3, 0x800, 0x9, 0x5, 0xfffffffffffffff9, 0x7fff, 0x5e7, 0x1, 0x9, 0x80, 0x80000000, 0x6, 0x5, 0x45, 0x7fffffffffffffff, 0x81, 0x4, 0x1ff, 0xfffffffffffffff8, 0x4, 0x3, 0x1, 0x40, 0x5, 0x7, 0x95, 0x6d82, 0x5, 0x81000000000, 0x7, 0x6, 0x4, 0x7fff, 0x20000, 0x2, 0x8, 0xffffffff, 0x6, 0x2, 0x2, 0x7, 0xff8, 0x579, 0x65d, 0x7, 0x7fff, 0x2, 0xff, 0x0, 0x1, 0x6, 0x80, 0x200, 0x7, 0x38a, 0x400, 0x7, 0x80000001, 0x7fffffff, 0x105, 0x5dbf, 0x200, 0x7fffffffffffffff, 0x500000000, 0x7, 0x8000000000000001, 0x80000000, 0x8, 0x5, 0xd3, 0x8, 0x7, 0xfffffffffffffffc, 0x0, 0x9, 0x4, 0x6, 0x3, 0x3, 0x3c7e000000, 0x8, 0x9, 0x400, 0x4, 0x7, 0x15, 0x1, 0xe20, 0x2, 0x10001, 0x4, 0x7, 0x7, 0x5, 0x7, 0xdc2e, 0x7, 0x7, 0x3, 0xfffffffffffffffa, 0x0, 0x5, 0x3, 0x101, 0x800, 0x9, 0x7]}) 1.086889003s ago: executing program 0 (id=9016): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x5, r2, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x80) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000040), 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4085, 0xff5}], 0x3}, 0x0) recvmmsg(r0, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) 1.082750095s ago: executing program 1 (id=9017): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.018688134s ago: executing program 2 (id=9018): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@any, 0x3d05, 0x280000, 0x1, 0x8, 0x2, 0x7}}}, 0x19) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@any, 0x3d05, 0x280000, 0x1, 0x8, 0x2, 0x7}}}, 0x19) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) (async) 958.505149ms ago: executing program 4 (id=9019): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fddbdf250c0000000c0099008100f810"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x22, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050850) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 940.384071ms ago: executing program 1 (id=9020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x100000001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0xb, 0x1, 0x9}, 0x10) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@random="0f539af21094", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) 842.822041ms ago: executing program 2 (id=9021): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100003040000000000000000000004009a5b624158ee453d93fa30344c5e7e7b04300c8f7d469461e1a4e27a9f9c059e5eaa7bcc92de8d12b4f8b12bee9896d8e5ed4ecffc1a39be4495c8a496c51aa7f27c3eb4b42b185fd0c7eb8095174437a318bc85b5658cf797e16f66dd9b6e343f4bd49a200541796ed6e2b7e35eefa984f40922de23c2f23608ac5466623a82c955948f596a3d2cd2b83b6d303541a38d", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000003c0)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 769.959709ms ago: executing program 3 (id=9022): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) write$nbd(r4, &(0x7f0000000400)=ANY=[], 0xb4) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0x1c}}, 0x24000081) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 730.607483ms ago: executing program 4 (id=9023): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3cedffff0f00010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090000000000"], 0x3c}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000042c0)="d739421ca74f2b2b8b064c005dcbfbb4079624cbe9e67584a53feb5945f8a333cb9b33dd7525e4364d4473dd986e68699df2f22f081af60735fbf51bf4a6bb41e5af9d6ddaa1ea02b5a01530a097769e5aaa946ddaeefcf0c851c2de5fd5be3d1f9b77f9341e6e0c497f2601225082bf28a806d1703f2b2950ca3312192fa21c0f13d460e8d15d8dc97602019840", 0x8e}, {&(0x7f0000004380)="968eea5d577080186454c6076fc0f14cee878cbb8ff66534f9ab3ce754b465bd1c661778d991c8ae76a441982e786ef492b3500208bda6022a5eaa97f3b64739260b5e47", 0x44}, {&(0x7f0000004400)="9a4b39e77c559b8fd44be1a0fb871ffb2fd39c1635775ac3aa32fb785ff6497ffcbee76bfe34091469a0ef6130838e7e254f36b912adba7b2e82d37f89d7e9a8858cac34964ae7e72813d19162e6008c3dd7ec537f92eecbc709d3f666e062b0d01e48b81fb9dea57628b17f2068d3cad9d3502f28141930c8941ec82054da810de6b6b27498b8578c5aff678d6e3407d8ff521d2d7b5d9884eb059da340c33fb14814362ec314f36d98eeb6d3e8c7b3165bc1bfba5e6570030b5e69ec7e3e685541436c36a3ece359554456fb69f6e491b71cde9658dbca0e5e1f6322b96558f6ceeb8f355324c1a8052e5f03d9a0218c0be88e0957ad33e6b28460592435ebd7d6080763034fdbc2044a689a2b03c61a4d5f6984feb0d44be38dd8c61ee351e98acb950db6f0578ceb1c4f3a33ec15244119ac0bdef5ce82fbce1b932ca3f0ff1ceb0ef4e007c98ba311abb8ccf391f8b1b8373be24a45b223c7d92787b2ea72b35c92926bec33c36a3d9e9299bdd7d5b55496fc92967614df924f711397dce4d0db852a1d300ed684d60477bec1b423f7e96c5389c958ee02f85a1121db0ff5d5f01b6eef5abc6d422925391b3af85d20555db554c53743f058175ed9ba38f242851189ee707fa0a5286d7cc0df2739b3ce0de238a484244242c5ed8a54543c01383443eb1ee239ce506b52aa4520e7ec331f88e1900b155d6aec7b69f018fb1dd49704ad9845615e2178f30d7438f4957c0b32c2aee6cf784c848ea68a4b542ae6fb71d389d09112de4c8c57301ef55fdece1334ca6706b34db22d470cac7715ace8b8ddea162e007c15bfdbf465b12dfcbbbfdcc3de7a31729c85a39b8ddd3198358dd6721f9194c4c3614782e2bd0fca9209ec2f9765bfe29c94db19ba96bd2052ca06a700170440c2d20092bd2b1a89ed33e5995f91a90360db61664741cf2c7fb63b71f26bc0935a4112ad19e7e2286fae5dba21c640398f059bcb0b16a6d8741793fa3b60f56f797f32a4940b4371ad26a31e3913be6d49c15642ec0df06543a69a9030de24a9cf3421922c548f1e65b0a083a2cd3e6cf3ac15e9f769fb2261e39dd4fea404143dd5431d0774bcdc8ff5691e9b51bfc80ef63176ca793801b2ae1fa6083c14cf48ed858b1b0270097c534d9d982fb1750106f2af26ede0ee132237f6736d3512518ccd6998b860a3b63f6510d1c9b361d63af5c6cc3bb93560be0fb886e2c4990cc8886ab6da3c9a1c333daabd021e6d8ae144986c6d89a5d748fa43bb82820e1dcf81f03efbaf692c31bfd429fce520d4ef76f091d916297ece3aae2503a254bc2ccef25ef9fa07676201802415329abbe1f4fc20cc4375bbda9a907e8b03dfcc29c373a1c06b3cd507ad0a0f1af245e18c170e8964e6c89bcb57b1f4bdeac2e507830b65e4f65cb9cd70f27e33d67ebbf01031880244ab8d550a5cf1e5f663a50fe70d4717be58d7b6a8d518eefd1b7217907b1049f9cd667e66e8bf417a2c45ced658af7d4845e3eb53a4ca4a7ed9bcd241d9c81c3ba54c68722fd7677f1dc7ab4c129712200077f5b2430cd1d7228ebb7de664b68cf8a863d8ab722fea2b54e3ae2eba61b7c568226df588ff2f4928b352d3bee0c1370cf0bd0e3cd0e06bf9e211638dcc4b57b80b13624a6ed0353b65dc2d6854a89822091bd6032978fbdfafe4dba1bed6d2e95b92192856753eda60c85ccf90912f", 0x4c3}], 0x3}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005680)="854b106d06701d", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000006080)=[{&(0x7f0000005f00)="f0", 0x1}], 0x1, &(0x7f00000060c0)}}], 0x4, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x9) 638.307191ms ago: executing program 0 (id=9024): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000020100800c00"], 0x114}], 0x1}, 0x0) 637.625188ms ago: executing program 2 (id=9025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r3, 0xb) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x8c4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r5, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x38, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xecfcf95a5075fd21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x38}}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000049e7040c27bd7000fddbdf250a000100", @ANYRES32=0x0, @ANYBLOB="3b0000001400010020010000000000000000000000000002"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r9, 0x7, 0x1, 0x9d}) setsockopt$sock_int(r8, 0x1, 0x2b, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="16000046cef5f00100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r10, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 586.96577ms ago: executing program 4 (id=9026): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000080)={@ax25={{0x3, @null, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, {&(0x7f0000000000)=""/2, 0x2}, &(0x7f0000000040), 0x48}, 0xa0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1f, 0x3}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x408600, 0x0) write$tun(r3, &(0x7f0000000300)={@val={0x0, 0x1b}, @void, @eth={@local, @remote, @void, {@ipv4={0x800, @generic={{0x27, 0x4, 0x1, 0x25, 0x170, 0x67, 0x0, 0x4, 0x5c, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x4b, [@remote, @multicast2, @private=0xa010100]}, @cipso={0x86, 0x2a, 0x1, [{0x2, 0x10, "3e134a478b9a3358ecb18b1dfbf1"}, {0x1, 0x4, "bbcd"}, {0x0, 0x10, "09b1ccfa62b48bbb087c793f43c8"}]}, @rr={0x7, 0xb, 0x52, [@private=0xa010101, @empty]}, @generic={0x82, 0x3, 'X'}, @timestamp_prespec={0x44, 0x3c, 0xa3, 0x3, 0xe, [{@multicast1, 0x5}, {@empty, 0x5}, {@multicast1, 0x2}, {@remote, 0x10001}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x9}, {@empty, 0x7fffffff}]}, @end]}}, "2a16af4583381d3e7bd56148874bc8d3b8cf8e8404fe58013cbf928981d0ae28f76f42ad9323f66c06dcc2eb650f4d6362f97cce1080284027143321603d02c50ee326230d17a16ed44a3812981660ece705401d4206f303b8cacb0742f511d9927ac0d342281f42be4cc5450b3057ae6b45701ea3ea1fd0b31d64d179a78692374ee8dfd8229473fc7ee4c65132d827336313ce6417322ffa38ed3f86f38cdb2f94a08c04e17cb25b1694b1ddd4431eb0273351fc5c290ca3b2e9a0a4284816aab6671100507faab36b08ce57bfdd4f840f6823"}}}}}, 0x182) readv(r3, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/174, 0xae}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x29, 0x9e, 0x4, 0xb, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x40, 0xb21, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000007c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1004c804}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000900)={@private=0xa010101, 0x0, 0x0, 0x90, 0x0, [{@empty}, {@multicast2}, {@loopback}, {@broadcast}, {@remote}, {@multicast1}, {@initdev}, {@local}, {@multicast1}]}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r9, 0x400, 0x70bd27, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000c00)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x6c, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xea}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x100) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000d40)={0x9, @remote}, &(0x7f0000000d80)=0x12, 0x80000) ioctl$SIOCX25GSUBSCRIP(r12, 0x89e0, &(0x7f0000000dc0)={'veth0_to_batadv\x00', 0x1, 0x7}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r13, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, r9, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}]}, 0x24}}, 0x40881) r14 = socket$netlink(0x10, 0x3, 0x9) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001000), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r14, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, r15, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x881) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r16, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x78, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbc}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x48801) 583.98605ms ago: executing program 2 (id=9027): socket(0x23, 0x80805, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00efffffffff070045000028000000008001907864010300e00000010d0090780004000100000004000000bb00000008"], 0x0) 524.876398ms ago: executing program 3 (id=9028): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002400)=[{&(0x7f00000004c0)="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", 0x242}], 0x1}, 0x4000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 470.221002ms ago: executing program 0 (id=9029): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x802, 0x10, @mcast2, @empty, 0x10, 0x0, 0xe7, 0x2}}) 428.297938ms ago: executing program 4 (id=9030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') 418.058412ms ago: executing program 2 (id=9031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1e8, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800c00024000000017080003400000000a08000140000000090900010073797a3000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'sit0\x00', 0x8000}) 362.268962ms ago: executing program 3 (id=9032): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6, 0x0, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 343.160854ms ago: executing program 1 (id=9033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x5, 0x64, 0x1, 0x80}, {0x6, 0x40, 0x3, 0xa}, {0x84, 0x7, 0x8, 0xb88a}, {0x4, 0x7, 0x5, 0x6}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r4, r3, 0x0, 0xf03a0005) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="6ca1113583cf35877397a02fbbc4c29a9174ed032d9218c81925e99c7d94d6d04502c70d026f9a226e277143", 0x2c}], 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="7c39a8056b454bcca8ea41d8d5847fd5690a0a91f2c702e98f6eef9a1a2c448ea6d17ddbbac1e6f54bfd44de4604e75b164954427e3a06ce70ec16d17d3ee7ea6c018a3f730231234a735dc596ac26a1587d0b6eb61a73f75d5c41797c238353c3a4546cf804f27b103147c807afd20a34d763da8c72d1e3d1d26b5a0e86f3d7caa48538b1edd6b9e905864137aacb037bfe270e459d0a", 0x97}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x110, 0x41}], 0x2, 0x20000) 323.285312ms ago: executing program 4 (id=9034): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1680, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'caif0\x00'}) 250.715663ms ago: executing program 3 (id=9035): syz_init_net_socket$llc(0x1a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xf, 0x400, 0x18, @mcast1, @mcast1, 0x10, 0x7800, 0x9, 0x1}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc040}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r6, 0x0) (async) sendmmsg(r6, &(0x7f0000004a80)=[{{0x0, 0x2a0, 0x0}}], 0x1, 0x20040800) (async) socket$inet6_udp(0xa, 0x2, 0x0) 249.275512ms ago: executing program 0 (id=9036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x8000f28, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) vmsplice(r5, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x0, 0x13, 0x0, &(0x7f000000a500)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x198, r9, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x56}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1fc}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ece134}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1f}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x1, 0xf31, 0x5, 0x1, 0x80000001, 0x8, 0x5, 0x0, 0x7, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x44}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa2e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x80, 0x2, 0xcf, 0x1, 0x80000000, 0x4a13]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x6]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x1, 0x10001, 0x1, 0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9c6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x291}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x34}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x88a, 0x3, 0x579, 0xfffffff2, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x177}]}]}, 0x198}}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) 224.758664ms ago: executing program 2 (id=9037): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0xa8, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}, [@qdisc_kind_options=@q_bfifo={{}, {0x0, 0x2, 0x80000000}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@can, &(0x7f0000000580)=0x80, 0x80800) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r10, @ANYBLOB="000827bd7000fedbdf2505000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000e00000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200"/204], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r13}, 0x94) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r14}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r15, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r15, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r16, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000900)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000001140)={0x64, r16, 0x28, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x2e, 0x7, "7f0e27ff4b37eb7c6e61d4913b"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "706f863472"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0xc885}, 0x4008001) 124.582517ms ago: executing program 4 (id=9038): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d9081253", 0x2c}], 0x1}, 0x4005) 58.133975ms ago: executing program 3 (id=9039): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) 21.541176ms ago: executing program 0 (id=9040): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x81000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f00000000c0)="1af5ea9d9b3ebbb0b1b2f9098268b269b5567561e71bc9125c9f708a0b99f10eae70833da6ed28934c7038f9a1e20b90db65", 0x32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000140)={@loopback, @multicast2, 0x0, "0a1b20d2bd7cc2b420ff7175c6a06af595ad7827a85519ac04c4059e875ec97d", 0x6, 0x2, 0x1, 0x7}, 0x3c) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r4}, 0x8) write$tun(r7, &(0x7f0000000400)={@val={0x0, 0xfbfb}, @void, @ipv4=@igmp={{0x30, 0x4, 0x0, 0x26, 0x12c, 0x65, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x8, 0x3, 0xc, [{@empty, 0x3ff}, {@private=0xa010101, 0x7}, {@multicast1, 0x10}, {@multicast2}, {@remote, 0x5}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x2}]}, @rr={0x7, 0x1b, 0xdb, [@multicast1, @private=0xa010102, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0x3c, 