last executing test programs: 11.337928302s ago: executing program 4 (id=9399): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {0x8001}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {0x0, 0xaa}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x449b}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5c}, {}, {}, {}, {0x80}, {}, {}, {0x100}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 11.008765964s ago: executing program 4 (id=9403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r1, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 10.831959603s ago: executing program 4 (id=9404): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f0000000200)="80c9cd4b10f989", 0x7}, {&(0x7f0000000240)="657b7d00abb4c0b6ed52f78a460132c7f91576f74bfb82a7391560b2b946693ebc3ca75fb3c0b7109c1a6d20c8df8fa63e6855dd02ea04bf3cf6c4df8e0acdd84f6e75ad8bd6e0f5fba1353f935fbaf60c498df9c67c401f3282c07b", 0x5c}], 0x3}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f0000000200)="80c9cd4b10f989", 0x7}, {&(0x7f0000000240)="657b7d00abb4c0b6ed52f78a460132c7f91576f74bfb82a7391560b2b946693ebc3ca75fb3c0b7109c1a6d20c8df8fa63e6855dd02ea04bf3cf6c4df8e0acdd84f6e75ad8bd6e0f5fba1353f935fbaf60c498df9c67c401f3282c07b", 0x5c}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1) (async) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/43, 0x2b}], 0x1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x1f, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x2}, {0x8, 0x120, 0x0, 0x0, 0x7}]}}]}]}, 0x50}}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.463009516s ago: executing program 4 (id=9407): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)=ANY=[], 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000900000000000000611314000095000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = openat$cgroup_ro(r0, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) pwritev(r2, &(0x7f00000006c0)=[{&(0x7f0000000600)="f81155e64838d231aed63377ec61f8995c2c05b4c89292fb75aed372d821e5dfc8da151c1c411bff360769b2c906d5fa2a1161ec9bb7d7c970173e134554108b682c9553da2f425974abc72c2ae7bb5a01ef075e126efb7370265a5ccdd80ebff226a843a9158682691aa2c3769c711ab32c2cd94bc27660e565b79578164dd50fe3ed04ef40616774273a84077b4c25a70aa4610e7da10172b947", 0x9b}, {&(0x7f0000000540)="92b09718427082c7039633a5ca423731", 0x10}, {&(0x7f0000000580)="5b7a0475f7855250822d500af7ac", 0xe}], 0x3, 0xff, 0x8) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x81, 0x0}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket(0x14, 0x2, 0x4) socket(0x10, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000200)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r5, 0x4) splice(r7, 0x0, r8, 0x0, 0x1, 0x0) vmsplice(r8, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}], 0x1, 0x6) 2.02549025s ago: executing program 2 (id=9511): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) listen(r0, 0x50) r1 = socket(0x840000000002, 0x3, 0x100) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e28, @broadcast}}, 0x0, 0xc02e}, 0x90) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0xffad) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r3, 0x50) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1.879483257s ago: executing program 1 (id=9513): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffff970}]}}]}, 0x40}}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000000fff00", 0x58}], 0x1) 1.36841066s ago: executing program 3 (id=9517): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1, {[0x8, 0x3, 0x400000, 0x87f760, 0x8000, 0x956, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r1, 0x7}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x7fffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.081921902s ago: executing program 2 (id=9518): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') unshare(0x400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040), r1, 0x0, 0x6, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x1}) 1.074602423s ago: executing program 3 (id=9519): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x1140, 0x13, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5, 0x80, 0xce, 0xb7, {0x4e20, 0x4e23, [0x8, 0x6, 0xf, 0x4], [0x38000000, 0x1800, 0x0, 0x9b38], 0x0, [0x7, 0x6]}, 0xffffff7f, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x40, 0x1, "c2fe90ca5f1e3110475c8a36f02bc603726cf26c2f88a2527e3a7b62a4400db4852d1b7d71153b86a2534bb3aa717359b32b948f872c8dc2dfe67c5d"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "20e9c9c6b6652310c27fd736c5f9098bb603ea13600d9ded963c44760605db5c1b7750747be97c085c4caed973e1749b9cb0cbc23bed8d63a58362132cdf6d5b62739e67981b578a6b5d090e2187b5e5fc5225f4a165b0f9daebec54e5229211cfdfe594dc1dd30847468f267cc7d5b32135466545eb24d64ac8043a35f2d9e9219bb18efa5a9b9ac944b30f2b23c7d60ac9369a637416d4f7c5081b34a09271d6c09ee17b1b6d4fef5dc1"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1140}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) 1.007156324s ago: executing program 1 (id=9520): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000003002100000300000001000064d43994000000"], 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7}, 0x8) 1.006668736s ago: executing program 2 (id=9521): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x5c) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001e000100fdff000007000000003eb21efc574485bb0c3fda5119bb2fb465bdb365138a0800"/52], 0x1c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x4ead0b5480efff64, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fff, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b920, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x27d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'vxcan1\x00', @random="2b0100004ec6"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) 932.018682ms ago: executing program 0 (id=9522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea11004a35f4667d41", 0x29}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000070601020000000000000000020000080500010007000000080002400000cd03"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 922.749105ms ago: executing program 4 (id=9447): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYRES8, @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18, r0}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010024bd7000fbdbdf2501000000080002000200000024000480050003000200000005000300010000000500030000000000050003000500000008000100ffffffff"], 0x48}}, 0x40000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000180)="7c1bcea7b37e727ea1b36257e93f327209c11b345da32752f0aef77f64627e58a1f1654eef5cac8a5952907c317f93c1f25920ae37b17ac638ca8869fe1e51d860ed169fecf3f1703a8634b57b587986c3ffe5ee48095a84bbd4c1bebf93923c1c46b49ed0477c949c2d9d52b4ac97504758f958ac16c38d9f7c0e740d1e4e8ff76e5f21cd6ff9545c06ceae6841dafe2608c9caebe229580b0a265ed20929fcf2455216df84d472c062d864f2430d7397e26212d029412e4c6642964be4ad9669a704f3", &(0x7f0000000280)=""/243, &(0x7f0000000380)="20070ca73f558a0735f996a7b37a72b2d656a3b755a4b23d450901aafb963a069dc03f87ad00f1b2f82ae485cc5460f65c4942a1270b337998ffebb14face46f6a776e2cbb3d7203ce2b85ffa1e48d195e1b098663105c4c6f54d3bef6e05c998e9fd7e2a139654daf85b1c96fddf39b35de0a59283ee98e10e154c13b046d92327e5fae9401b13b0b289cd684d6dd6a37e4c2449abdb051e42933d60d1d8a181a50cf6f35a095857dbec7ba327a2338afba47b635a9edc8665fb4a4bf6390d7", &(0x7f0000000000)="ef009b81ae8a94bee7bb", 0xfffffffd, r2, 0x4}, 0x38) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 853.531219ms ago: executing program 1 (id=9523): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x719c9f09795ef4d0) 820.523032ms ago: executing program 3 (id=9524): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getchain={0x34, 0x66, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x9, 0x10}, {0x9, 0xf}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008085}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'wg1\x00', 0x648215c6}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000006411ff000000d240c5ce869ec4130000000000ff0200000000000000000000000000014f194e2000309078020000000400000000000000954819110bcf22796f6cb28be9a1224c000be94660dd39d2cb40f22ff59e284c9432ca693246dd965f2232f1884e12b4984b5769ec3117e138db720f57b5977508cb0087a738e17dda00000d00000000a8b446d24c238e1012070a1db2aa82dedb99900b59640acbf8b96b8d5fa1838f33708479dad010ec4a442606dc4717326bb423e6a3ed1d2aa6"], 0x9e) socket$nl_route(0x10, 0x3, 0x0) 726.736967ms ago: executing program 0 (id=9525): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x30, 0x0, r3, 0x2, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000001c0)) setsockopt$sock_void(r3, 0x1, 0xdae87112650f25c1, 0x0, 0x0) 507.261669ms ago: executing program 0 (id=9526): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x207}, 0x14}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x38, r3, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x58, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES64=r5, @ANYRESOCT=r5, @ANYRES32=r6], 0x40}}, 0x0) 505.166481ms ago: executing program 1 (id=9527): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000002900)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 489.318372ms ago: executing program 2 (id=9528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000020000100fcfffffffedbdf250a00400000000003000000f5130002"], 0x38}, 0x1, 0x0, 0x0, 0xc011}, 0x40) 408.712252ms ago: executing program 4 (id=9529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @remote, 0x5}]}, &(0x7f0000000140)=0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x1}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d", 0xf}], 0x1}}], 0x1, 0x2090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2162) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000500010000000900190073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000008000340000000160900010073797a30"], 0xc4}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) 320.990882ms ago: executing program 1 (id=9530): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 300.308675ms ago: executing program 0 (id=9531): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0xff7, &(0x7f0000000280)=""/4087, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 290.298929ms ago: executing program 2 (id=9532): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x803, 0x2) unshare(0x40600) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x835) write(r1, &(0x7f00000001c0), 0x0) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0xb, 0x1, 0x0, 0x4, 0x8000}, &(0x7f0000001cc0)=[{}, {}, {}, {}, {}, {}]}) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="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", 0x738}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20040854}], 0x1, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x1, 0x4101, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={r7, "a7df097dd5a2b0f356c964de809edfb4"}) 234.471738ms ago: executing program 3 (id=9533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r0, r0, 0x100000001, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0xce}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 233.972043ms ago: executing program 1 (id=9534): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x4, 0x0, 0x80000001}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) splice(r0, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) sendmsg$tipc(r1, &(0x7f0000001e00)={&(0x7f0000001800)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001840)="1e04357df62a1c846ec2304411b43b08252bb83e507e4b86e461f259b735bc9a1d974e2213e3f01100d052302c74d1478b872c8ccf390139cada975d8de8c828cdc396c669c016379ad768b8e6984459ca37b0a6b3fa3996ebc20f695eeead86e5270ba70ff7835a86246d404eebf7a8ec13fa6500f662d00acf86c725124f14494eb526e2bc8b4168220ab07f9970342eb0d723dfe40e45eaabff945e77ecbf72a70aa1b2cbd1937cdfa0970d30703035d909dcae650140fa6223bdbb00211d6f5772669963275dbb1b39fe07cdcb7a8fdc3082728b", 0xd6}, {&(0x7f0000001940)="47b808638f8752a4054a14f6112ae9a7ee0ca4b1b7ff137c63e5f79f673d920301f2116d2b33f95f231c2bb99ae215d25fec3c3533c2ad870e360f5d8268a10ddf132c4fdac86d43", 0x48}, {&(0x7f00000019c0)="4cbfd249e9601f55", 0x8}, {&(0x7f0000001a00)="e2032a761faea7dade41b54c0af759a079b1a10dda72796086d2cab3c6666cb6594e3731d746f3a675f35f95e7a3296fabb7742e14f531a8d11509dfee6d6624819cd3db014177d9725ef683d4f6973fcdad018f2098", 0x56}, {&(0x7f0000001a80)="d108f62afcf016459b00d69a368e614eea7e09618067fa414504a06133", 0x1d}, {&(0x7f0000001ac0)="4d6a9d66e3e9971de35ed56e358e52e2f1401bdb1fd3339b2e22d89136f74c52d3ed4ce6fb89df0bef11ab48df647ecc8704ae9a5cbec8aec94d91ffd122269eb0474c725a5c3eb1140f597b20", 0x4d}, {&(0x7f0000001b40)="b194f17efd5628d80af439107a6a6b3b", 0x10}, {&(0x7f0000001b80)="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", 0xfa}], 0x8, &(0x7f0000001d00)="512bfeaf6e875eb213d1e7767bab659d027eb65ad2ecff95d0817bc3fe76585413625e43fe13e3994ffb98c07d75aa488950c818ac01c60c050a75abf5049cd8987382e9565b2d0ec031abd3432c2f706da978c9ab3d817275392df30189f720c192a8cc7cd4cae3949312aa6a0385f44b50f381644c75d38877fe3e658aa1ed525d57617a0c036c8f0aa497bf10ca8f8ebb1f09e841906b61b400d7bb2092f8ac2fccf0c91e671b3a080c3301c2b95cbb3ada1969707738a709a185043e5ec5ee4b426278120c5120f0485c3f2b47cf8b33770006e429213d4a205eedb6995f1884b1630f9039282f3f6f1d67b99065", 0xf0, 0x4000}, 0x4000) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x1, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={0x0, 0x1, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x9d}, @alu={0x4, 0x0, 0x0, 0x9, 0xb, 0xc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7ff, 0x15, 0x0, 0x41100, 0x21, '\x00', r7, 0x25, r1, 0x8, &(0x7f00000004c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x3, 0xd, 0x7fff, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001680)=[r8, r0], &(0x7f00000016c0)=[{0x5, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x6, 0x7}, {0x4, 0x1, 0x3, 0x9}, {0x4, 0x3, 0xd, 0x8}, {0x0, 0x3, 0xa}], 0x10, 0x4980}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket(0x1, 0x803, 0x0) 183.959639ms ago: executing program 0 (id=9535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f00006ad000/0x2000)=nil, 0x2000, 0x300000d, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0x8, 0x84, 0x0, @remote, @loopback}}}}}}, 0x26) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r4, &(0x7f0000000300)='CONNMARK\x00', 0x210000, &(0x7f0000000380)={@_ha_fsid={[0x3, 0xd]}, {0x2, 0x6, 0xfffffffa, 0xbd53}}, 0x8cea, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x5}, {[0x3, 0x1, 0x56, 0x3]}, 0xfffffff9, 0x1000, &(0x7f0000001b00)=""/4096}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x7ffe, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000084) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004e80)={@fallback, 0xffffffffffffffff, 0x4}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) 156.930517ms ago: executing program 3 (id=9536): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0xe, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1}, 0x20000804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0xa, 0x801, 0x4) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x180000}, &(0x7f0000002ac0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000002b00)=ANY=[@ANYRES32=r4, @ANYBLOB="7f000c00de5eb850010066c449b99288"], 0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c3ae27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc5351bd8b9877ae81e64", 0x40}], 0x3}], 0x1, 0x840) recvmsg(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="adcd1a95", 0x4) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000000cc0)=""/4084, 0x835) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="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", 0x738}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 53.6132ms ago: executing program 2 (id=9537): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="560003000000", 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) accept4(r2, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = gettid() unshare(0x22020600) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) unshare(0x8000400) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) 19.680522ms ago: executing program 3 (id=9538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x48080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0x5f, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x2f00, 0xfffffffe, 0xb}}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6000a000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000003800088034000080080003000200000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b04000980"], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x40820) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5ef, 