0xbd, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc8}, {@empty, 0x1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7fffffff}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000000}, {@rand_addr=0x64010102, 0x9a4}]}, @generic={0x88, 0x10, "7d37cca73657ba7b5c6ecf77caa7"}]}}, {0x1e, 0x0, 0x0, @local, "1aeb1d395e23c9e871c72fb54b80017a6c3fcb41ed7cbbaae31c9cd7367c3f9658f3a69712d1fb16747d5fd00ca98146837b958b1b14127b1c804fd9c77246246a5e7f814825a5f08e57a64089eb4338c32792b71b8b12fe20533057f30969916348e7fc"}}}, 0x130) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xcc, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8050}, 0x20004080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r9, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}}, 0x40) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r12, 0x89e2) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000009c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0xff, 0x8, 0xb, 0x100, 0x7, 0x200, r6}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004801) epoll_wait(r11, &(0x7f0000000c80)=[{}], 0x1, 0xa68) sendmsg$IPVS_CMD_SET_CONFIG(r11, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xd8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6e7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40840) 0s ago: executing program 3 (id=9041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xe63b, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) syz_emit_ethernet(0x3e, &(0x7f00000008c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x66, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r5, 0x200, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): k: 8 bytes leftover after parsing attributes in process `syz.1.7042'. [ 689.024862][T31897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.034439][T31901] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 689.082025][T31901] bond1: entered allmulticast mode [ 689.227557][T31922] syzkaller0: entered promiscuous mode [ 689.233119][T31922] syzkaller0: entered allmulticast mode [ 689.246161][T31926] ±ÿ: renamed from team_slave_1 (while UP) [ 689.352224][T31930] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7051'. [ 689.490463][T31937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7051'. [ 690.106575][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 690.752143][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 690.760218][ C0] lec:lec_tx_timeout: lec0 [ 692.001665][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7054'. [ 692.181085][T31939] netlink: 'syz.4.7053': attribute type 12 has an invalid length. [ 692.215286][T31939] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7053'. [ 692.493823][T31968] nbd: must specify an index to disconnect [ 692.525174][T31970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7061'. [ 692.534970][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7060'. [ 693.331978][T31994] syzkaller0: entered promiscuous mode [ 693.360029][T31994] syzkaller0: entered allmulticast mode [ 693.378282][T32015] xt_hashlimit: max too large, truncated to 1048576 [ 693.418930][T32017] team_slave_0: mtu less than device minimum [ 693.654575][T32031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7076'. [ 696.059574][T32034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.089207][T32034] batadv_slave_0: entered promiscuous mode [ 696.138919][T32039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7078'. [ 696.158002][T32037] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7077'. [ 696.336320][T32037] delete_channel: no stack [ 696.579936][T32056] netlink: 'syz.4.7082': attribute type 1 has an invalid length. [ 696.631916][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7082'. [ 696.731041][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7082'. [ 696.799037][T32056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 696.821653][T32060] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 697.099733][T32081] syzkaller0: entered promiscuous mode [ 697.117302][T32081] syzkaller0: entered allmulticast mode [ 697.705009][T32116] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7097'. [ 697.812827][T32118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7098'. [ 699.885185][T32093] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7091'. [ 699.895038][T32093] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 700.066829][T32123] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7100'. [ 700.155993][T32128] netlink: 'syz.2.7102': attribute type 62 has an invalid length. [ 700.221627][T32137] mac80211_hwsim hwsim68 wlan1: Device is already in use. [ 700.333943][T32141] netlink: 'syz.4.7104': attribute type 29 has an invalid length. [ 700.388488][T32141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7104'. [ 703.063881][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 708.184056][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 722.104503][ T7086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 723.816708][T32177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.837091][T32177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.939151][T32182] syzkaller0: entered promiscuous mode [ 723.944643][T32182] syzkaller0: entered allmulticast mode [ 723.974907][T32184] ip6_vti0: entered promiscuous mode [ 724.000489][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 724.277385][T32222] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 724.508234][T32240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7124'. [ 724.517220][T32240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7124'. [ 726.569314][T32224] kthread_run failed with err -4 [ 726.608722][T32240] ip6gretap0: entered promiscuous mode [ 726.627462][T32240] ip6gretap0: left promiscuous mode [ 726.650750][T32252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7128'. [ 726.668534][T32252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 726.731873][T32256] netlink: 'syz.4.7129': attribute type 1 has an invalid length. [ 726.932983][T32256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 727.281438][T32283] delete_channel: no stack [ 727.331735][T32292] netlink: 'syz.1.7136': attribute type 8 has an invalid length. [ 727.646467][T32300] xt_policy: output policy not valid in PREROUTING and INPUT [ 727.840600][T32313] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 728.043327][T32328] netlink: 'syz.3.7151': attribute type 10 has an invalid length. [ 728.122581][T32328] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.168750][T32328] bridge_slave_1: left allmulticast mode [ 728.196886][T32328] bridge_slave_1: left promiscuous mode [ 728.219603][T32328] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.257393][T32328] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 728.409125][T32339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7154'. [ 728.458243][T32340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7154'. [ 728.686450][T32361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7159'. [ 728.697690][T32360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.016257][T32374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7162'. [ 729.100699][T32383] netlink: 'syz.3.7165': attribute type 2 has an invalid length. [ 729.148850][T32383] netlink: 'syz.3.7165': attribute type 2 has an invalid length. [ 729.548236][T32407] netlink: 'syz.1.7172': attribute type 2 has an invalid length. [ 729.885860][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7175'. [ 729.918754][T32426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7176'. [ 730.294411][T32404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7170'. [ 730.516535][T32457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7182'. [ 730.535916][T32460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7182'. [ 730.689604][T32470] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 730.708205][T32470] bond6: (slave lo): Enslaving as an active interface with an up link [ 730.719404][T32470] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 730.782898][T32432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.176907][T32490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'. [ 731.250561][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7192'. [ 731.543072][T32508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7198'. [ 731.608514][T32516] netlink: 'syz.0.7200': attribute type 1 has an invalid length. [ 731.727363][T32519] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 731.887361][T32521] veth7: entered promiscuous mode [ 731.906994][T32521] veth7: entered allmulticast mode [ 731.949776][T32521] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 731.967604][T32529] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7201'. [ 732.138287][T32510] syzkaller1: entered promiscuous mode [ 732.144583][T32510] syzkaller1: entered allmulticast mode [ 732.458601][T32364] block nbd64: NBD_DISCONNECT [ 732.482826][T32550] openvswitch: netlink: Multiple metadata blocks provided [ 732.507540][T32551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.674487][T32556] x_tables: duplicate underflow at hook 1 [ 732.727574][T32561] netlink: 'syz.4.7210': attribute type 1 has an invalid length. [ 732.763338][T32561] netlink: 'syz.4.7210': attribute type 1 has an invalid length. [ 732.806531][T32364] udevd[32364]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 732.956379][T32571] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 733.028925][T32574] netlink: 'syz.1.7213': attribute type 11 has an invalid length. [ 733.446887][T32609] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 733.454905][T32609] netlink: 'syz.4.7222': attribute type 3 has an invalid length. [ 733.462665][T32609] netlink: 'syz.4.7222': attribute type 7 has an invalid length. [ 733.478602][T32609] netlink: 'syz.4.7222': attribute type 8 has an invalid length. [ 733.486642][T32609] NCSI netlink: No device for ifindex 131092 [ 733.701874][T32618] vlan2: entered allmulticast mode [ 733.741474][T32618] bridge7: entered allmulticast mode [ 733.907029][T32618] bridge7: port 1(bond3) entered blocking state [ 733.935302][T32618] bridge7: port 1(bond3) entered disabled state [ 733.941762][T32618] bond3: entered allmulticast mode [ 733.977441][T32618] bond3: entered promiscuous mode [ 734.007672][T32644] gtp0: entered promiscuous mode [ 734.022208][T32644] gtp0: entered allmulticast mode [ 734.082563][T32644] __nla_validate_parse: 10 callbacks suppressed [ 734.082581][T32644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7233'. [ 734.107532][ T48] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 734.129059][ T48] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 734.142967][ T9] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 734.224341][ T9] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 734.304038][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 734.317529][T32667] syzkaller0: entered promiscuous mode [ 734.323018][T32667] syzkaller0: entered allmulticast mode [ 734.393126][T32671] xt_hashlimit: size too large, truncated to 1048576 [ 734.500571][T32676] netlink: 'syz.4.7241': attribute type 11 has an invalid length. [ 734.905133][ T9] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 734.916484][T32697] netlink: 'syz.0.7246': attribute type 1 has an invalid length. [ 734.946994][T32701] x_tables: unsorted underflow at hook 3 [ 734.967530][T32701] 8021q: VLANs not supported on lo [ 735.090727][T32707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7250'. [ 735.114893][T32712] syzkaller1: entered promiscuous mode [ 735.137889][T32712] syzkaller1: entered allmulticast mode [ 735.152039][T32712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7252'. [ 735.642932][T32752] syzkaller0: entered promiscuous mode [ 735.649626][T32752] syzkaller0: entered allmulticast mode [ 735.721974][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7261'. [ 736.068824][T32724] delete_channel: no stack [ 738.064999][T32711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.103821][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 738.247721][T32762] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 738.275208][T32762] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7262'. [ 738.301443][T32762] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 738.310015][T32762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7262'. [ 738.339961][T32765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7264'. [ 738.362087][ T300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7263'. [ 739.345634][ T362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7280'. [ 739.356373][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7280'. [ 739.365253][ T362] netlink: 'syz.4.7280': attribute type 5 has an invalid length. [ 739.369563][ T365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7281'. [ 739.372972][ T362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7280'. [ 739.408616][ T369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7279'. [ 739.429575][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7280'. [ 739.439797][ T3506] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.455846][ T3506] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.471149][ T3506] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.484856][ T362] netlink: 'syz.4.7280': attribute type 5 has an invalid length. [ 739.496307][ T3506] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.514179][ T362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7280'. [ 739.690311][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7285'. [ 739.700393][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'. [ 739.778842][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'. [ 740.072568][ T402] xt_CT: No such helper "snmp_trap" [ 740.571174][ T437] pimreg3: entered allmulticast mode [ 740.633364][ T445] netlink: 'syz.3.7303': attribute type 1 has an invalid length. [ 740.647299][ T445] netlink: 'syz.3.7303': attribute type 11 has an invalid length. [ 740.742783][ T455] netlink: 'syz.3.7303': attribute type 3 has an invalid length. [ 740.951902][ T466] netlink: 'syz.3.7307': attribute type 23 has an invalid length. [ 741.095243][ T475] netlink: 'syz.3.7309': attribute type 1 has an invalid length. [ 741.246999][ T475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.403233][ T490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.427330][ T490] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 741.438453][ T490] bond2: (slave vcan0): Error -95 calling set_mac_address [ 741.719216][ T507] syzkaller0: entered promiscuous mode [ 741.730503][ T507] syzkaller0: entered allmulticast mode [ 742.051777][ T525] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 742.175729][ T531] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 742.196743][ T536] syzkaller0: entered promiscuous mode [ 742.209841][ T536] syzkaller0: entered allmulticast mode [ 742.253826][ T536] netlink: 'syz.2.7320': attribute type 1 has an invalid length. [ 742.271194][ T536] NCSI netlink: No device for ifindex 0 [ 742.872462][ T582] netlink: Conntrack attr has 4 unknown bytes [ 743.962361][T12223] lec:lec_start_xmit: lec0:No lecd attached [ 743.987234][ T655] veth0_to_bridge: entered allmulticast mode [ 744.023791][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 744.124553][ T5844] IPVS: starting estimator thread 0... [ 744.227638][ T669] IPVS: using max 37 ests per chain, 88800 per kthread [ 744.235803][ T672] netlink: 'syz.0.7354': attribute type 23 has an invalid length. [ 744.460304][ T687] __nla_validate_parse: 23 callbacks suppressed [ 744.460323][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7360'. [ 744.782057][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7364'. [ 744.803977][ T698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.826912][ T701] bridge_slave_0: left allmulticast mode [ 744.834863][ T701] bridge_slave_0: left promiscuous mode [ 744.840774][ T701] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.879225][ T701] bridge_slave_1: left allmulticast mode [ 744.892533][ T701] bridge_slave_1: left promiscuous mode [ 744.908696][ T701] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.938853][ T701] bond0: (slave bond_slave_0): Releasing backup interface [ 744.984585][ T701] bond0: (slave bond_slave_1): Releasing backup interface [ 745.015623][ T701] team0: Port device team_slave_0 removed [ 745.039710][ T701] team0: Port device team_slave_1 removed [ 745.053040][ T701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.064498][ T701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.073381][ T701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.087676][ T701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 745.181172][ T720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7370'. [ 745.217949][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7370'. [ 745.394954][ T733] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 