0x20, 0xa4, 0x9}, &(0x7f0000000080)=0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x30d}]}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={r5, 0x9}, &(0x7f0000000100)=0x8) 0s ago: executing program 0 (id=9539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) kernel console output (not intermixed with test programs): 36][T14044] tipc: Enabling of bearer rejected, already enabled [ 959.368726][T14083] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.405959][T14083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.722757][T14083] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.745547][T14083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.840381][T14083] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.875161][T14083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.936393][T14083] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.950334][T14083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.040502][T14126] tipc: Enabled bearer , priority 10 [ 960.114396][ T1252] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.142194][ T1252] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.180401][T14131] sctp: [Deprecated]: syz.2.8282 (pid 14131) Use of int in maxseg socket option. [ 960.180401][T14131] Use struct sctp_assoc_value instead [ 960.196211][T14122] wlan1 speed is unknown, defaulting to 1000 [ 960.209900][T14122] lo speed is unknown, defaulting to 1000 [ 960.244595][ T1252] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.271371][ T1252] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.354152][ T1252] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.390281][ T1252] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.502596][ T1889] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.524439][ T1889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.657892][T14154] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 960.877935][T14162] sock: sock_timestamping_bind_phc: sock not bind to device [ 961.296320][T14191] netlink: 'syz.2.8296': attribute type 12 has an invalid length. [ 961.315658][T14191] __nla_validate_parse: 10 callbacks suppressed [ 961.315679][T14191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8296'. [ 961.394596][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8298'. [ 961.518708][T14205] bond7: Removing last arp target with arp_interval on [ 961.576577][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8299'. [ 961.635617][T14203] syz_tun: entered allmulticast mode [ 961.703398][T14203] openvswitch: netlink: Duplicate or invalid key (type 0). [ 961.716203][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.800508][T14232] wlan1 speed is unknown, defaulting to 1000 [ 961.912971][T14232] lo speed is unknown, defaulting to 1000 [ 962.140135][T14247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8306'. [ 962.229073][T14247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 962.263327][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 962.271476][ C1] lec:lec_tx_timeout: lec0 [ 962.277185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 962.356354][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8306'. [ 962.384226][T14252] bond4: (slave batadv1): Opening slave failed [ 962.623737][T14271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 962.647518][T10200] lo speed is unknown, defaulting to 1000 [ 962.676136][T10200] syz2: Port: 1 Link ACTIVE [ 962.784417][ T1887] dummy0: left allmulticast mode [ 962.803014][ T1887] bridge0: port 3(dummy0) entered disabled state [ 962.828665][ T1887] bridge_slave_1: left allmulticast mode [ 962.845776][ T1887] bridge_slave_1: left promiscuous mode [ 962.861927][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.886822][ T1887] bridge_slave_0: left allmulticast mode [ 962.900867][ T1887] bridge_slave_0: left promiscuous mode [ 962.914631][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.418529][ T1887] bond6 (unregistering): (slave erspan1): Releasing active interface [ 963.433415][ T1887] erspan1 (unregistering): left promiscuous mode [ 964.202978][ T1887] bond3 (unregistering): (slave bridge4): Releasing active interface [ 964.382583][ T1887] bond5 (unregistering): (slave bridge8): Releasing active interface [ 964.399844][ T1887] bridge8 (unregistering): left promiscuous mode [ 964.415356][ T1887] bridge8 (unregistering): left allmulticast mode [ 964.530561][ T1887] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 964.539112][ T1887] bridge10 (unregistering): left promiscuous mode [ 964.589943][ T1887] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 964.599001][ T1887] bridge11 (unregistering): left promiscuous mode [ 964.724233][ T1887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.734336][ T1887] bond_slave_0: left promiscuous mode [ 964.741697][ T1887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.751548][ T1887] bond_slave_1: left promiscuous mode [ 964.758049][ T1887] bond0 (unregistering): Released all slaves [ 964.769250][ T1887] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 964.778695][ T1887] bond1 (unregistering): Released all slaves [ 964.792654][ T1887] bond2 (unregistering): Released all slaves [ 964.811102][ T1887] bond3 (unregistering): Released all slaves [ 964.824915][ T1887] bond4 (unregistering): Released all slaves [ 964.840767][ T1887] bond5 (unregistering): Released all slaves [ 964.854197][ T1887] bond6 (unregistering): Released all slaves [ 964.874102][ T1887] bond7 (unregistering): Released all slaves [ 964.887518][ T1887] bond8 (unregistering): Released all slaves [ 964.903544][ T1887] bond9 (unregistering): Released all slaves [ 964.923705][ T1887] bond10 (unregistering): Released all slaves [ 964.939882][ T1887] bond11 (unregistering): Released all slaves [ 964.960230][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 964.977459][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 964.992140][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 965.004163][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 965.015403][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8316'. [ 965.062549][T14308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.082624][T14308] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.104101][T14308] bridge0: port 3() entered blocking state [ 965.110924][T14308] bridge0: port 3() entered listening state [ 965.129584][T14308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 965.166791][ T1887] m1Ie5: left promiscuous mode [ 965.257668][T14327] wlan1 speed is unknown, defaulting to 1000 [ 965.265389][T14327] lo speed is unknown, defaulting to 1000 [ 965.349019][ T1887] tipc: Left network mode [ 965.625312][ T1887] IPVS: stopping backup sync thread 23512 ... [ 965.727190][T14356] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 965.798270][T14363] xt_TCPMSS: Only works on TCP SYN packets [ 965.846443][T14366] batadv_slave_1: entered promiscuous mode [ 966.031233][T14366] batadv_slave_1: left promiscuous mode [ 966.551198][T14409] nbd: couldn't find a device at index 2 [ 966.650939][T14411] 8021q: VLANs not supported on wg2 [ 966.686881][T14411] __nla_validate_parse: 14 callbacks suppressed [ 966.686903][T14411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8336'. [ 966.713361][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8336'. [ 966.739252][T14409] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 966.837041][ T5487] eql: remember to turn off Van-Jacobson compression on your slave devices [ 966.872153][T14424] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8340'. [ 967.083521][T14436] netlink: 'syz.1.8343': attribute type 1 has an invalid length. [ 967.138289][ C1] bridge0: port 3() entered learning state [ 967.154915][T14446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8341'. [ 967.201214][T14447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8345'. [ 967.201790][T14449] netlink: 'syz.3.8345': attribute type 1 has an invalid length. [ 967.253216][T14432] wlan1 speed is unknown, defaulting to 1000 [ 967.346819][T14459] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8342'. [ 967.422551][T14432] lo speed is unknown, defaulting to 1000 [ 967.862370][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8350'. [ 967.876118][ T1887] hsr_slave_0: left promiscuous mode [ 967.897910][ T1887] hsr_slave_1: left promiscuous mode [ 967.931715][ T1887] veth1: left allmulticast mode [ 968.016020][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 968.024189][ C1] lec:lec_tx_timeout: lec0 [ 968.342171][T14478] netlink: 'syz.1.8349': attribute type 13 has an invalid length. [ 968.350460][T14478] netlink: 'syz.1.8349': attribute type 12 has an invalid length. [ 968.393135][T14480] bond9: entered promiscuous mode [ 968.416678][T14480] 8021q: adding VLAN 0 to HW filter on device bond9 [ 968.431212][T14480] bond9 (unregistering): Released all slaves [ 968.462393][T14494] bond1: (slave lo): Releasing backup interface [ 968.502408][T14494] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 968.519001][T14494] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 968.530021][T14494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 968.601991][T14507] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8357'. [ 968.654962][T14507] nbd: couldn't find device at index 3 [ 969.006823][T14519] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 969.113281][ T1887] IPVS: stop unused estimator thread 0... [ 969.216158][ C1] bridge0: port 3() entered forwarding state [ 969.222756][ C1] bridge0: topology change detected, propagating [ 969.243531][T14525] netlink: 'syz.0.8362': attribute type 3 has an invalid length. [ 969.350164][T14531] netlink: 'syz.3.8363': attribute type 1 has an invalid length. [ 969.574708][T14531] 8021q: adding VLAN 0 to HW filter on device bond9 [ 969.581326][T14548] netlink: 'syz.1.8366': attribute type 1 has an invalid length. [ 969.725075][T14541] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 969.800859][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8369'. [ 969.817761][T14541] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 969.840547][T14541] bond5: (slave ip6gre2): making interface the new active one [ 969.867919][T14541] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 970.059244][T14572] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 970.067637][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8371'. [ 970.110330][T14576] netlink: 'syz.3.8375': attribute type 142 has an invalid length. [ 970.641445][T14617] batman_adv: batadv0: Removing interface: ipvlan2 [ 970.977363][T14617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.291003][T14619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.317115][T14619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.513440][T14619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.538646][T14660] Bluetooth: MGMT ver 1.23 [ 971.547016][T14619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.706633][T14671] netlink: 'syz.3.8398': attribute type 1 has an invalid length. [ 971.776233][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 971.919406][T14619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.931755][T14619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.976707][T14671] bond10: entered promiscuous mode [ 971.982402][T14671] 8021q: adding VLAN 0 to HW filter on device bond10 [ 972.061406][T14619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.102159][T14619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.179903][T14688] netlink: 'syz.0.8402': attribute type 83 has an invalid length. [ 972.237079][T14692] tipc: Enabling of bearer rejected, failed to enable media [ 972.308043][T14692] __nla_validate_parse: 6 callbacks suppressed [ 972.308062][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8403'. [ 972.363753][ T1889] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.406744][ T1889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.468365][T14692] gretap0: left allmulticast mode [ 972.474237][T14692] gretap0: left promiscuous mode [ 972.506263][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 972.526744][T14692] bridge0: port 3(gretap0) entered disabled state [ 972.557082][T14692] bridge_slave_1: left allmulticast mode [ 972.562781][T14692] bridge_slave_1: left promiscuous mode [ 972.596441][T14692] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.607902][T14692] bridge_slave_0: left promiscuous mode [ 972.613809][T14692] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.721289][ T1881] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.739310][ T1881] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.779479][ T1881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.808609][ T1881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.840910][ T1881] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.867001][ T1881] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.881667][T14622] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.904796][T14622] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.917308][T14709] netlink: 'syz.1.8408': attribute type 1 has an invalid length. [ 972.925065][T14709] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8408'. [ 972.944651][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8407'. [ 973.002276][T14622] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.053068][T14622] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.166978][T14622] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.196948][T14622] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.231096][T14721] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8413'. [ 973.251447][T14715] wlan1 speed is unknown, defaulting to 1000 [ 973.274815][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8413'. [ 973.285620][T14622] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.310541][T14622] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.364343][T14727] netlink: 'syz.0.8413': attribute type 1 has an invalid length. [ 973.372397][T14727] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8413'. [ 973.382045][T14715] lo speed is unknown, defaulting to 1000 [ 973.382060][T14728] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8415'. [ 973.388922][T14727] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8413'. [ 973.413562][T14728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.448065][T14727] netlink: 'syz.0.8413': attribute type 1 has an invalid length. [ 973.455840][T14727] netlink: 634 bytes leftover after parsing attributes in process `syz.0.8413'. [ 973.801164][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8418'. [ 973.825916][T14719] IPVS: length: 132 != 8 [ 973.847676][T14719] pimreg: entered allmulticast mode [ 973.915193][T14714] pimreg: left allmulticast mode [ 974.207581][T14746] hsr_slave_0: left promiscuous mode [ 974.213966][T14746] hsr_slave_1: left promiscuous mode [ 974.368897][T14756] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 974.715105][T14775] wlan1 speed is unknown, defaulting to 1000 [ 974.724703][T14775] lo speed is unknown, defaulting to 1000 [ 974.754147][T14782] ipt_ECN: cannot use operation on non-tcp rule [ 974.769191][T14782] netlink: 'syz.1.8431': attribute type 32 has an invalid length. [ 974.795217][T14782] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6) [ 974.925835][T14782] wlan1 speed is unknown, defaulting to 1000 [ 974.929464][T14791] openvswitch: netlink: IP tunnel dst address not specified [ 974.977355][T14782] lo speed is unknown, defaulting to 1000 [ 975.118622][T14797] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 975.138100][T14797] bond5 (unregistering): Released all slaves [ 975.260338][T14810] netlink: 'syz.4.8441': attribute type 18 has an invalid length. [ 975.315391][T14815] netlink: 'syz.4.8441': attribute type 13 has an invalid length. [ 975.349393][T14815] netlink: 'syz.4.8441': attribute type 17 has an invalid length. [ 975.508661][T14821] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 975.722911][T14835] bond4: option mode: unable to set because the bond device has slaves [ 976.091725][T14860] openvswitch: netlink: Duplicate or invalid key (type 0). [ 976.167142][T14860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.268062][ T1887] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.287220][ T1887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.364152][ T1878] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.381333][ T1878] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.437743][T14873] netlink: 'syz.3.8453': attribute type 1 has an invalid length. [ 976.471672][ T1881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.472182][T14855] lec:lec_atm_close: lec0: Shut down! [ 976.480701][T14873] netlink: 'syz.3.8453': attribute type 1 has an invalid length. [ 976.497516][ T1881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.527682][ T1887] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.546189][ T1887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.919762][T14894] xt_connbytes: Forcing CT accounting to be enabled [ 977.170413][T14916] syzkaller1: entered promiscuous mode [ 977.196304][T14916] syzkaller1: entered allmulticast mode [ 977.492439][T14928] __nla_validate_parse: 28 callbacks suppressed [ 977.492461][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 977.550816][T14928] openvswitch: netlink: Duplicate or invalid key (type 0). [ 977.596621][T14928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.721605][T14939] bridge0: port 3() entered disabled state [ 977.740970][T14939] bridge0: entered allmulticast mode [ 977.751635][T14939] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 977.922825][T14943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.957861][T14947] tipc: Resetting bearer [ 978.071247][T14953] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 978.100433][T14953] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8472'. [ 978.365910][T14972] validate_nla: 1 callbacks suppressed [ 978.365927][T14972] netlink: 'syz.3.8476': attribute type 1 has an invalid length. [ 978.402347][T14972] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8476'. [ 978.525174][T14982] IPVS: length: 36 != 8 [ 978.542527][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8479'. [ 978.569472][T14980] openvswitch: netlink: Duplicate or invalid key (type 0). [ 978.578104][T14980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.688165][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8483'. [ 978.700905][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8483'. [ 978.904138][T15002] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 978.938955][T14986] infiniband syz1: set down [ 978.943602][T14986] infiniband syz1: added veth0_to_batadv [ 978.958091][T15002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 978.970385][T15009] xt_l2tp: invalid flags combination: 0 [ 978.994952][T14986] RDS/IB: syz1: added [ 978.999310][T14986] smc: adding ib device syz1 with port count 1 [ 979.005590][T14986] smc: ib device syz1 port 1 has no pnetid [ 979.346368][T15029] syzkaller1: entered promiscuous mode [ 979.358233][T15029] syzkaller1: entered allmulticast mode [ 979.488551][T15038] tipc: Enabled bearer , priority 10 [ 979.622705][T15046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 979.774851][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8495'. [ 979.787657][T15051] openvswitch: netlink: Duplicate or invalid key (type 0). [ 979.795001][T15051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.850981][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8498'. [ 980.220809][T15085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8504'. [ 980.266777][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8503'. [ 980.326951][T15089] sctp: [Deprecated]: syz.2.8505 (pid 15089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.326951][T15089] Use struct sctp_sack_info instead [ 980.844237][T15110] pimreg: tun_chr_ioctl cmd 1074025677 [ 980.876882][T15110] pimreg: linktype set to 780 [ 980.890675][T15112] openvswitch: netlink: Duplicate or invalid key (type 0). [ 980.900712][T15112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.848251][T15152] gretap2: entered promiscuous mode [ 981.858071][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 981.866344][ C1] lec:lec_tx_timeout: lec0 [ 981.876163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 982.253274][T15195] openvswitch: netlink: Duplicate or invalid key (type 0). [ 982.266284][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.355567][T15206] netlink: 'syz.4.8528': attribute type 1 has an invalid length. [ 982.424340][T15206] bond8: entered promiscuous mode [ 982.443889][T15206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 982.542211][T15206] bond8: (slave bridge3): making interface the new active one [ 982.572789][T15206] bridge3: entered promiscuous mode [ 982.604875][T15206] bridge3: left promiscuous mode [ 982.888667][T15217] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.904880][T15217] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.970257][T15217] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.982390][T15217] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.033234][T15217] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.043534][T15217] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.079791][T15223] wlan1 speed is unknown, defaulting to 1000 [ 983.095689][T15223] lo speed is unknown, defaulting to 1000 [ 983.171674][T15230] xt_CT: No such helper "pptp" [ 983.183136][T15217] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 983.247394][T15217] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.313496][T15233] __nla_validate_parse: 8 callbacks suppressed [ 983.313520][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8537'. [ 983.371860][ T1889] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.380982][ T1889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.427072][T15237] atomic_op ffff88805917b198 conn xmit_atomic 0000000000000000 [ 983.483043][ T1889] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.498580][ T1889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.509264][ T1889] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.520633][ T1889] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.583346][ T1889] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.599255][ T1889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.743965][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8540'. [ 983.757175][T15248] openvswitch: netlink: Duplicate or invalid key (type 0). [ 983.772018][T15248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.931370][T15260] netlink: 'syz.3.8543': attribute type 1 has an invalid length. [ 984.042697][T15265] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 984.120279][T15260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8543'. [ 984.243067][T15260] 8021q: adding VLAN 0 to HW filter on device bond11 [ 984.246392][ T1878] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 984.261767][T15269] wlan1 speed is unknown, defaulting to 1000 [ 984.277584][T15270] pimreg: tun_chr_ioctl cmd 1074025677 [ 984.283483][T15270] pimreg: linktype set to 774 [ 984.361397][T15279] xt_CT: No such helper "pptp" [ 984.366550][T15269] lo speed is unknown, defaulting to 1000 [ 984.409469][ T1889] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 985.280113][T15331] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 985.346189][T15328] xt_CT: No such helper "pptp" [ 985.631807][T15352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8565'. [ 985.652355][T15352] openvswitch: netlink: Flow actions attr not present in new flow. [ 985.808793][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8566'. [ 985.833111][T15361] netlink: 'syz.0.8567': attribute type 1 has an invalid length. [ 985.841913][T15361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8567'. [ 985.917906][T15365] openvswitch: netlink: Missing valid actions attribute. [ 985.933951][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.953155][T15367] xt_check_target: 23 callbacks suppressed [ 985.953180][T15367] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 986.280899][T15375] xt_CT: No such helper "pptp" [ 986.286883][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8576'. [ 986.309680][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8576'. [ 986.320675][T15383] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8576'. [ 986.429814][T15393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8580'. [ 986.446326][T15393] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 986.720075][T15409] syzkaller0: entered