745.474583][ T737] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7372'. [ 745.502027][ T720] netlink: 'syz.3.7370': attribute type 21 has an invalid length. [ 745.547891][ T720] IPv6: NLM_F_CREATE should be specified when creating new route [ 745.556153][ T725] netlink: 284 bytes leftover after parsing attributes in process `syz.3.7370'. [ 745.734547][ T757] netlink: 'syz.4.7380': attribute type 10 has an invalid length. [ 745.827416][ T760] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.7381'. [ 745.838740][ T763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7382'. [ 745.897343][ T768] netlink: 'syz.0.7384': attribute type 11 has an invalid length. [ 745.906658][ T760] erspan0: entered promiscuous mode [ 745.927639][ T768] netlink: 'syz.0.7384': attribute type 4 has an invalid length. [ 745.938079][ T760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7381'. [ 745.966327][ T768] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.7384'. [ 746.204810][ T788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.261393][ T794] vlan1: entered allmulticast mode [ 746.266548][ T794] veth0_vlan: entered allmulticast mode [ 746.423967][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 746.543901][ T811] netlink: 'syz.1.7394': attribute type 32 has an invalid length. [ 746.649281][ T811] bond2: Setting coupled_control to off (0) [ 746.670394][ T816] netlink: 'syz.3.7395': attribute type 5 has an invalid length. [ 746.697470][ T816] netlink: 'syz.3.7395': attribute type 5 has an invalid length. [ 747.297337][ T848] syzkaller0: entered promiscuous mode [ 747.310230][ T848] syzkaller0: entered allmulticast mode [ 747.422653][ T860] geneve2: entered promiscuous mode [ 747.427868][ T860] geneve2: entered allmulticast mode [ 748.319563][ T915] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 749.034181][ T967] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 749.061218][ T967] bond4 (unregistering): Released all slaves [ 749.306790][ T985] netlink: 'syz.3.7427': attribute type 4 has an invalid length. [ 749.495074][ T995] __nla_validate_parse: 2 callbacks suppressed [ 749.495091][ T995] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7429'. [ 749.703683][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 749.711764][ C0] lec:lec_tx_timeout: lec0 [ 749.716633][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 749.760413][ T1007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7432'. [ 749.918210][ T1007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7432'. [ 750.175537][ T1041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7439'. [ 750.202437][ T1039] syzkaller1: entered promiscuous mode [ 750.235515][ T1039] syzkaller1: entered allmulticast mode [ 750.643678][ T1067] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20002 [ 750.847817][ T1072] bond0: entered promiscuous mode [ 750.861508][ T1072] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 751.123821][ T1087] sctp: [Deprecated]: syz.3.7445 (pid 1087) Use of int in max_burst socket option deprecated. [ 751.123821][ T1087] Use struct sctp_assoc_value instead [ 751.142514][ T1088] sctp: [Deprecated]: syz.3.7445 (pid 1088) Use of int in max_burst socket option deprecated. [ 751.142514][ T1088] Use struct sctp_assoc_value instead [ 751.735494][ T1122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7452'. [ 751.792895][ T1125] syzkaller0: entered promiscuous mode [ 751.815374][ T1125] syzkaller0: entered allmulticast mode [ 752.818993][ T1180] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7465'. [ 753.157410][ T1199] syzkaller0: entered promiscuous mode [ 753.170624][ T1199] syzkaller0: entered allmulticast mode [ 753.242547][ T1206] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 753.255263][ T1209] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7471'. [ 753.367231][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7473'. [ 753.420465][ T1220] xt_cluster: node mask cannot exceed total number of nodes [ 753.425602][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7473'. [ 753.454426][ T1222] macvtap1: entered allmulticast mode [ 753.461647][ T1222] veth0_macvtap: entered allmulticast mode [ 753.780928][ T1236] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 753.797236][ T1241] netlink: 'syz.1.7482': attribute type 1 has an invalid length. [ 753.809094][ T1239] veth0: entered promiscuous mode [ 753.821673][ T1239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7481'. [ 753.896421][ T1239] veth0 (unregistering): left promiscuous mode [ 754.077348][ T1253] syzkaller0: entered promiscuous mode [ 754.082872][ T1253] syzkaller0: entered allmulticast mode [ 754.328903][ T1274] bond0: entered promiscuous mode [ 754.347505][ T1274] bond_slave_0: entered promiscuous mode [ 754.357621][ T1274] bond_slave_1: entered promiscuous mode [ 754.372779][ T1274] bond0: left promiscuous mode [ 754.378666][ T1274] bond_slave_0: left promiscuous mode [ 754.393916][ T1274] bond_slave_1: left promiscuous mode [ 754.568703][ T1278] macvtap1: entered promiscuous mode [ 754.581646][ T1278] vlan0: entered promiscuous mode [ 754.593315][ T1278] macvtap1: entered allmulticast mode [ 754.594003][ T1285] sctp: [Deprecated]: syz.1.7493 (pid 1285) Use of int in maxseg socket option. [ 754.594003][ T1285] Use struct sctp_assoc_value instead [ 754.599582][ T1278] vlan0: entered allmulticast mode [ 754.618702][ T1278] veth0_vlan: entered allmulticast mode [ 754.691462][ T1296] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 754.744029][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 754.752092][ C0] lec:lec_tx_timeout: lec0 [ 754.872415][ T1302] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 755.164815][ T1334] __nla_validate_parse: 3 callbacks suppressed [ 755.164835][ T1334] netlink: 183796 bytes leftover after parsing attributes in process `syz.0.7501'. [ 755.729599][ T1375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7507'. [ 755.768226][ T1375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7507'. [ 756.292494][ T1401] netlink: 'syz.3.7512': attribute type 1 has an invalid length. [ 756.429559][ T1415] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7516'. [ 756.443685][ T1415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7516'. [ 756.458247][ T1415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7516'. [ 758.127800][ T1332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.345838][ T1428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7519'. [ 758.433434][ T1432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7521'. [ 758.545902][ T1433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7521'. [ 758.579440][ T1451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7524'. [ 759.386597][ T1507] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 760.055054][ T1558] bond0: entered allmulticast mode [ 760.060435][ T1558] bond_slave_0: entered allmulticast mode [ 760.066251][ T1558] bond_slave_1: entered allmulticast mode [ 760.090295][ T1558] bridge_slave_1: entered allmulticast mode [ 760.349453][ T1586] lo: entered allmulticast mode [ 760.360824][ T1586] lo: left allmulticast mode [ 760.560767][ T1591] nbd: couldn't find device at index 0 [ 760.660511][ T1605] xt_hashlimit: overflow, rate too high: 0 [ 760.724741][ T1604] __nla_validate_parse: 7 callbacks suppressed [ 760.724762][ T1604] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7564'. [ 760.760099][ T1610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7566'. [ 760.922270][ T1610] bond0: entered promiscuous mode [ 760.933951][ T1610] bond_slave_0: entered promiscuous mode [ 760.939979][ T1610] bond_slave_1: entered promiscuous mode [ 760.946566][ T1610] bridge_slave_1: entered promiscuous mode [ 760.952690][ T1610] dummy0: entered promiscuous mode [ 760.962143][ T1610] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 760.971797][ T1610] gretap0: entered promiscuous mode [ 760.978486][ T1610] hsr0: entered promiscuous mode [ 760.984509][ T1621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7571'. [ 761.010698][ T1621] netlink: 375 bytes leftover after parsing attributes in process `syz.3.7571'. [ 761.082546][ T1628] sctp: [Deprecated]: syz.4.7574 (pid 1628) Use of int in max_burst socket option. [ 761.082546][ T1628] Use struct sctp_assoc_value instead [ 761.120257][ T1632] netlink: 'syz.3.7575': attribute type 1 has an invalid length. [ 761.128063][ T1632] netlink: 'syz.3.7575': attribute type 3 has an invalid length. [ 761.135809][ T1632] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7575'. [ 761.144855][ T1632] NCSI netlink: No device for ifindex 813332851 [ 761.154882][ T1632] netlink: 'syz.3.7575': attribute type 1 has an invalid length. [ 761.162745][ T1632] netlink: 'syz.3.7575': attribute type 3 has an invalid length. [ 761.170530][ T1632] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7575'. [ 761.183293][ T1632] NCSI netlink: No device for ifindex 813332851 [ 761.288532][ T1637] C: renamed from lo (while UP) [ 761.326949][ T1637] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 761.370834][ T1648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7579'. [ 761.372434][ T1649] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7579'. [ 761.397077][ T1649] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7579'. [ 761.420843][ T1649] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7579'. [ 761.558957][ T1656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.783871][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 761.792077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.013314][ T1673] delete_channel: no stack [ 762.082487][ T1682] netlink: 'syz.1.7590': attribute type 33 has an invalid length. [ 762.151654][ T1682] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 762.204616][ T1693] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 762.210152][ T1682] bond4 (unregistering): Released all slaves [ 762.443461][ T1702] veth5: entered allmulticast mode [ 762.496379][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.506144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.515485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.523803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.866291][ T1732] netlink: 'syz.4.7604': attribute type 1 has an invalid length. [ 763.039254][ T1732] bond7: entered promiscuous mode [ 763.042191][ T1749] IPVS: length: 254 != 8 [ 763.045635][ T1747] netlink: 'syz.3.7606': attribute type 1 has an invalid length. [ 763.059611][ T1732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.062139][ T1747] netlink: 'syz.3.7606': attribute type 1 has an invalid length. [ 763.076546][ T1747] netlink: 'syz.3.7606': attribute type 8 has an invalid length. [ 763.115881][ T1732] bond7: (slave bridge5): making interface the new active one [ 763.123371][ T1732] bridge5: entered promiscuous mode [ 763.149356][ T1732] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 763.401992][ T1772] netlink: 'syz.4.7615': attribute type 1 has an invalid length. [ 763.505401][ T1782] tipc: Enabled bearer , priority 0 [ 763.515045][ T1782] tipc: Resetting bearer [ 763.532875][ T1781] tipc: Disabling bearer [ 764.271265][ T1843] sctp: [Deprecated]: syz.0.7635 (pid 1843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.271265][ T1843] Use struct sctp_sack_info instead [ 764.507416][ T1863] netlink: 'syz.1.7643': attribute type 3 has an invalid length. [ 765.247638][ T1920] netlink: 'syz.4.7661': attribute type 10 has an invalid length. [ 765.259829][ T1920] bond0: (slave dummy0): Releasing backup interface [ 765.267766][ T1920] dummy0: left promiscuous mode [ 765.276641][ T1920] team0: Port device dummy0 added [ 765.304488][ T1920] netlink: 'syz.4.7661': attribute type 10 has an invalid length. [ 765.315696][ T1923] syzkaller0: entered promiscuous mode [ 765.322486][ T1923] syzkaller0: entered allmulticast mode [ 765.333892][ T1920] team0: Port device dummy0 removed [ 765.342766][ T1920] dummy0: entered promiscuous mode [ 765.349493][ T1920] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 765.462368][ T1930] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 765.740739][ T1947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.765738][ T1952] __nla_validate_parse: 101 callbacks suppressed [ 765.765766][ T1952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'. [ 765.819998][ T1957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.036742][ T1964] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7674'. [ 766.059717][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7677'. [ 766.098224][ T1973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7677'. [ 766.639593][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7686'. [ 766.737600][ T2008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7686'. [ 766.779502][ T2018] netlink: 'syz.4.7690': attribute type 1 has an invalid length. [ 766.806136][ T2020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.883381][ T2028] openvswitch: netlink: IPv4 tun info is not correct [ 767.017868][ T2036] --map-set only usable from mangle table [ 767.205665][ T2048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7699'. [ 767.243736][ T2050] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7700'. [ 767.347287][ T2052] Unsupported ieee802154 address type: 0 [ 767.472485][ T2056] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7704'. [ 767.621182][ T2067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7707'. [ 768.146764][ T2099] xt_l2tp: v2 doesn't support IP mode [ 768.175531][ T2098] pim6reg: entered allmulticast mode [ 768.201057][ T2098] pim6reg: left allmulticast mode [ 768.474408][ T2108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.008381][ T2121] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 769.401775][ T2129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 769.703726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.836196][ T2159] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 769.881795][ T2164] netlink: 'syz.2.7737': attribute type 7 has an invalid length. [ 770.104067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.895317][ T2197] bond3 (unregistering): Released all slaves [ 771.359643][ T2220] __nla_validate_parse: 16 callbacks suppressed [ 771.359664][ T2220] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.7753'. [ 771.433865][ T2220] net_ratelimit: 17 callbacks suppressed [ 771.433884][ T2220] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 771.508447][ T2226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7753'. [ 771.510849][ T2230] netlink: 'syz.1.7755': attribute type 1 has an invalid length. [ 771.559314][ T2232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7755'. [ 771.570719][ T2230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7755'. [ 771.706649][ T2230] blkio.reset_stats is deprecated [ 771.789517][ T9] hid (null): global environment stack underflow [ 771.841845][ T9] hid-generic 0005:15C2:0004.0001: global environment stack underflow [ 771.851077][ T9] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed [ 771.859413][ T9] hid-generic 0005:15C2:0004.0001: probe with driver hid-generic failed with error -22 [ 771.906337][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7758'. [ 771.975873][ T2244] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 772.001704][ T2245] netlink: 'syz.2.7757': attribute type 1 has an invalid length. [ 772.026808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.056919][ T2239] syzkaller0: entered promiscuous mode [ 772.064072][ T2239] syzkaller0: entered allmulticast mode [ 772.189068][ T2245] bond4: entered promiscuous mode [ 772.207485][ T2245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 772.224154][ T2252] netlink: 'syz.2.7757': attribute type 1 has an invalid length. [ 772.243934][ T2252] netlink: 'syz.2.7757': attribute type 1 has an invalid length. [ 772.433389][ T2256] ipt_REJECT: TCP_RESET invalid for non-tcp [ 772.474057][ T2258] x_tables: ip_tables: REJECT target: only valid in filter table, not [ 772.616615][ T2262] netlink: 'syz.3.7761': attribute type 21 has an invalid length. [ 772.626215][ T2262] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7761'. [ 774.974161][ T2262] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7761'. [ 775.327261][ T2314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7774'. [ 775.393749][ T2315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7774'. [ 775.631538][ T2333] syzkaller0: entered promiscuous mode [ 775.637985][ T2333] syzkaller0: entered allmulticast mode [ 775.769473][ T2341] pimreg: entered allmulticast mode [ 775.935590][ T2345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7786'. [ 776.068121][ T2364] netlink: 'syz.0.7792': attribute type 5 has an invalid length. [ 776.267984][ T2373] bridge0: entered promiscuous mode [ 776.273428][ T2373] bridge0: entered allmulticast mode [ 776.431144][ T2386] __nla_validate_parse: 1 callbacks suppressed [ 776.431175][ T2386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7799'. [ 776.685728][ T2376] nbd5: detected capacity change from 0 to 63 [ 776.794397][ T5852] block nbd5: Receive control failed (result -104) [ 776.803075][ T5851] block nbd5: Receive control failed (result -32) [ 776.840973][ T2395] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.7802'. [ 776.861154][ T2397] netlink: 'syz.2.7801': attribute type 9 has an invalid length. [ 776.862433][ T2392] netlink: 'syz.2.7801': attribute type 9 has an invalid length. [ 777.073252][ T2405] netlink: 'syz.1.7805': attribute type 1 has an invalid length. [ 777.146528][ T2405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7805'. [ 777.228864][ T2426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7808'. [ 777.261597][ T2433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7809'. [ 777.278410][ T2420] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 777.279381][ T2409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.385753][ T2421] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7808'. [ 777.634187][ T2467] Bluetooth: MGMT ver 1.23 [ 778.055463][ T2485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7818'. [ 778.343783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.708133][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 779.715715][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 780.165168][ T2421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.587603][ T2508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7826'. [ 780.651001][ T2519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7826'. [ 780.719384][ T2521] sctp: [Deprecated]: syz.1.7829 (pid 2521) Use of int in max_burst socket option. [ 780.719384][ T2521] Use struct sctp_assoc_value instead [ 781.383594][ T2505] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.398604][ T2505] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 781.624221][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.653736][ T7086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.680187][T26169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.699095][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7834'. [ 781.712786][T13107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.762203][ T2556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7834'. [ 782.499415][ T2618] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7848'. [ 782.523284][ T2621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.544349][ T2621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.557562][ T2621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.580308][ T2631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.594618][ T2619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.613171][ T2632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7849'. [ 782.797994][ T2632] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 782.814009][ T2632] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7849'. [ 783.185553][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7861'. [ 783.251769][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7863'. [ 783.271607][ T2676] erspan0: default FDB implementation only supports local addresses [ 783.326533][ T2676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.333842][ T2676] IPv6: NLM_F_CREATE should be set when creating new route [ 783.341102][ T2676] IPv6: NLM_F_CREATE should be set when creating new route [ 783.348374][ T2676] IPv6: NLM_F_CREATE should be set when creating new route [ 783.396799][ T2681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 783.515658][ T2690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7865'. [ 783.630642][ T2695] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7866'. [ 784.103157][ T2725] syzkaller0: entered promiscuous mode [ 784.120688][ T2725] syzkaller0: entered allmulticast mode [ 784.234524][ T2732] net_ratelimit: 1 callbacks suppressed [ 784.234558][ T2732] openvswitch: netlink: EtherType 50a is less than min 600 [ 784.338541][ T2732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7878'. [ 784.384488][ T2732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.394665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.450165][ T2745] netlink: 'syz.2.7882': attribute type 22 has an invalid length. [ 784.552220][ T2754] veth1_to_bond: entered allmulticast mode [ 784.565912][ T2745] netlink: 'syz.2.7882': attribute type 22 has an invalid length. [ 784.566762][ T2749] syzkaller0: entered promiscuous mode [ 784.598664][ T2749] syzkaller0: entered allmulticast mode [ 784.672959][ T2756] veth1_to_bond: left allmulticast mode [ 784.850270][ T2770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.004792][ T2776] netlink: 'syz.1.7889': attribute type 1 has an invalid length. [ 785.102646][ T2792] netlink: 'syz.3.7893': attribute type 1 has an invalid length. [ 785.116546][ T2776] bond5: entered promiscuous mode [ 785.122821][ T2776] bond5: entered allmulticast mode [ 785.135838][ T2776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.258148][ T2792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 785.275067][ T2798] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 785.328837][ T2798] bond3: entered allmulticast mode [ 785.380590][ T2800] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 785.474105][ T2819] syzkaller1: entered promiscuous mode [ 785.479661][ T2819] syzkaller1: entered allmulticast mode [ 785.487769][ T2819] syz_tun: entered promiscuous mode [ 785.749276][ T2840] ipt_ECN: cannot use operation on non-tcp rule [ 785.939515][ T2857] netlink: 'syz.3.7907': attribute type 3 has an invalid length. [ 786.248003][ T2891] netlink: 'syz.3.7912': attribute type 1 has an invalid length. [ 786.816413][ T2906] netlink: 'syz.4.7917': attribute type 1 has an invalid length. [ 786.886103][ T2906] bond8: (slave geneve4): making interface the new active one [ 786.897115][ T2906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.907224][ T2906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.911225][ T2909] __nla_validate_parse: 13 callbacks suppressed [ 786.911241][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7916'. [ 786.930850][ T2906] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 786.939710][ T7098] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 786.956477][ T7098] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 786.969421][ T2916] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7919'. [ 786.977672][ T7098] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 786.987446][ T7098] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 786.998856][ T2906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7917'. [ 787.008679][ T2909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7916'. [ 787.017858][ T2909] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7916'. [ 787.027262][ T2909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7916'. [ 787.036132][ T2909] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7916'. [ 787.057594][ T2906] 8021q: adding VLAN 0 to HW filter on device bond8 [ 787.076556][ T2913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.151951][ T2915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7918'. [ 787.161202][ T2923] 8021q: VLANs not supported on ip6tnl0 [ 787.204268][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.216746][ T2925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7922'. [ 787.739701][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.807845][ T2954] : entered promiscuous mode [ 787.914023][ T2959] tipc: Invalid UDP bearer configuration [ 787.914076][ T2959] tipc: Enabling of bearer rejected, failed to enable media [ 788.027996][ T2961] xt_hashlimit: invalid interval [ 788.041905][ T2961] netlink: 'syz.4.7932': attribute type 61 has an invalid length. [ 788.099192][ T2961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7932'. [ 788.168454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.251222][ T2973] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 788.321728][ T2973] bond5 (unregistering): Released all slaves [ 789.059566][ T3023] netlink: 'syz.4.7947': attribute type 4 has an invalid length. [ 789.068832][ T3023] netlink: 'syz.4.7947': attribute type 1 has an invalid length. [ 789.614901][ T3069] syzkaller0: entered promiscuous mode [ 789.620538][ T3069] syzkaller0: entered allmulticast mode [ 789.690679][ T7089] net_ratelimit: 6 callbacks suppressed [ 789.690696][ T7089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.938352][ T3082] x_tables: duplicate underflow at hook 2 [ 790.155484][ T3101] syzkaller0: entered promiscuous mode [ 790.165725][ T3101] syzkaller0: entered allmulticast mode [ 790.237956][ T3108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 790.254815][ T3105] validate_nla: 3 callbacks suppressed [ 790.254832][ T3105] netlink: 'syz.4.7974': attribute type 29 has an invalid length. [ 790.269212][ T3108] xt_hashlimit: size too large, truncated to 1048576 [ 790.476966][ T3125] netlink: 'syz.2.7979': attribute type 10 has an invalid length. [ 790.496551][ T3125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.521003][ T3125] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 790.673324][ T3139] IPv6: sit1: Disabled Multicast RS [ 790.700811][ T3139] sit1: entered allmulticast mode [ 790.861577][ T3151] x_tables: duplicate underflow at hook 1 [ 790.956955][ T3506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.003607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.226082][ T2980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.350980][ T3176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.370483][ T3176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.024349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.070673][ T7098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.206093][ T3222] __nla_validate_parse: 12 callbacks suppressed [ 792.206112][ T3222] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8002'. [ 792.284076][ T3222] bridge_slave_1: default FDB implementation only supports local addresses [ 792.503737][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 792.546674][ T3243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8005'. [ 792.580086][ T3251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.604969][ T3250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8007'. [ 792.686151][ T3251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8008'. [ 792.757562][ T3260] syzkaller1: entered allmulticast mode [ 792.758357][ T3255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8009'. [ 792.826617][ T3269] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.8012'. [ 793.181974][ T3284] ±ÿ_congesti speed is unknown, defaulting to 1000 [ 793.361958][ T3290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8015'. [ 793.695086][ T3311] syzkaller0: entered promiscuous mode [ 793.700595][ T3311] syzkaller0: entered allmulticast mode [ 794.545079][ T3333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8030'. [ 794.646339][ T3333] bond0: entered promiscuous mode [ 794.663789][ T3333] bond_slave_0: entered promiscuous mode [ 794.684325][ T3333] bond_slave_1: entered promiscuous mode [ 794.705906][ T3333] bridge_slave_1: entered promiscuous mode [ 794.714572][ T3333] bond0: left promiscuous mode [ 794.719360][ T3333] bond_slave_0: left promiscuous mode [ 794.724928][ T3333] bond_slave_1: left promiscuous mode [ 794.730493][ T3333] bridge_slave_1: left promiscuous mode [ 794.804231][ T7086] net_ratelimit: 143 callbacks suppressed [ 794.804247][ T7086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.865254][ T3346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8033'. [ 794.983828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.064414][ T3506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.073578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.169692][ T3366] delete_channel: no stack [ 795.275161][ T3369] veth1_macvtap: left promiscuous mode [ 795.415597][ T3378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8042'. [ 795.733879][ T3386] netlink: 'syz.3.8046': attribute type 11 has an invalid length. [ 795.826640][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.856138][ T3395] netlink: 'syz.2.8045': attribute type 1 has an invalid length. [ 795.881054][ T3395] netlink: 'syz.2.8045': attribute type 2 has an invalid length. [ 796.045329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.222406][ T30] audit: type=1804 audit(1777175015.859:13): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8054" name="/newroot/308/cgroup.controllers" dev="tmpfs" ino=1589 res=1 errno=0 [ 796.255713][ T30] audit: type=1800 audit(1777175015.859:14): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8054" name="cgroup.controllers" dev="tmpfs" ino=1589 res=0 errno=0 [ 796.313777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.316034][ T3433] netlink: 'syz.0.8053': attribute type 4 has an invalid length. [ 796.332811][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.343798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.352605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.370827][ T3433] netlink: 'syz.0.8053': attribute type 4 has an invalid length. [ 796.462056][ T3445] x_tables: duplicate underflow at hook 1 [ 796.580824][ T3451] syzkaller1: entered promiscuous mode [ 796.592223][ T3451] syzkaller1: entered allmulticast mode [ 796.810656][ T3464] netlink: 'syz.2.8063': attribute type 1 has an invalid length. [ 797.243186][ T3491] bond5: (slave bond_slave_1): Device is not our slave [ 797.250083][ T3491] bond5: option active_slave: invalid value (bond_slave_1) [ 797.273899][ T3491] bond5 (unregistering): Released all slaves [ 797.319730][ T3505] __nla_validate_parse: 3 callbacks suppressed [ 797.319746][ T3505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8077'. [ 797.445665][ T3511] tipc: Enabling of bearer rejected, failed to enable media [ 797.496447][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8078'. [ 797.496854][ T3518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8082'. [ 797.670357][ T3530] pim6reg1: entered promiscuous mode [ 797.675686][ T3530] pim6reg1: entered allmulticast mode [ 797.826462][ T3538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8088'. [ 797.864900][ T3542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8089'. [ 797.874026][ T3542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8089'. [ 798.087003][ T3556] netlink: 'syz.1.8094': attribute type 1 has an invalid length. [ 798.233375][ T3575] veth0: entered promiscuous mode [ 798.239513][ T3575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8099'. [ 798.413171][ T3591] netlink: 'syz.1.8104': attribute type 7 has an invalid length. [ 798.421529][ T3591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8104'. [ 798.431823][ T3591] netlink: 'syz.1.8104': attribute type 7 has an invalid length. [ 798.440824][ T3591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8104'. [ 799.213868][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8112'. [ 799.700571][ T3653] netlink: 'syz.0.8121': attribute type 15 has an invalid length. [ 799.754757][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 799.767033][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 799.775766][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 799.814912][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 799.920087][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.965338][ T3656] net_ratelimit: 10 callbacks suppressed [ 799.965353][ T3656] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 800.016926][ T3649] bond0: (slave dummy0): Releasing backup interface [ 800.025198][ T3649] dummy0 (unregistering): left promiscuous mode [ 800.543852][ T3695] erspan0: entered promiscuous mode [ 800.992018][ T3716] bond5: option all_slaves_active: invalid value (222) [ 801.015474][ T3716] bond5 (unregistering): Released all slaves [ 801.274090][ T3731] Bluetooth: MGMT ver 1.23 [ 801.509000][ T3741] validate_nla: 2 callbacks suppressed [ 801.509018][ T3741] netlink: 'syz.0.8144': attribute type 2 has an invalid length. [ 801.545404][ T3743] tipc: Enabling of bearer rejected, failed to enable media [ 801.624347][ T3752] syzkaller0: entered promiscuous mode [ 801.636401][ T3752] syzkaller0: entered allmulticast mode [ 801.848233][ T3766] netlink: 'syz.2.8150': attribute type 1 has an invalid length. [ 801.895362][ T3766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 801.938758][ T3766] bond5: (slave geneve2): making interface the new active one [ 801.947961][ T3766] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 801.956644][ T48] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 801.973398][ T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.007012][ T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.055465][ T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 802.112188][ T2978] hid (null): global environment stack underflow [ 802.177744][ T2978] hid-generic 0005:0001:0004.0002: global environment stack underflow [ 802.214109][ T3780] openvswitch: netlink: Message has 8 unknown bytes. [ 802.227807][ T2978] hid-generic 0005:0001:0004.0002: item 0 0 1 11 parsing failed [ 802.256791][ T2978] hid-generic 0005:0001:0004.0002: probe with driver hid-generic failed with error -22 [ 802.277071][ T3795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 802.657995][ T3813] syzkaller0: entered promiscuous mode [ 802.663509][ T3813] syzkaller0: entered allmulticast mode [ 802.696479][ T3826] netlink: 'syz.4.8169': attribute type 1 has an invalid length. [ 802.882934][ T3828] macvlan0: entered promiscuous mode [ 802.901027][ T3828] macvlan0: entered allmulticast mode [ 802.928506][ T3828] bond9: (slave macvlan0): Opening slave failed [ 802.988424][ T3845] __nla_validate_parse: 21 callbacks suppressed [ 802.988440][ T3845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8170'. [ 803.448327][ T3859] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8173'. [ 803.739253][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8178'. [ 803.770200][ T3880] tipc: Started in network mode [ 803.780757][ T3880] tipc: Node identity 16ef2b10fb76, cluster identity 4711 [ 803.794520][ T3880] tipc: Enabled bearer , priority 0 [ 803.802216][ T3880] syzkaller0: entered promiscuous mode [ 803.807696][ T3880] syzkaller0: entered allmulticast mode [ 804.020509][ T3901] pim6reg1: entered promiscuous mode [ 804.027088][ T3901] pim6reg1: entered allmulticast mode [ 804.035709][ T3901] netlink: 336 bytes leftover after parsing attributes in process `syz.4.8183'. [ 804.051313][ T3880] tipc: Resetting bearer [ 804.060014][ T3877] tipc: Resetting bearer [ 804.079640][ T3877] tipc: Disabling bearer [ 804.285922][ T3913] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 804.295532][ T3913] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 804.579763][ T3933] netlink: 'syz.4.8189': attribute type 4 has an invalid length. [ 804.768249][ T3932] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8191'. [ 804.808272][ T3946] netlink: 'syz.4.8193': attribute type 2 has an invalid length. [ 804.823714][ T3947] xt_hashlimit: invalid interval [ 804.931620][ T3953] netlink: 'syz.3.8198': attribute type 2 has an invalid length. [ 804.939459][ T3953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8198'. [ 805.029070][ T3961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8200'. [ 805.137359][ T3956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.147891][ T3956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.158123][ T3956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.330036][ T3956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.340560][ T3956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.350838][ T3956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.419397][ T3982] syzkaller0: entered promiscuous mode [ 805.424893][ T3982] syzkaller0: entered allmulticast mode [ 805.528345][ T3956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.539555][ T3956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.549830][ T3956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 805.681664][ T3996] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.8212'. [ 805.690831][ T3996] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.8212'. [ 805.802966][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8213'. [ 805.812806][ T3999] netlink: 'syz.0.8213': attribute type 12 has an invalid length. [ 805.826637][ T3956] bond0: (slave netdevsim0): Releasing backup interface [ 805.837187][ T3999] netlink: 'syz.0.8213': attribute type 11 has an invalid length. [ 805.849739][ T3956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.860742][ T3956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.872381][ T3956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 806.254502][ T4011] xt_HMARK: spi-set and port-set can't be combined [ 806.276771][ T7089] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.299035][ T7089] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.317914][ T7089] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.489191][ T7086] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.535749][ T7086] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.555475][ T7086] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.581533][ T7086] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.593033][ T7086] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.620949][ T7086] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.638096][ T13] tipc: Subscription rejected, illegal request [ 806.648202][ T4032] bridge_slave_0: left allmulticast mode [ 806.665382][ T4032] bridge_slave_0: left promiscuous mode [ 806.684106][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.842060][ T7086] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.856071][ T7086] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.867661][ T7086] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.971764][ T4044] syzkaller0: entered promiscuous mode [ 806.977840][ T4044] syzkaller0: entered allmulticast mode [ 807.234687][ T25] block nbd5: Connection timed out, retrying (0/2 alive) [ 807.242785][ T25] block nbd5: Connection timed out, retrying (0/2 alive) [ 807.250962][ T25] block nbd5: Connection timed out, retrying (0/2 alive) [ 807.258045][ T25] block nbd5: Connection timed out, retrying (0/2 alive) [ 807.266988][ T25] block nbd5: Dead connection, failed to find a fallback [ 807.274035][ T25] block nbd5: shutting down sockets [ 807.279313][ T25] blk_print_req_error: 135 callbacks suppressed [ 807.279328][ T25] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.294589][ T25] buffer_io_error: 135 callbacks suppressed [ 807.294602][ T25] Buffer I/O error on dev nbd5, logical block 3, async page read [ 807.308268][ T25] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.317305][ T25] Buffer I/O error on dev nbd5, logical block 2, async page read [ 807.325098][ T25] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.334138][ T25] Buffer I/O error on dev nbd5, logical block 1, async page read [ 807.342865][ T25] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.364190][ T25] Buffer I/O error on dev nbd5, logical block 0, async page read [ 807.372154][ T2388] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.381195][ T2388] Buffer I/O error on dev nbd5, logical block 0, async page read [ 807.389068][ T2388] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.398101][ T2388] Buffer I/O error on dev nbd5, logical block 1, async page read [ 807.405995][ T2388] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.415042][ T2388] Buffer I/O error on dev nbd5, logical block 2, async page read [ 807.420873][T12223] lec:lec_start_xmit: lec0:No lecd attached [ 807.422892][ T2388] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.437702][ T2388] Buffer I/O error on dev nbd5, logical block 3, async page read [ 807.445578][ T2388] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.454615][ T2388] Buffer I/O error on dev nbd5, logical block 0, async page read [ 807.470884][ T2388] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.479930][ T2388] Buffer I/O error on dev nbd5, logical block 1, async page read [ 807.490273][ T2388] ldm_validate_partition_table(): Disk read failed. [ 807.499857][ T2388] Dev nbd5: unable to read RDB block 0 [ 807.507356][ T2388] nbd5: unable to read partition table [ 807.577854][ T2388] ldm_validate_partition_table(): Disk read failed. [ 807.588999][ T2388] Dev nbd5: unable to read RDB block 0 [ 807.610493][ T2388] nbd5: unable to read partition table [ 808.345361][ T4018] Bluetooth: hci2: command 0x0401 tx timeout [ 808.345518][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 809.909406][ T4054] syzkaller0: entered promiscuous mode [ 809.915730][ T4054] syzkaller0: entered allmulticast mode [ 809.929732][ T4071] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 810.313401][ T4089] __nla_validate_parse: 5 callbacks suppressed [ 810.385947][ T4089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8232'. [ 810.397168][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8238'. [ 810.406103][ T4103] bridge_slave_1: left allmulticast mode [ 810.411760][ T4103] bridge_slave_1: left promiscuous mode [ 810.417522][ T4103] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.505630][ T4103] bridge_slave_0: left allmulticast mode [ 810.511297][ T4103] bridge_slave_0: left promiscuous mode [ 810.517369][ T4103] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.539028][ T4111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8241'. [ 810.738066][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8240'. [ 810.747741][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8240'. [ 810.760903][ T4119] netlink: 'syz.4.8240': attribute type 3 has an invalid length. [ 810.809045][ T4118] syzkaller0: entered promiscuous mode [ 810.814541][ T4118] syzkaller0: entered allmulticast mode [ 811.137372][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'. [ 812.752635][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 812.760729][ C0] lec:lec_tx_timeout: lec0 [ 812.765884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 813.789602][ T4158] ipt_ECN: cannot use operation on non-tcp rule [ 814.243291][ T4190] ip6t_srh: unknown srh match flags 4000 [ 814.317180][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8262'. [ 814.360884][ T4194] syzkaller0: entered promiscuous mode [ 814.375733][ T4194] syzkaller0: entered allmulticast mode [ 814.424301][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8265'. [ 814.434757][ T4198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8264'. [ 814.445632][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8264'. [ 814.509255][ T4208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.516546][ T4208] IPv6: NLM_F_CREATE should be set when creating new route [ 814.523859][ T4208] IPv6: NLM_F_CREATE should be set when creating new route [ 814.531105][ T4208] IPv6: NLM_F_CREATE should be set when creating new route [ 814.550250][ T4202] bridge_slave_0: entered allmulticast mode [ 814.551186][ T4208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.607424][ T4211] netlink: 'syz.2.8269': attribute type 1 has an invalid length. [ 814.766582][ T4222] xt_hashlimit: overflow, rate too high: 0 [ 815.066838][ T4243] netlink: 'syz.0.8275': attribute type 12 has an invalid length. [ 815.354826][ T4254] netlink: 'syz.4.8280': attribute type 1 has an invalid length. [ 815.365197][ T4253] __nla_validate_parse: 13 callbacks suppressed [ 815.365215][ T4253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8279'. [ 815.403649][ T4254] 8021q: adding VLAN 0 to HW filter on device bond10 [ 815.435854][ T4254] bond10: (slave veth0_to_bond): making interface the new active one [ 815.458652][ T4254] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 815.483757][ T4257] syzkaller0: entered promiscuous mode [ 815.489244][ T4257] syzkaller0: entered allmulticast mode [ 815.649953][ T4267] netlink: 'syz.3.8286': attribute type 178 has an invalid length. [ 815.675461][ T4267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8286'. [ 815.702213][ T4268] netlink: 'syz.4.8285': attribute type 10 has an invalid length. [ 815.742562][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.751878][ T4268] batadv0: entered promiscuous mode [ 815.760818][ T4268] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 815.856521][ T4275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8288'. [ 815.947063][ T139] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.956004][ T139] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.964872][ T139] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 815.973821][ T139] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 816.088344][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8294'. [ 816.098859][ T4290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8294'. [ 816.198244][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8297'. [ 816.221696][ T4296] netlink: 'syz.2.8296': attribute type 1 has an invalid length. [ 816.260417][ T4296] bond6: entered promiscuous mode [ 816.265884][ T4296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 816.318520][ T4296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 816.331346][ T4296] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 816.358790][ T4296] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 816.371306][ T4296] bond6: (slave ip6gre2): making interface the new active one [ 816.378785][ T4296] ip6gre2: entered promiscuous mode [ 816.385693][ T4296] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 816.483312][ T4307] syzkaller0: entered promiscuous mode [ 816.488801][ T4307] syzkaller0: entered allmulticast mode [ 816.493367][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8302'. [ 816.702331][ T4323] netlink: 'syz.4.8306': attribute type 6 has an invalid length. [ 816.710102][ T4323] netlink: 'syz.4.8306': attribute type 7 has an invalid length. [ 816.717827][ T4323] netlink: 'syz.4.8306': attribute type 8 has an invalid length. [ 816.831273][ T4330] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 816.870655][ T4330] 8021q: adding VLAN 0 to HW filter on device bond11 [ 816.941304][ T4335] erspan0: left promiscuous mode [ 817.066021][ T4341] netlink: 'syz.4.8308': attribute type 1 has an invalid length. [ 817.074764][ T4341] netlink: 'syz.4.8308': attribute type 2 has an invalid length. [ 817.090862][ T4335] bond0: left promiscuous mode [ 817.095968][ T4335] mac80211_hwsim hwsim70 wlan1: left promiscuous mode [ 817.207563][ T4346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8313'. [ 817.216822][ T4346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8313'. [ 817.226751][ T4346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8313'. [ 817.258664][ T4335] bridge_slave_0: left allmulticast mode [ 817.413700][ T4335] batadv_slave_0: left promiscuous mode [ 817.687464][ T4335] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 817.717102][ T4330] bond10: (slave veth0_to_bond): Releasing active interface [ 817.743356][ T4330] bond11: (slave veth0_to_bond): making interface the new active one [ 817.765451][ T4330] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 817.775114][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 817.775139][ C0] lec:lec_tx_timeout: lec0 [ 817.822928][ T7086] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.885005][ T7086] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.921821][ T7086] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.967400][ T7086] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.052508][ T4361] bridge_slave_1: left allmulticast mode [ 818.074795][ T4361] bridge_slave_1: left promiscuous mode [ 818.081733][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.115971][ T4361] bridge_slave_0: left allmulticast mode [ 818.121634][ T4361] bridge_slave_0: left promiscuous mode [ 818.127505][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.319716][ T4387] xt_ecn: cannot match TCP bits for non-tcp packets [ 819.140251][ T4424] netlink: 'syz.2.8336': attribute type 58 has an invalid length. [ 819.870500][ T4456] netlink: Unknown conntrack attr (type=2304, max=9) [ 820.055391][ T4460] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 820.074433][ T4460] xt_hashlimit: size too large, truncated to 1048576 [ 820.204783][ T4473] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 820.291169][ T4473] ±ÿ_congesti speed is unknown, defaulting to 1000 [ 820.489841][ T4480] __nla_validate_parse: 76 callbacks suppressed [ 820.489876][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8354'. [ 821.049635][ T4498] syzkaller0: entered allmulticast mode [ 821.161469][ T4508] ipt_REJECT: TCP_RESET invalid for non-tcp [ 821.820226][ T4525] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8368'. [ 822.107543][ T4537] syzkaller0: entered promiscuous mode [ 822.113043][ T4537] syzkaller0: entered allmulticast mode [ 822.230610][ T4548] x_tables: duplicate underflow at hook 1 [ 822.368841][ T4563] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8381'. [ 822.436488][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8383'. [ 822.476892][ T4570] veth1_macvtap: left promiscuous mode [ 822.826718][ T4586] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8389'. [ 822.904587][ T4590] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8391'. [ 822.914886][ T4590] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8391'. [ 822.934073][ T4592] netlink: 'syz.4.8392': attribute type 21 has an invalid length. [ 822.942092][ T4592] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8392'. [ 823.086658][ T4600] Cannot find add_set index 2 as target [ 823.094701][ T4601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8395'. [ 823.137489][ T4598] syzkaller0: entered promiscuous mode [ 823.142972][ T4598] syzkaller0: entered allmulticast mode [ 823.240311][ T4605] syzkaller0: entered promiscuous mode [ 823.245960][ T4605] syzkaller0: entered allmulticast mode [ 