promiscuous mode [ 986.745175][T15409] syzkaller0: entered allmulticast mode [ 986.886054][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 986.894148][ C1] lec:lec_tx_timeout: lec0 [ 988.624754][T15428] __nla_validate_parse: 4 callbacks suppressed [ 988.624776][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8587'. [ 988.690750][T15425] team_slave_0: entered promiscuous mode [ 988.696729][T15425] team_slave_1: entered promiscuous mode [ 988.713161][T15425] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 988.919735][T15452] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8593'. [ 989.017243][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.047853][T15457] veth1_to_bond: entered allmulticast mode [ 989.055123][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.080134][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.091038][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.102005][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.132601][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.158281][T15459] netlink: 'syz.1.8594': attribute type 8 has an invalid length. [ 989.179271][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8594'. [ 989.254859][T15456] veth1_to_bond: left allmulticast mode [ 989.330300][T15465] openvswitch: netlink: EtherType 50a is less than min 600 [ 989.371911][T15465] netlink: 'syz.1.8597': attribute type 3 has an invalid length. [ 989.383632][T15465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8597'. [ 989.523101][T15474] rdma_op ffff8880815d71f0 conn xmit_rdma 0000000000000000 [ 990.059156][T15497] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 990.082920][T15497] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 990.154747][T15499] wlan1 speed is unknown, defaulting to 1000 [ 990.278626][T15499] lo speed is unknown, defaulting to 1000 [ 990.304817][T15505] wlan1 speed is unknown, defaulting to 1000 [ 990.316611][T15517] bridge0: left allmulticast mode [ 990.342515][T15517] bridge_slave_0: left allmulticast mode [ 990.348335][T15517] bridge_slave_0: left promiscuous mode [ 990.354591][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.371861][T15505] lo speed is unknown, defaulting to 1000 [ 990.402748][T15517] bridge_slave_1: left allmulticast mode [ 990.409609][T15517] bridge_slave_1: left promiscuous mode [ 990.434492][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.457235][T15517] bond0: (slave bond_slave_0): Releasing backup interface [ 990.475115][T15517] bond0: (slave bond_slave_1): Releasing backup interface [ 990.508479][T15517] team0: Port device team_slave_0 removed [ 990.517634][T15517] team0: Port device team_slave_1 removed [ 990.524190][T15517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.550974][T15501] wlan1 speed is unknown, defaulting to 1000 [ 990.617901][T15501] lo speed is unknown, defaulting to 1000 [ 991.212083][T15563] netlink: 'syz.4.8626': attribute type 2 has an invalid length. [ 991.221023][T15563] netlink: 'syz.4.8626': attribute type 2 has an invalid length. [ 991.569278][ T29] audit: type=1804 audit(1772525942.677:21): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8630" name="/newroot/419/memory.events" dev="tmpfs" ino=2156 res=1 errno=0 [ 991.641771][ T29] audit: type=1800 audit(1772525942.677:22): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8630" name="memory.events" dev="tmpfs" ino=2156 res=0 errno=0 [ 991.680094][ T29] audit: type=1804 audit(1772525942.677:23): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8630" name="/newroot/419/memory.events" dev="tmpfs" ino=2156 res=1 errno=0 [ 991.810502][T15588] 8021q: VLANs not supported on wg1 [ 991.936236][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 992.135102][T15612] syzkaller0: entered promiscuous mode [ 992.141564][T15612] syzkaller0: entered allmulticast mode [ 992.418793][T15614] wlan1 speed is unknown, defaulting to 1000 [ 992.472754][T15627] gre3: entered allmulticast mode [ 992.478875][T15614] lo speed is unknown, defaulting to 1000 [ 993.003113][ T1300] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 993.704428][ T29] audit: type=1800 audit(1772525944.827:24): pid=15646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8653" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2739 res=0 errno=0 [ 993.927187][T15654] __nla_validate_parse: 5 callbacks suppressed [ 993.927205][T15654] netlink: 54 bytes leftover after parsing attributes in process `syz.1.8656'. [ 994.148903][T15651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8655'. [ 994.159048][T15651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 994.409588][T15677] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8662'. [ 994.563126][T15687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8666'. [ 994.588689][T15687] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8666'. [ 994.605285][T15687] netlink: 'syz.2.8666': attribute type 5 has an invalid length. [ 994.624178][T15687] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8666'. [ 994.922674][T15695] wlan1 speed is unknown, defaulting to 1000 [ 994.983156][T15695] lo speed is unknown, defaulting to 1000 [ 995.752901][T15737] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8678'. [ 996.154324][T15759] 8021q: VLANs not supported on wg2 [ 996.570565][T15790] wlan1 speed is unknown, defaulting to 1000 [ 996.585899][T15790] lo speed is unknown, defaulting to 1000 [ 996.647854][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8695'. [ 996.873233][T15801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8698'. [ 996.946050][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 996.954165][ C1] lec:lec_tx_timeout: lec0 [ 996.960132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1001.976096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1001.984350][ C1] lec:lec_tx_timeout: lec0 [ 1002.016252][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1007.026191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1007.034327][ C1] lec:lec_tx_timeout: lec0 [ 1007.056617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1012.816151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1012.824242][ C1] lec:lec_tx_timeout: lec0 [ 1012.829068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1017.856137][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1017.864163][ C1] lec:lec_tx_timeout: lec0 [ 1022.176141][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1027.856233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1027.864286][ C1] lec:lec_tx_timeout: lec0 [ 1027.869497][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1032.876042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1032.884113][ C1] lec:lec_tx_timeout: lec0 [ 1037.194653][T15814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1037.214883][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1037.218523][T15818] tipc: Enabling of bearer rejected, already enabled [ 1037.243977][T15823] netlink: 'syz.3.8702': attribute type 1 has an invalid length. [ 1037.260396][T15813] netlink: 'syz.0.8699': attribute type 1 has an invalid length. [ 1037.266969][T15823] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1037.296604][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1037.318742][T15818] tipc: Resetting bearer [ 1037.411155][T15829] wlan1 speed is unknown, defaulting to 1000 [ 1037.420669][T15829] lo speed is unknown, defaulting to 1000 [ 1037.625159][T15857] netlink: 'syz.2.8706': attribute type 1 has an invalid length. [ 1037.726893][T15846] bond7: entered allmulticast mode [ 1037.814033][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8706'. [ 1038.421056][T15878] tipc: Enabling of bearer rejected, already enabled [ 1038.571446][T15886] pim6reg: entered allmulticast mode [ 1038.769876][T15887] pim6reg: left allmulticast mode [ 1039.015851][T15903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.044161][T15897] netlink: 'syz.0.8715': attribute type 2 has an invalid length. [ 1039.078988][T15906] batadv_slave_1: entered promiscuous mode [ 1039.091975][T15906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8718'. [ 1039.139323][T15906] batadv_slave_1 (unregistering): left promiscuous mode [ 1039.156394][T15906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.370293][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8721'. [ 1039.491486][T15936] netlink: 'syz.1.8726': attribute type 13 has an invalid length. [ 1039.517306][T15931] wlan1 speed is unknown, defaulting to 1000 [ 1039.523076][T15936] netlink: 'syz.1.8726': attribute type 17 has an invalid length. [ 1039.605033][T15936] 8021q: adding VLAN 0 to HW filter on device .