823.522676][ T4630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8405'. [ 823.938847][ T4656] syzkaller0: entered promiscuous mode [ 823.948059][ T4656] syzkaller0: entered allmulticast mode [ 823.971580][ T4653] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 824.135716][ T4671] syzkaller1: entered promiscuous mode [ 824.141318][ T4671] syzkaller1: entered allmulticast mode [ 824.798961][ T4701] x_tables: duplicate underflow at hook 1 [ 825.025975][ T4710] syzkaller0: entered promiscuous mode [ 825.031634][ T4710] syzkaller0: entered allmulticast mode [ 825.362980][ T4722] xt_socket: unknown flags 0x50 [ 825.401166][ T4726] netlink: 'syz.2.8436': attribute type 9 has an invalid length. [ 825.422098][ T4726] netlink: 'syz.2.8436': attribute type 9 has an invalid length. [ 825.914503][ T4747] syzkaller0: entered promiscuous mode [ 825.929572][ T4747] syzkaller0: entered allmulticast mode [ 826.499243][ T4785] __nla_validate_parse: 6 callbacks suppressed [ 826.499260][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8454'. [ 826.519763][ T4785] bridge_slave_1: default FDB implementation only supports local addresses [ 826.680904][ T4796] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8456'. [ 826.706399][ T4797] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8457'. [ 826.733323][ T4797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8457'. [ 826.909589][ T4802] syzkaller0: entered promiscuous mode [ 826.915290][ T4802] syzkaller0: entered allmulticast mode [ 827.054761][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8462'. [ 827.069238][ T4810] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8462'. [ 827.082288][ T4808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8461'. [ 827.103223][ T4813] netlink: 'syz.1.8463': attribute type 1 has an invalid length. [ 827.131460][ T4813] netlink: 'syz.1.8463': attribute type 1 has an invalid length. [ 827.379209][ T4826] netlink: 'syz.4.8465': attribute type 1 has an invalid length. [ 827.426957][ T4826] bond12: entered promiscuous mode [ 827.443586][ T4826] bond12: entered allmulticast mode [ 827.475727][ T4826] 8021q: adding VLAN 0 to HW filter on device bond12 [ 827.487727][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8465'. [ 827.549942][ T4825] tipc: New replicast peer: 172.20.20.187 [ 827.582875][ T4825] tipc: Enabled bearer , priority 10 [ 827.724349][ T4838] netlink: 'syz.4.8470': attribute type 1 has an invalid length. [ 827.844450][ T4846] veth1_macvtap: left promiscuous mode [ 827.849948][ T4846] macsec0: entered promiscuous mode [ 827.855154][ T4846] macsec0: entered allmulticast mode [ 827.864096][ T4846] veth1_macvtap: entered promiscuous mode [ 827.869838][ T4846] veth1_macvtap: entered allmulticast mode [ 827.878121][ T4846] macsec0: left promiscuous mode [ 827.883374][ T4846] macsec0: left allmulticast mode [ 827.888409][ T4846] veth1_macvtap: left allmulticast mode [ 827.940255][ T4847] netlink: 'syz.4.8473': attribute type 4 has an invalid length. [ 828.156250][ T4858] syzkaller0: entered promiscuous mode [ 828.161767][ T4858] syzkaller0: entered allmulticast mode [ 828.189837][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8478'. [ 828.204768][ T4860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8478'. [ 828.565096][ T4873] netlink: 'syz.1.8482': attribute type 1 has an invalid length. [ 828.583201][ T4873] netlink: 'syz.1.8482': attribute type 1 has an invalid length. [ 828.770068][ T4878] xt_hashlimit: size too large, truncated to 1048576 [ 829.009008][ T4873] syzkaller0: entered promiscuous mode [ 829.016458][ T4887] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 829.902287][ T5851] block nbd6: Receive control failed (result -32) [ 832.119103][ T4924] __nla_validate_parse: 1 callbacks suppressed [ 832.119123][ T4924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8495'. [ 832.151467][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8493'. [ 832.176828][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8495'. [ 832.230253][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8495'. [ 832.244415][ T4936] ip6erspan0: entered promiscuous mode [ 832.527062][ T4957] ip6gre2: entered allmulticast mode [ 832.546074][ T4959] syzkaller1: left promiscuous mode [ 832.551856][ T4959] syzkaller1: left allmulticast mode [ 832.601197][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8505'. [ 835.121282][ T4924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.344597][ T4975] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8508'. [ 835.356801][ T4977] netlink: 'syz.1.8511': attribute type 2 has an invalid length. [ 835.439870][ T4984] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 835.450257][ T4982] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 835.522599][ T4990] sctp: [Deprecated]: syz.1.8514 (pid 4990) Use of int in maxseg socket option. [ 835.522599][ T4990] Use struct sctp_assoc_value instead [ 835.562202][ T4996] netlink: 'syz.2.8516': attribute type 8 has an invalid length. [ 835.647178][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8519'. [ 835.707667][ T5012] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8521'. [ 835.779475][ T5016] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 835.805202][ T5022] delete_channel: no stack [ 836.031971][ T5017] delete_channel: no stack [ 836.173196][ T5043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8525'. [ 836.254025][ T5048] netlink: 'syz.1.8529': attribute type 3 has an invalid length. [ 836.606828][ T5074] netlink: 'syz.2.8533': attribute type 83 has an invalid length. [ 836.624836][ T5075] sctp: [Deprecated]: syz.4.8535 (pid 5075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.624836][ T5075] Use struct sctp_sack_info instead [ 836.758602][ T5085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8539'. [ 837.230181][ T5109] team0: Port device team_slave_0 removed [ 837.297554][ T5124] __nla_validate_parse: 2 callbacks suppressed [ 837.297570][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8551'. [ 837.318864][ T5124] bond0: entered promiscuous mode [ 837.323916][ T5124] mac80211_hwsim hwsim70 wlan1: entered promiscuous mode [ 837.332555][ T5124] bond0: left promiscuous mode [ 837.337349][ T5124] mac80211_hwsim hwsim70 wlan1: left promiscuous mode [ 837.385259][ T5129] block nbd7: Unsupported socket: should be TCP or UNIX. [ 837.427332][ T5132] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8554'. [ 837.438617][ T5132] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8554'. [ 837.603355][ T5142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.625516][ T5142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.635139][ T5142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.642536][ T5142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.755824][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8560'. [ 837.765704][ T5162] netlink: 'syz.3.8562': attribute type 29 has an invalid length. [ 837.765922][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8560'. [ 837.784866][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8562'. [ 837.854809][ T5164] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8563'. [ 837.866611][ T5164] netlink: 'syz.4.8563': attribute type 21 has an invalid length. [ 838.188862][ T5184] netlink: 'syz.3.8567': attribute type 4 has an invalid length. [ 838.369298][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8570'. [ 838.420863][ T5207] openvswitch: netlink: IPv6 tunnel dst address is zero [ 838.430132][ T5203] netlink: 'syz.3.8573': attribute type 1 has an invalid length. [ 838.632171][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8580'. [ 838.667838][ T5218] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 838.721741][ T5228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8581'. [ 838.785594][ T5218] team1: entered promiscuous mode [ 838.800051][ T5218] team1: entered allmulticast mode [ 839.668024][ T5267] netlink: 'syz.0.8593': attribute type 1 has an invalid length. [ 840.012077][ T5274] bond7: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 840.052872][ T5274] bond7: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 840.087231][ T5274] bond7: (slave ip6gre4): making interface the new active one [ 840.100341][ T5274] bond7: (slave ip6gre4): Enslaving as an active interface with an up link [ 840.116303][ T5292] netlink: 'syz.2.8597': attribute type 1 has an invalid length. [ 840.272936][ T5299] bond0: (slave bond_slave_0): Releasing backup interface [ 840.316282][ T5299] bond0: (slave bond_slave_1): Releasing backup interface [ 840.351210][ T5299] team0: Port device team_slave_0 removed [ 840.364491][ T5299] team0: Port device team_slave_1 removed [ 840.381107][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.388499][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.399129][ T5299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.406522][ T5299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.445833][ T5299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.099274][ T5354] netlink: 'syz.0.8617': attribute type 15 has an invalid length. [ 841.635048][ T5380] netlink: 'syz.3.8622': attribute type 1 has an invalid length. [ 841.846000][ T5380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 842.262545][ T5416] netlink: 'syz.4.8631': attribute type 6 has an invalid length. [ 842.481009][ T5432] syzkaller1: entered promiscuous mode [ 842.486830][ T5432] syzkaller1: entered allmulticast mode [ 842.720050][ T5435] __nla_validate_parse: 47 callbacks suppressed [ 842.720069][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8635'. [ 842.955535][ T5407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 843.230184][ T5450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8638'. [ 843.253175][ T5450] netlink: 'syz.0.8638': attribute type 7 has an invalid length. [ 843.271346][ T5450] netlink: 'syz.0.8638': attribute type 8 has an invalid length. [ 843.305329][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8638'. [ 843.337617][ T5452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8639'. [ 846.470263][ T5458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 846.992382][ T5530] netlink: 'syz.1.8657': attribute type 1 has an invalid length. [ 847.014475][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8658'. [ 847.025701][ T5530] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8657'. [ 847.039595][ T5536] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8658'. [ 847.049899][ T5530] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8657'. [ 847.058769][ T5530] netlink: 'syz.1.8657': attribute type 1 has an invalid length. [ 847.067989][ T5530] netlink: 'syz.1.8657': attribute type 8 has an invalid length. [ 847.075932][ T5530] netlink: 582 bytes leftover after parsing attributes in process `syz.1.8657'. [ 847.092436][ T5536] netlink: 'syz.3.8658': attribute type 3 has an invalid length. [ 847.100341][ T5530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8657'. [ 847.184797][ T5547] xt_hashlimit: size too large, truncated to 1048576 [ 848.386847][ T5585] __nla_validate_parse: 3 callbacks suppressed [ 848.386866][ T5585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8674'. [ 848.526730][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8677'. [ 848.615606][ T5598] syzkaller0: entered promiscuous mode [ 848.621272][ T5598] syzkaller0: entered allmulticast mode [ 848.733095][ T5600] netlink: 'syz.2.8679': attribute type 1 has an invalid length. [ 848.764618][ T5600] 8021q: adding VLAN 0 to HW filter on device bond8 [ 850.086186][ T5538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.249214][ T5610] 8021q: VLANs not supported on ip_vti0 [ 850.525756][ T5630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8686'. [ 850.651204][ T5638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8686'. [ 850.660376][ T5638] nbd: nbd64 already in use [ 850.686996][ T5645] syzkaller0: entered promiscuous mode [ 850.692574][ T5645] syzkaller0: entered allmulticast mode [ 850.816089][ T5659] sock: sock_timestamping_bind_phc: sock not bind to device [ 850.888641][ T4821] udevd[4821]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 854.583723][ C0] ip6_tunnel: ip6gre0 xmit: Local address not yet configured! [ 864.825431][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 869.960315][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 875.703872][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 875.711897][ C0] lec:lec_tx_timeout: lec0 [ 875.716723][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 880.743544][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 880.751579][ C0] lec:lec_tx_timeout: lec0 [ 907.494746][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8694'. [ 907.496420][ T5672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 907.583360][ T5673] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 907.656050][ T5675] bond13: (slave bond_slave_1): Device is not our slave [ 907.680748][ T5675] bond13: option active_slave: invalid value (bond_slave_1) [ 907.709046][ T5675] bond13 (unregistering): Released all slaves [ 907.738988][ T5690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8701'. [ 907.749762][ T5691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8701'. [ 907.840926][ T5679] bond13: (slave bond_slave_1): Device is not our slave [ 907.848132][ T5679] bond13: option active_slave: invalid value (bond_slave_1) [ 907.859181][ T5679] bond13 (unregistering): Released all slaves [ 908.064787][ T5707] syzkaller0: entered promiscuous mode [ 908.082989][ T5707] syzkaller0: entered allmulticast mode [ 908.160199][ T30] audit: type=1107 audit(1777175127.799:15): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 908.162860][ T5714] netlink: 'syz.0.8707': attribute type 1 has an invalid length. [ 908.491531][ T5739] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8714'. [ 908.571051][ T5737] macvtap2: entered promiscuous mode [ 908.576603][ T5737] macvtap2: entered allmulticast mode [ 908.581991][ T5737] veth1_vlan: entered allmulticast mode [ 908.601014][ T5737] macvtap3: entered promiscuous mode [ 908.607283][ T5737] macvtap3: entered allmulticast mode [ 908.657616][ T5746] netlink: 'syz.3.8715': attribute type 178 has an invalid length. [ 908.854266][ T5751] netlink: 'syz.0.8719': attribute type 1 has an invalid length. [ 908.875459][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8721'. [ 908.960186][ T5763] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 908.976523][ T5763] bond7 (unregistering): Released all slaves [ 909.009899][ T5768] 8021q: VLANs not supported on ip6_vti0 [ 909.062526][ T5770] xt_hashlimit: overflow, try lower: 3/0 [ 909.115193][ T5772] 8021q: VLANs not supported on syzkaller1 [ 909.330721][ T5780] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8729'. [ 909.410672][ T5782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8731'. [ 909.921159][ T5794] Cannot find set identified by id 3 to match [ 910.202890][ T5806] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 910.255241][ T5817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8741'. [ 910.448104][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8745'. [ 910.528091][ T5821] macvlan7: entered promiscuous mode [ 910.557080][ T5821] macvlan7: entered allmulticast mode [ 910.585167][ T5821] bond9: entered promiscuous mode [ 910.602105][ T5821] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 910.617450][ T5834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.632535][ T5821] bond9: left promiscuous mode [ 910.674721][ T5835] bridge0: port 2(vlan3) entered blocking state [ 910.681767][ T5835] bridge0: port 2(vlan3) entered disabled state [ 910.691064][ T5835] vlan3: entered allmulticast mode [ 910.696880][ T5835] geneve0: entered allmulticast mode [ 910.709873][ T5835] vlan3: entered promiscuous mode [ 910.714209][ T5840] netlink: 'syz.1.8749': attribute type 1 has an invalid length. [ 910.716550][ T5835] geneve0: entered promiscuous mode [ 911.017284][ T5854] netlink: 'syz.1.8754': attribute type 7 has an invalid length. [ 911.068871][ T5856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8753'. [ 911.073237][ T5850] syzkaller0: entered promiscuous mode [ 911.103720][ T5850] syzkaller0: entered allmulticast mode [ 911.121140][ T5857] lo: left promiscuous mode [ 911.137370][ T5850] 0: reclassify loop, rule prio 0, protocol 800 [ 911.239264][ T5857] erspan0: left promiscuous mode [ 912.036464][ T5857] gretap1: left promiscuous mode [ 912.045996][ T5857] gretap1: left allmulticast mode [ 912.074332][ T5857] bridge2: left promiscuous mode [ 912.119569][ T5857] macvlan2: left allmulticast mode [ 912.135329][ T5857] dummy0: left allmulticast mode [ 912.144046][ T5857] macvlan3: left allmulticast mode [ 912.169679][ T5857] vlan2: left allmulticast mode [ 912.174825][ T5857] bridge7: left allmulticast mode [ 912.185946][ T5857] veth5: left allmulticast mode [ 912.199680][ T5857] bond4: left promiscuous mode [ 912.232813][ T5857] bond6: left promiscuous mode [ 