` [ 1039.618992][T15936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1039.636080][T15931] lo speed is unknown, defaulting to 1000 [ 1039.770629][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1039.907260][T15937] IPVS: length: 132 != 8 [ 1039.925273][T15937] pimreg: entered allmulticast mode [ 1039.937065][T15937] pimreg: left allmulticast mode [ 1040.073479][T15954] IPVS: length: 146 != 24 [ 1040.171162][T15958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8731'. [ 1040.254103][T15960] netlink: 'syz.3.8734': attribute type 1 has an invalid length. [ 1040.291180][T15963] netlink: 'syz.0.8733': attribute type 1 has an invalid length. [ 1040.309851][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8735'. [ 1040.330969][T15969] xt_hashlimit: max too large, truncated to 1048576 [ 1040.452757][T15963] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1040.458964][T15971] vlan0: entered allmulticast mode [ 1040.513821][T15971] bridge7: entered allmulticast mode [ 1040.592280][T15967] bridge7: port 1(veth9) entered blocking state [ 1040.627407][T15967] bridge7: port 1(veth9) entered disabled state [ 1040.650686][T15967] veth9: entered allmulticast mode [ 1040.665602][T15967] veth9: entered promiscuous mode [ 1041.000549][T15997] x_tables: duplicate underflow at hook 2 [ 1041.243485][T15991] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1041.310473][T15991] bond9 (unregistering): Released all slaves [ 1041.566973][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.595590][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.604626][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.617603][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.630701][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.737360][T10537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.753453][T10537] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.769558][T10537] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.804359][T10537] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.814127][T10537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.927322][T16004] wlan1 speed is unknown, defaulting to 1000 [ 1041.935370][T16004] lo speed is unknown, defaulting to 1000 [ 1042.079325][ T1364] syz_tun (unregistering): left allmulticast mode [ 1042.088197][ T1364] .`: (slave syz_tun): Releasing backup interface [ 1042.251654][T16020] syzkaller0: entered promiscuous mode [ 1042.276755][T16020] syzkaller0: entered allmulticast mode [ 1042.342348][ T1887] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.359888][ T1887] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.405892][T16036] netlink: 'syz.3.8751': attribute type 39 has an invalid length. [ 1042.732856][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8754'. [ 1042.820069][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1042.828117][ C1] lec:lec_tx_timeout: lec0 [ 1042.832690][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1043.861324][T10537] Bluetooth: hci0: command tx timeout [ 1044.489426][ T1887] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.499499][ T1887] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.542641][T16050] wlan1 speed is unknown, defaulting to 1000 [ 1044.582410][T16050] lo speed is unknown, defaulting to 1000 [ 1044.642658][ T1887] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.658198][ T1887] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.037184][ T1887] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.065092][ T1887] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.152743][T16090] netlink: 'syz.0.8762': attribute type 4 has an invalid length. [ 1045.212123][T16088] netlink: 'syz.0.8762': attribute type 4 has an invalid length. [ 1045.647690][ T1887] gretap0: left allmulticast mode [ 1045.656921][ T1887] bridge0: port 3(gretap0) entered disabled state [ 1045.704732][ T1887] bridge_slave_1: left allmulticast mode [ 1045.713517][ T1887] bridge_slave_1: left promiscuous mode [ 1045.726007][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.739488][ T1887] bridge_slave_0: left allmulticast mode [ 1045.755426][ T1887] bridge_slave_0: left promiscuous mode [ 1045.765766][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.822590][ T1887] veth9: left allmulticast mode [ 1045.833240][ T1887] veth9: left promiscuous mode [ 1045.843405][ T1887] bridge7: port 1(veth9) entered disabled state [ 1045.936276][T10537] Bluetooth: hci0: command tx timeout [ 1046.563591][ T1887] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 1046.572456][ T1887] bridge6 (unregistering): left promiscuous mode [ 1046.723101][ T1887] bond1 (unregistering): (slave .`): Releasing active interface [ 1046.738211][ T1887] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.768996][ T1887] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.779802][ T1887] .` (unregistering): Released all slaves [ 1046.797591][ T1887] bond1 (unregistering): Released all slaves [ 1046.822782][ T1887] bond0 (unregistering): Released all slaves [ 1046.844436][ T1887] bond2 (unregistering): Released all slaves [ 1046.865004][ T1887] bond3 (unregistering): Released all slaves [ 1046.890506][ T1887] bond4 (unregistering): Released all slaves [ 1046.911931][ T1887] bond5 (unregistering): Released all slaves [ 1046.936431][ T1887] bond6 (unregistering): Released all slaves [ 1046.953837][ T1887] bond7 (unregistering): Released all slaves [ 1047.020691][T16105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.083656][T16004] chnl_net:caif_netlink_parms(): no params data found [ 1047.132873][ T980] lo speed is unknown, defaulting to 1000 [ 1047.140596][ T980] syz2: Port: 1 Link DOWN [ 1047.176440][ T1887] 9: left promiscuous mode [ 1047.230469][T16111] netlink: 'syz.0.8768': attribute type 3 has an invalid length. [ 1047.302539][ T1887] tipc: Disabling bearer [ 1047.317565][ T1887] tipc: Disabling bearer [ 1047.329039][ T1887] tipc: Left network mode [ 1047.448788][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.458092][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.465478][T16004] bridge_slave_0: entered allmulticast mode [ 1047.481524][T16004] bridge_slave_0: entered promiscuous mode [ 1047.529297][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.546085][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.561988][T16004] bridge_slave_1: entered allmulticast mode [ 1047.585711][T16004] bridge_slave_1: entered promiscuous mode [ 1047.648166][T16129] syzkaller0: entered promiscuous mode [ 1047.653689][T16129] syzkaller0: entered allmulticast mode [ 1047.754516][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.772522][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.821373][T16129] tipc: Enabled bearer , priority 0 [ 1047.828935][T16150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8777'. [ 1047.856072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1047.864176][ C1] lec:lec_tx_timeout: lec0 [ 1047.884464][T16147] tc_dump_action: action bad kind [ 1047.925473][T16126] tipc: Resetting bearer [ 1048.011572][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8777'. [ 1048.020933][T10537] Bluetooth: hci0: command tx timeout [ 1048.135870][T16126] tipc: Disabling bearer [ 1048.182068][T16153] tipc: Enabling of bearer rejected, already enabled [ 1048.269068][T16140] tipc: Resetting bearer [ 1048.401658][T16004] team0: Port device team_slave_0 added [ 1048.438498][T16181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8779'. [ 1048.492250][T16004] team0: Port device team_slave_1 added [ 1048.633104][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.660490][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.743118][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.787141][T16201] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1048.814232][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8784'. [ 