912.238093][ T5857] ip6gre2: left promiscuous mode [ 912.394881][ T7098] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.431198][ T7098] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 912.458122][ T7098] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.489390][ T7098] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.517542][ T7098] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 912.539314][ T7098] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.558602][ T7098] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.575225][ T7098] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 912.590468][ T7098] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.599862][ T7098] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.608707][ T7098] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 912.618461][ T7098] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 912.762203][ T5907] __nla_validate_parse: 2 callbacks suppressed [ 912.762249][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8764'. [ 913.006445][ T5928] tipc: Enabling of bearer rejected, failed to enable media [ 913.066408][ T5931] netlink: 'syz.3.8771': attribute type 2 has an invalid length. [ 913.074655][ T5934] netlink: 'syz.2.8772': attribute type 2 has an invalid length. [ 913.319625][ T5946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8775'. [ 913.386976][ T5952] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8776'. [ 913.433289][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8777'. [ 913.580629][ T5963] xt_TCPMSS: Only works on TCP SYN packets [ 913.602903][ T5966] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8779'. [ 913.952552][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8782'. [ 913.961805][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8782'. [ 913.982221][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8782'. [ 916.372132][ T5955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.384128][ T5961] netlink: 'syz.1.8778': attribute type 1 has an invalid length. [ 916.399562][ T5961] netlink: 'syz.1.8778': attribute type 1 has an invalid length. [ 916.941562][ T6000] can: request_module (can-proto-4) failed. [ 917.140730][ T6031] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8793'. [ 917.169220][ T6021] bond7: option resend_igmp: invalid value (32767) [ 917.176981][ T6021] bond7: option resend_igmp: allowed values 0 - 255 [ 917.195482][ T6021] bond7 (unregistering): Released all slaves [ 917.246736][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8798'. [ 917.449285][ T6054] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 917.476307][ T6054] bond0 (unregistering): Released all slaves [ 917.842826][ T6074] gretap1: entered promiscuous mode [ 917.871242][ T6074] batman_adv: batadv0: Adding interface: gretap1 [ 917.896179][ T6074] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 917.941738][ T6074] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 918.005225][ T6088] netlink: 'syz.4.8812': attribute type 28 has an invalid length. [ 918.037339][ T6088] netlink: 'syz.4.8812': attribute type 3 has an invalid length. [ 918.071515][ T6088] __nla_validate_parse: 7 callbacks suppressed [ 918.071532][ T6088] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8812'. [ 918.101965][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8813'. [ 918.129412][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8812'. [ 918.188348][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8812'. [ 918.208866][ T6093] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 918.356751][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8816'. [ 918.488768][ T6106] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8817'. [ 918.774723][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8822'. [ 918.821414][ T6123] xt_TCPMSS: Only works on TCP SYN packets [ 918.988369][ T6134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.036954][ T6134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8827'. [ 919.216258][ T6148] syz_tun: refused to change device tx_queue_len [ 919.321513][ T6159] netlink: 'syz.1.8835': attribute type 1 has an invalid length. [ 919.473640][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.549295][ T6160] bond0: (slave gretap2): making interface the new active one [ 919.559212][ T6160] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 919.780013][ T6171] vlan1: left allmulticast mode [ 919.786563][ T6171] veth0_vlan: left allmulticast mode [ 919.942674][ T6185] syzkaller0: entered promiscuous mode [ 919.950694][ T6185] 0: reclassify loop, rule prio 0, protocol 800 [ 920.182056][ T6189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 920.752174][ T6227] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 920.782776][ T6228] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 921.034835][ T6241] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 921.181722][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8862'. [ 921.315515][ T6254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8865'. [ 921.627691][ T6268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 921.674282][ T6271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 921.684408][ T6271] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 921.700719][ T6271] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 921.713137][ T6271] bond6: (slave xfrm1): making interface the new active one [ 921.721842][ T6271] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 922.302796][ T6258] syz.2.8866 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 922.331661][ T6258] CPU: 0 UID: 0 PID: 6258 Comm: syz.2.8866 Not tainted syzkaller #0 PREEMPT(full) [ 922.331686][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.331706][ T6258] Call Trace: [ 922.331714][ T6258] [ 922.331722][ T6258] dump_stack_lvl+0xe8/0x150 [ 922.331757][ T6258] dump_header+0xd3/0x4c0 [ 922.331785][ T6258] oom_kill_process+0x3ab/0x970 [ 922.331812][ T6258] out_of_memory+0x106c/0x1410 [ 922.331831][ T6258] ? try_charge_memcg+0xbb9/0x1570 [ 922.331858][ T6258] ? __pfx___mutex_lock+0x10/0x10 [ 922.331891][ T6258] ? __pfx_out_of_memory+0x10/0x10 [ 922.331908][ T6258] ? do_raw_spin_unlock+0xf5/0x210 [ 922.331943][ T6258] try_charge_memcg+0xc77/0x1570 [ 922.331985][ T6258] ? __pfx_try_charge_memcg+0x10/0x10 [ 922.332007][ T6258] ? percpu_ref_tryget+0x15/0x180 [ 922.332051][ T6258] ? charge_memcg+0x23/0x2b0 [ 922.332078][ T6258] charge_memcg+0x1a2/0x2b0 [ 922.332102][ T6258] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 922.332124][ T6258] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 922.332151][ T6258] __swap_cache_prepare_and_add+0xdc/0x700 [ 922.332176][ T6258] ? page_rmappable_folio+0x9a/0x170 [ 922.332209][ T6258] swap_cache_alloc_folio+0xf1/0x240 [ 922.332233][ T6258] swap_cluster_readahead+0x523/0x670 [ 922.332259][ T6258] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 922.332293][ T6258] ? get_vma_policy+0x27b/0x3c0 [ 922.332321][ T6258] swapin_readahead+0x196/0xc50 [ 922.332344][ T6258] ? swap_table_get+0x1e/0x260 [ 922.332376][ T6258] ? __pfx_swapin_readahead+0x10/0x10 [ 922.332397][ T6258] ? swap_table_get+0x1e/0x260 [ 922.332423][ T6258] ? swap_table_get+0x1e/0x260 [ 922.332447][ T6258] ? swap_table_get+0x1e/0x260 [ 922.332474][ T6258] ? swap_table_get+0x216/0x260 [ 922.332502][ T6258] ? swap_cache_get_folio+0x2e4/0x2f0 [ 922.332537][ T6258] do_swap_page+0x555/0x5120 [ 922.332570][ T6258] ? __pte_offset_map+0x29/0x240 [ 922.332591][ T6258] ? __pte_offset_map+0x29/0x240 [ 922.332619][ T6258] ? do_swap_page+0x128/0x5120 [ 922.332646][ T6258] ? __pfx_do_swap_page+0x10/0x10 [ 922.332677][ T6258] ? __pte_offset_map+0x1ae/0x240 [ 922.332700][ T6258] ? pte_offset_map_rw_nolock+0xea/0x160 [ 922.332722][ T6258] handle_mm_fault+0x12d2/0x3170 [ 922.332756][ T6258] ? handle_mm_fault+0xee/0x3170 [ 922.332782][ T6258] ? __pfx_handle_mm_fault+0x10/0x10 [ 922.332799][ T6258] ? lock_vma_under_rcu+0x45a/0x500 [ 922.332849][ T6258] do_user_addr_fault+0xa73/0x1340 [ 922.332884][ T6258] ? rcu_is_watching+0x15/0xb0 [ 922.332903][ T6258] ? trace_page_fault_user+0x84/0x1e0 [ 922.332937][ T6258] exc_page_fault+0x6a/0xc0 [ 922.332963][ T6258] asm_exc_page_fault+0x26/0x30 [ 922.332981][ T6258] RIP: 0033:0x7f796fe65543 [ 922.333000][ T6258] Code: 53 48 83 ec 38 80 3d db ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d aa 01 ee 00 00 49 89 f1 41 89 d2 89 cb 05 b6 ca 3a 00 01 41 89 d7 0f 85 45 04 00 00 80 3d 76 01 ee 00 [ 922.333015][ T6258] RSP: 002b:00007ffc4b27aff0 EFLAGS: 00010202 [ 922.333032][ T6258] RAX: 00007f7970216090 RBX: 0000000000000026 RCX: 0000000000000026 [ 922.333045][ T6258] RDX: 0000000000000001 RSI: 00007f7970216128 RDI: 0000000000000005 [ 922.333057][ T6258] RBP: 00007f7970217da0 R08: 0000000000000000 R09: 00007f7970216128 [ 922.333069][ T6258] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000e1250 [ 922.333080][ T6258] R13: 00007f797021618c R14: 00000000000e0f84 R15: 00007ffc4b27b160 [ 922.333113][ T6258] [ 922.672507][ T6258] memory: usage 307200kB, limit 307200kB, failcnt 483 [ 922.679466][ T6258] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 922.687779][ T6258] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 922.695130][ T6258] Memory cgroup stats for /syz2: [ 922.695466][ T6258] cache 0 [ 922.706324][ T6258] rss 0 [ 922.709109][ T6258] rss_huge 0 [ 922.712327][ T6258] shmem 0 [ 922.715636][ T6258] mapped_file 0 [ 922.719120][ T6258] dirty 0 [ 922.722075][ T6258] writeback 0 [ 922.725539][ T6258] workingset_refault_anon 12 [ 922.730130][ T6258] workingset_refault_file 1 [ 922.734701][ T6258] swap 106496 [ 922.737987][ T6258] swapcached 184320 [ 922.741805][ T6258] pgpgin 148152 [ 922.745694][ T6258] pgpgout 148145 [ 922.749241][ T6258] pgfault 296634 [ 922.752783][ T6258] pgmajfault 8 [ 922.756203][ T6258] inactive_anon 28672 [ 922.760184][ T6258] active_anon 0 [ 922.764072][ T6258] inactive_file 0 [ 922.767708][ T6258] active_file 0 [ 922.771165][ T6258] unevictable 0 [ 922.776029][ T6258] hierarchical_memory_limit 314572800 [ 922.781425][ T6258] hierarchical_memsw_limit 9223372036854771712 [ 922.787678][ T6258] total_cache 0 [ 922.791137][ T6258] total_rss 0 [ 922.794469][ T6258] total_rss_huge 0 [ 922.798187][ T6258] total_shmem 0 [ 922.801645][ T6258] total_mapped_file 0 [ 922.805939][ T6258] total_dirty 0 [ 922.809427][ T6258] total_writeback 0 [ 922.813237][ T6258] total_workingset_refault_anon 12 [ 922.818433][ T6258] total_workingset_refault_file 1 [ 922.823592][ T6258] total_swap 106496 [ 922.827407][ T6258] total_swapcached 184320 [ 922.831734][ T6258] total_pgpgin 148213 [ 922.836047][ T6258] total_pgpgout 148206 [ 922.840124][ T6258] total_pgfault 296703 [ 922.844495][ T6258] total_pgmajfault 8 [ 922.848391][ T6258] total_inactive_anon 28672 [ 922.852894][ T6258] total_active_anon 0 [ 922.856936][ T6258] total_inactive_file 0 [ 922.861090][ T6258] total_active_file 0 [ 922.865464][ T6258] total_unevictable 0 [ 922.869451][ T6258] anon_cost 0 [ 922.872734][ T6258] file_cost 0 [ 922.876100][ T6258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8866,pid=6258,uid=0 [ 922.895855][ T6258] Memory cgroup out of memory: Killed process 6258 (syz.2.8866) total-vm:98584kB, anon-rss:1244kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 923.261878][ T6284] netlink: 'syz.0.8873': attribute type 10 has an invalid length. [ 923.305734][ T6284] veth0_vlan: left promiscuous mode [ 923.331583][ T6284] veth0_vlan: entered promiscuous mode [ 923.372162][ T6284] team0: Device veth0_vlan failed to register rx_handler [ 923.416434][ T6286] atomic_op ffff8880767b3998 conn xmit_atomic 0000000000000000 [ 923.741619][ T6289] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 923.846406][ T6295] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 924.151414][ T6257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.388614][ T6304] xt_recent: Unsupported userspace flags (000000b1) [ 924.426397][ T6303] sit3: entered promiscuous mode [ 924.437480][ T6303] sit3: entered allmulticast mode [ 924.610887][ T6305] tipc: Enabled bearer , priority 0 [ 924.992132][ T6305] syzkaller0: entered promiscuous mode [ 925.011667][ T6305] syzkaller0: entered allmulticast mode [ 925.025067][ T6305] tipc: Resetting bearer [ 925.208960][ T6348] netlink: 'syz.1.8885': attribute type 1 has an invalid length. [ 925.293203][ T6353] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 925.317105][ T6353] __nla_validate_parse: 1 callbacks suppressed [ 925.317121][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8889'. [ 925.411583][ T139] tipc: Resetting bearer [ 925.424919][ T6301] tipc: Resetting bearer [ 927.975986][ T6301] tipc: Disabling bearer [ 928.238382][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8892'. [ 928.252258][ T6363] netlink: 'syz.3.8891': attribute type 4 has an invalid length. [ 928.487012][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8895'. [ 928.618237][ T6384] netlink: 'syz.3.8899': attribute type 1 has an invalid length. [ 928.670690][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8899'. [ 928.698052][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8897'. [ 928.797668][ T6384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 928.819758][ T6387] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 928.841632][ T6387] bond7: entered allmulticast mode [ 929.265314][ T6419] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8909'. [ 929.295052][ T6419] netlink: 348 bytes leftover after parsing attributes in process `syz.0.8909'. [ 929.592156][ T6432] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 929.615706][ T6441] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 929.822214][ T6454] netlink: 'syz.2.8919': attribute type 4 has an invalid length. [ 929.867465][ T6454] netlink: 'syz.2.8919': attribute type 4 has an invalid length. [ 929.887190][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8920'. [ 929.919971][ T6458] netlink: 'syz.1.8920': attribute type 1 has an invalid length. [ 929.934655][ T6458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8920'. [ 930.056564][ T6464] rdma_rxe: rxe_newlink: failed to add lo [ 930.116784][ T6468] netlink: 'syz.2.8923': attribute type 1 has an invalid length. [ 930.166986][ T6468] bond10: entered promiscuous mode [ 930.172476][ T6468] 8021q: adding VLAN 0 to HW filter on device bond10 [ 930.219984][ T6477] netlink: 41 bytes leftover after parsing attributes in process `syz.3.8925'. [ 930.297190][ T4018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 930.308784][ T4018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 930.317002][ T4018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 930.324990][ T4018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 930.333335][ T4018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 930.922631][ T6471] __nla_validate_parse: 2 callbacks suppressed [ 930.922652][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8925'. [ 930.979502][ T6483] tipc: Resetting bearer [ 931.062337][ T6483] ±ÿ_congesti speed is unknown, defaulting to 1000 [ 931.106432][ T6490] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.8930'. [ 931.247565][ T6496] netlink: 'syz.3.8931': attribute type 1 has an invalid length. [ 931.287955][ T6496] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8931'. [ 931.457115][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 931.471480][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8934'. [ 931.577082][ T6508] syzkaller0: entered promiscuous mode [ 931.582594][ T6508] syzkaller0: entered allmulticast mode [ 931.978007][ T6528] netlink: 'syz.4.8938': attribute type 32 has an invalid length. [ 932.523196][ T4018] Bluetooth: hci0: command tx timeout [ 934.332197][ T6544] bridge0: entered allmulticast mode [ 934.422546][ T6554] bridge0: port 1(batadv0) entered blocking state [ 934.435736][ T6554] bridge0: port 1(batadv0) entered disabled state [ 934.470608][ T6554] batadv0: entered allmulticast mode [ 934.480507][ T6554] batadv0: entered promiscuous mode [ 934.527830][ T6559] netlink: 'syz.3.8944': attribute type 1 has an invalid length. [ 934.551446][ T6557] syzkaller0: entered promiscuous mode [ 934.556939][ T6557] syzkaller0: entered allmulticast mode [ 934.583827][ T4018] Bluetooth: hci0: command tx timeout [ 934.588706][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8946'. [ 934.591869][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8945'. [ 934.600545][ T6563] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.8946'. [ 934.610889][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8945'. [ 934.627353][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8945'. [ 934.642590][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8945'. [ 934.922485][ T7098] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 934.933101][ T7098] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 936.670217][ T4018] Bluetooth: hci0: command tx timeout [ 936.743697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5290 ms [ 936.751754][ C0] lec:lec_tx_timeout: lec0 [ 936.756947][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 937.095389][ T6554] kthread_run failed with err -4 [ 937.101776][ T6561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.236657][ T6483] chnl_net:caif_netlink_parms(): no params data found [ 937.278704][ T6576] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8949'. [ 937.331829][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.344423][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.351629][ T6483] bridge_slave_0: entered allmulticast mode [ 937.359327][ T6483] bridge_slave_0: entered promiscuous mode [ 937.367684][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.374872][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.382035][ T6483] bridge_slave_1: entered allmulticast mode [ 937.389741][ T6483] bridge_slave_1: entered promiscuous mode [ 937.443089][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.452392][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8950'. [ 937.455382][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.498971][ T6483] team0: Port device team_slave_0 added [ 937.507753][ T6483] team0: Port device team_slave_1 added [ 937.580895][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.587854][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.609450][ T6597] x_tables: duplicate underflow at hook 1 [ 937.613718][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.632426][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.639371][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.678198][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.766110][ T6483] hsr_slave_0: entered promiscuous mode [ 937.772752][ T6483] hsr_slave_1: entered promiscuous mode [ 937.908158][ T6483] debugfs: 'hsr0' already exists in 'hsr' [ 937.913921][ T6483] Cannot create hsr debugfs directory [ 938.193431][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8955'. [ 938.268516][ T6483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 938.279961][ T6483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.321230][ T6625] syzkaller0: entered promiscuous mode [ 938.341660][ T6625] syzkaller0: entered allmulticast mode [ 938.422772][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8962'. [ 938.516909][ T6483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 938.527205][ T6483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.775962][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8964'. [ 938.784016][ T4018] Bluetooth: hci0: command tx timeout [ 938.852060][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8971'. [ 938.957651][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8973'. [ 939.003189][ T6483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 939.013523][ T6483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.063472][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8974'. [ 939.182094][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.251561][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8973'. [ 939.339829][ T6662] vlan0: left allmulticast mode [ 939.346103][ T6662] veth0_vlan: left allmulticast mode [ 939.351769][ T6662] vlan0: left promiscuous mode [ 939.373370][ T6662] veth1_vlan: left allmulticast mode [ 939.517481][ T6483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 939.531527][ T6483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.569194][ T48] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.580302][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.590372][ T48] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.599768][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.658692][ T6682] tipc: Enabling of bearer rejected, failed to enable media [ 939.677086][ T48] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.697370][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.717615][ T48] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.738063][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.807746][ T6691] netlink: 'syz.4.8977': attribute type 7 has an invalid length. [ 939.859146][ T6684] syzkaller0: entered promiscuous mode [ 939.866791][ T6684] syzkaller0: entered allmulticast mode [ 939.884132][ T6691] netlink: 'syz.4.8977': attribute type 7 has an invalid length. [ 940.107324][ T6698] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8980'. [ 941.769381][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 941.777443][ C0] lec:lec_tx_timeout: lec0 [ 942.970850][ T6483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 943.009677][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.032225][ T6483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 943.050555][ T6724] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8986'. [ 943.063237][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.072244][ T6724] netlink: 'syz.2.8986': attribute type 2 has an invalid length. [ 943.087832][ T6483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 943.117067][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.137401][ T6483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 943.169130][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.247937][ T6742] netlink: 'syz.2.8989': attribute type 1 has an invalid length. [ 943.479440][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.530475][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.554967][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.562112][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.583929][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.591087][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.758277][ T6759] syzkaller0: entered promiscuous mode [ 943.775368][ T6759] syzkaller0: entered allmulticast mode [ 944.061877][ T6777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8998'. [ 944.094356][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.180110][ T6783] netlink: 'syz.2.9001': attribute type 10 has an invalid length. [ 944.196040][ T6781] geneve2: entered promiscuous mode [ 944.201304][ T6781] geneve2: entered allmulticast mode [ 944.212022][ T6783] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 944.226529][ T6781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 944.235549][ T7089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.266286][ T7089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.300550][ T7089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.333571][ T7089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.361352][ T6483] veth0_vlan: entered promiscuous mode [ 944.419931][ T6483] veth1_vlan: entered promiscuous mode [ 944.527439][ T6483] veth0_macvtap: entered promiscuous mode [ 944.559666][ T6483] veth1_macvtap: entered promiscuous mode [ 944.592100][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.653318][ T6807] macsec0: entered promiscuous mode [ 944.672385][ T6807] macsec0: entered allmulticast mode [ 944.701096][ T6812] veth11: entered promiscuous mode [ 944.706808][ T6812] veth11: entered allmulticast mode [ 944.714043][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.721677][ T6804] netlink: 'syz.1.9008': attribute type 1 has an invalid length. [ 944.725531][ T6812] Unsupported ieee802154 address type: 0 [ 944.739714][ T6812] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9010'. [ 944.751392][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.760342][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.788083][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.829840][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.167283][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.175128][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.238171][ T7086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.252057][ T7086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.268115][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9013'. [ 945.278715][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9013'. [ 945.346563][ T6828] bond11: down delay (1110) is not a multiple of miimon (100), value rounded to 1100 ms [ 945.479017][ T6827] xt_cluster: node mask cannot exceed total number of nodes [ 945.483252][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9015'. [ 945.498454][ T6835] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 945.597136][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.619740][ T6839] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 945.695656][ T6837] : entered promiscuous mode [ 945.713857][ T6842] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.742066][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.779521][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.809879][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.835123][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.855923][ T6837] netlink: 'syz.0.9016': attribute type 29 has an invalid length. [ 945.876054][ T6856] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9021'. [ 946.010074][ T6863] netlink: 13 bytes leftover after parsing attributes in process `syz.3.9022'. [ 946.019713][ T6866] netlink: 'syz.0.9024': attribute type 4 has an invalid length. [ 946.029688][ T6866] netlink: 'syz.0.9024': attribute type 1 has an invalid length. [ 946.047318][ T6866] netlink: 'syz.0.9024': attribute type 3 has an invalid length. [ 946.066229][ T6866] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9024'. [ 946.075275][ T6866] NCSI netlink: No device for ifindex 813332851 [ 946.330360][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9031'. [ 946.467416][ T6903] tipc: Started in network mode [ 946.472332][ T6903] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 946.496300][ T6903] tipc: Enabled bearer , priority 14 [ 946.522150][ T6904] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 946.613719][ T6907] syzkaller0: entered promiscuous mode [ 946.619222][ T6907] syzkaller0: entered allmulticast mode [ 946.715670][ T6917] bond0: entered promiscuous mode [ 946.720821][ T6917] bond_slave_0: entered promiscuous mode [ 946.721431][ T6914] [ 946.726974][ T6917] bond_slave_1: entered promiscuous mode [ 946.728771][ T6914] ====================================================== [ 946.728781][ T6914] WARNING: possible circular locking dependency detected [ 946.728799][ T6914] syzkaller #0 Not tainted [ 946.735448][ T6917] bridge_slave_1: entered promiscuous mode [ 946.741405][ T6914] ------------------------------------------------------ [ 946.741416][ T6914] syz.0.9040/6914 is trying to acquire lock: [ 946.741428][ T6914] ffffffff8ff618d8 ( [ 946.750729][ T6917] bond0: left promiscuous mode [ 946.752831][ T6914] nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 946.759577][ T6917] bond_slave_0: left promiscuous mode [ 946.765639][ T6914] [ 946.765639][ T6914] but task is already holding lock: [ 946.765649][ T6914] ffff88802a823070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 946.765698][ T6914] [ 946.765698][ T6914] which lock already depends on the new lock. [ 946.765698][ T6914] [ 946.765706][ T6914] [ 946.765706][ T6914] the existing dependency chain (in reverse order) is: [ 946.765713][ T6914] [ 946.765713][ T6914] -> #2 (&nr_node->node_lock){+...}-{3:3} [ 946.775172][ T6917] bond_slave_1: left promiscuous mode [ 946.775554][ T6914] : [ 946.775563][ T6914] _raw_spin_lock_bh+0x36/0x50 [ 946.780486][ T6917] bridge_slave_1: left promiscuous mode [ 946.787818][ T6914] nr_rt_device_down+0x153/0x860 [ 946.787839][ T6914] nr_device_event+0x137/0x150 [ 946.787866][ T6914] notifier_call_chain+0x1ad/0x3d0 [ 946.787886][ T6914] __dev_notify_flags+0x16d/0x310 [ 946.787904][ T6914] netif_change_flags+0xe8/0x1a0 [ 946.882921][ T6914] dev_change_flags+0x130/0x270 [ 946.888292][ T6914] dev_ioctl+0x7b4/0x1150 [ 946.893139][ T6914] sock_do_ioctl+0x23e/0x320 [ 946.898240][ T6914] sock_ioctl+0x5c6/0x7f0 [ 946.903079][ T6914] __se_sys_ioctl+0xfc/0x170 [ 946.908192][ T6914] do_syscall_64+0x15f/0xf80 [ 946.913301][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.919704][ T6914] [ 946.919704][ T6914] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 946.927514][ T6914] _raw_spin_lock_bh+0x36/0x50 [ 946.932794][ T6914] nr_rt_device_down+0xbe/0x860 [ 946.938154][ T6914] nr_device_event+0x137/0x150 [ 946.943436][ T6914] notifier_call_chain+0x1ad/0x3d0 [ 946.949060][ T6914] __dev_notify_flags+0x16d/0x310 [ 946.954590][ T6914] netif_change_flags+0xe8/0x1a0 [ 946.960045][ T6914] dev_change_flags+0x130/0x270 [ 946.965401][ T6914] dev_ioctl+0x7b4/0x1150 [ 946.970248][ T6914] sock_do_ioctl+0x23e/0x320 [ 946.975351][ T6914] sock_ioctl+0x5c6/0x7f0 [ 946.980194][ T6914] __se_sys_ioctl+0xfc/0x170 [ 946.985296][ T6914] do_syscall_64+0x15f/0xf80 [ 946.990402][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.996802][ T6914] [ 946.996802][ T6914] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 947.004696][ T6914] __lock_acquire+0x15a5/0x2cf0 [ 947.010063][ T6914] lock_acquire+0x106/0x350 [ 947.015082][ T6914] _raw_spin_lock_bh+0x36/0x50 [ 947.020359][ T6914] nr_rt_ioctl+0x40c/0xf90 [ 947.025281][ T6914] sock_do_ioctl+0x101/0x320 [ 947.030383][ T6914] sock_ioctl+0x5c6/0x7f0 [ 947.035228][ T6914] __se_sys_ioctl+0xfc/0x170 [ 947.040332][ T6914] do_syscall_64+0x15f/0xf80 [ 947.045440][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.051846][ T6914] [ 947.051846][ T6914] other info that might help us debug this: [ 947.051846][ T6914] [ 947.062054][ T6914] Chain exists of: [ 947.062054][ T6914] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 947.062054][ T6914] [ 947.075859][ T6914] Possible unsafe locking scenario: [ 947.075859][ T6914] [ 947.083291][ T6914] CPU0 CPU1 [ 947.088640][ T6914] ---- ---- [ 947.093987][ T6914] lock(&nr_node->node_lock); [ 947.098739][ T6914] lock(nr_node_list_lock); [ 947.105841][ T6914] lock(&nr_node->node_lock); [ 947.113119][ T6914] lock(nr_neigh_list_lock); [ 947.117785][ T6914] [ 947.117785][ T6914] *** DEADLOCK *** [ 947.117785][ T6914] [ 947.125911][ T6914] 2 locks held by syz.0.9040/6914: [ 947.131004][ T6914] #0: ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 947.140482][ T6914] #1: ffff88802a823070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 947.150128][ T6914] [ 947.150128][ T6914] stack backtrace: [ 947.156001][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.0.9040 Not tainted syzkaller #0 PREEMPT(full) [ 947.156020][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.156032][ T6914] Call Trace: [ 947.156039][ T6914] [ 947.156046][ T6914] dump_stack_lvl+0xe8/0x150 [ 947.156072][ T6914] print_circular_bug+0x2e1/0x300 [ 947.156094][ T6914] check_noncircular+0x12e/0x150 [ 947.156115][ T6914] __lock_acquire+0x15a5/0x2cf0 [ 947.156148][ T6914] ? nr_rt_ioctl+0x40c/0xf90 [ 947.156163][ T6914] lock_acquire+0x106/0x350 [ 947.156186][ T6914] ? nr_rt_ioctl+0x40c/0xf90 [ 947.156202][ T6914] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 947.156224][ T6914] ? nr_rt_ioctl+0x40c/0xf90 [ 947.156239][ T6914] _raw_spin_lock_bh+0x36/0x50 [ 947.156259][ T6914] ? nr_rt_ioctl+0x40c/0xf90 [ 947.156272][ T6914] nr_rt_ioctl+0x40c/0xf90 [ 947.156292][ T6914] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 947.156311][ T6914] ? apparmor_capable+0x126/0x170 [ 947.156335][ T6914] ? capable+0x88/0xe0 [ 947.156359][ T6914] ? nr_ioctl+0x1b1/0x3b0 [ 947.156382][ T6914] sock_do_ioctl+0x101/0x320 [ 947.156404][ T6914] ? __pfx_sock_do_ioctl+0x10/0x10 [ 947.156424][ T6914] ? do_futex+0x333/0x420 [ 947.156445][ T6914] sock_ioctl+0x5c6/0x7f0 [ 947.156467][ T6914] ? __pfx_sock_ioctl+0x10/0x10 [ 947.156486][ T6914] ? __fget_files+0x2a/0x420 [ 947.156502][ T6914] ? __fget_files+0x3a0/0x420 [ 947.156517][ T6914] ? __fget_files+0x2a/0x420 [ 947.156534][ T6914] ? bpf_lsm_file_ioctl+0x9/0x20 [ 947.156556][ T6914] ? __pfx_sock_ioctl+0x10/0x10 [ 947.156576][ T6914] __se_sys_ioctl+0xfc/0x170 [ 947.156601][ T6914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.156618][ T6914] do_syscall_64+0x15f/0xf80 [ 947.156640][ T6914] ? trace_irq_disable+0x3b/0x140 [ 947.156661][ T6914] ? clear_bhb_loop+0x40/0x90 [ 947.156680][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.156696][ T6914] RIP: 0033:0x7f4c7039cdd9 [ 947.156711][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.156727][ T6914] RSP: 002b:00007f4c6e5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.156743][ T6914] RAX: ffffffffffffffda RBX: 00007f4c70615fa0 RCX: 00007f4c7039cdd9 [ 947.156755][ T6914] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000009 [ 947.156766][ T6914] RBP: 00007f4c70432d69 R08: 0000000000000000 R09: 0000000000000000 [ 947.156777][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.156787][ T6914] R13: 00007f4c70616038 R14: 00007f4c70615fa0 R15: 00007ffdbfc91ff8 [ 947.156807][ T6914] [ 947.457126][ T6903] bond10: left promiscuous mode [ 947.464491][ T6903] veth11: left promiscuous mode [ 947.472484][ T6903] veth11: left allmulticast mode [ 947.613630][T13107] tipc: Node number set to 10463914 [ 947.704225][ T4018] Bluetooth: hci4: command 0x0406 tx timeout [ 949.784188][ T4018] Bluetooth: hci4: command 0x0406 tx timeout