1048.847468][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.854447][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.904707][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.019324][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1049.030156][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1049.107461][T16212] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1049.143362][T16212] netlink: 260 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1049.254230][T16004] hsr_slave_0: entered promiscuous mode [ 1049.268026][T16004] hsr_slave_1: entered promiscuous mode [ 1049.342801][T16223] rdma_op ffff8880553631f0 conn xmit_rdma 0000000000000000 [ 1049.376457][T16227] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.8791'. [ 1049.470879][ T1887] team_slave_0: left promiscuous mode [ 1049.476860][ T1887] team_slave_1: left promiscuous mode [ 1049.486149][ T1887] veth1_macvtap: left promiscuous mode [ 1049.491676][ T1887] veth0_macvtap: left promiscuous mode [ 1049.660084][T16252] netlink: 'syz.4.8798': attribute type 1 has an invalid length. [ 1049.701598][T16252] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8798'. [ 1050.096065][T10537] Bluetooth: hci0: command tx timeout [ 1050.248130][ T1887] team0 (unregistering): Port device team_slave_1 removed [ 1050.265256][ T1887] team0 (unregistering): Port device team_slave_0 removed [ 1050.469208][T16260] lo: Caught tx_queue_len zero misconfig [ 1050.479700][T16260] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1050.838170][T16286] Cannot find add_set index 0 as target [ 1051.060018][T16305] netlink: 'syz.0.8803': attribute type 13 has an invalid length. [ 1051.267701][ T1887] IPVS: stop unused estimator thread 0... [ 1051.440956][T16315] netlink: 'syz.4.8809': attribute type 5 has an invalid length. [ 1051.579434][T16318] @: option downdelay: invalid value (18446744073709547007) [ 1051.589743][T16318] @: option downdelay: allowed values 0 - 2147483647 [ 1051.598405][T16318] @ (unregistering): Released all slaves [ 1051.629520][T16280] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1051.802187][T16326] xfrm0: entered promiscuous mode [ 1051.820713][T16326] xfrm0: entered allmulticast mode [ 1051.861817][T16004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1051.888320][T16328] batman_adv: batadv0: Adding interface: dummy0 [ 1051.894826][T16328] batman_adv: batadv0: Interface activated: dummy0 [ 1051.912838][T16334] netlink: 'syz.1.8814': attribute type 1 has an invalid length. [ 1051.914827][T16004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1051.940723][T16334] netlink: 'syz.1.8814': attribute type 1 has an invalid length. [ 1051.941728][T16004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1051.956409][T16334] netlink: 'syz.1.8814': attribute type 8 has an invalid length. [ 1051.990402][T16328] batadv0: mtu less than device minimum [ 1051.998086][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.010282][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.022167][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.033906][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.045051][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.056760][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.068361][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.080103][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.091864][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.103460][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.114880][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.126270][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.137383][T16328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1052.182795][T16351] netlink: 'syz.0.8816': attribute type 3 has an invalid length. [ 1052.195243][T16351] netlink: 'syz.0.8816': attribute type 3 has an invalid length. [ 1052.208252][T16004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.383371][T16367] netem: incorrect gi model size [ 1052.403979][T16367] netem: change failed [ 1052.416087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1052.474340][T16375] pim6reg: entered allmulticast mode [ 1052.523622][T16376] pim6reg: left allmulticast mode [ 1052.606970][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.652958][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.685182][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.692413][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.749123][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.756357][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.818885][T10537] Bluetooth: hci0: command 0x080f tx timeout [ 1052.892135][T16411] tipc: Enabled bearer , priority 0 [ 1052.937808][T16411] syzkaller0: entered promiscuous mode [ 1052.943321][T16411] syzkaller0: entered allmulticast mode [ 1053.023289][T16420] ipvlan2: entered promiscuous mode [ 1053.049346][T16420] bridge0: port 1(ipvlan2) entered blocking state [ 1053.063421][T16420] bridge0: port 1(ipvlan2) entered disabled state [ 1053.074818][T16420] ipvlan2: entered allmulticast mode [ 1053.080598][T16420] bridge0: entered allmulticast mode [ 1053.088649][T16420] ipvlan2: left allmulticast mode [ 1053.093768][T16420] bridge0: left allmulticast mode [ 1053.152778][T16423] tipc: Resetting bearer [ 1053.333112][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.411347][T16004] veth0_vlan: entered promiscuous mode [ 1053.434327][T16004] veth1_vlan: entered promiscuous mode [ 1053.493363][T16004] veth0_macvtap: entered promiscuous mode [ 1053.505647][T16004] veth1_macvtap: entered promiscuous mode [ 1053.559514][T16004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.580333][T16004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.625849][T16451] __nla_validate_parse: 8 callbacks suppressed [ 1053.625874][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8839'. [ 1053.670941][ T1889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.721115][T16410] tipc: Resetting bearer [ 1053.762810][T16458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8841'. [ 1053.819872][T16410] tipc: Disabling bearer [ 1053.872013][ T1889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.906181][ T1889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.936416][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8842'. [ 1053.983827][ T1889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.091996][T16461] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8842'. [ 1054.187169][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8843'. [ 1054.225069][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8843'. [ 1054.392429][ T1882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.436378][ T1882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.511903][ T1878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.526717][ T1878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.672841][T16503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8743'. [ 1054.724204][T16505] batman_adv: batadv0: Adding interface: macvlan2 [ 1054.734991][T16505] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.788340][T16505] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1054.817152][T16510] batadv_slave_0: entered promiscuous mode [ 1054.878282][T16510] batadv_slave_0: left promiscuous mode [ 1054.921613][T16512] xt_CT: No such helper "pptp" [ 1054.971006][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1055.215045][T16533] syzkaller0: entered promiscuous mode [ 1055.228103][T16533] syzkaller0: entered allmulticast mode [ 1055.306494][T16537] netlink: 'syz.2.8857': attribute type 11 has an invalid length. [ 1055.314433][T16537] netlink: 'syz.2.8857': attribute type 4 has an invalid length. [ 1055.323170][T16537] netlink: 'syz.2.8857': attribute type 5 has an invalid length. [ 1055.331344][T16537] netlink: 'syz.2.8857': attribute type 6 has an invalid length. [ 1055.340825][T16537] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.8857'. [ 1055.480022][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8858'. [ 1055.494805][T16537] wlan1 speed is unknown, defaulting to 1000 [ 1055.582358][T16537] lo speed is unknown, defaulting to 1000 [ 1056.093751][T16559] vlan3: entered promiscuous mode [ 1056.123652][T16559] dummy0: entered promiscuous mode [ 1056.841801][T16598] netlink: 'syz.0.8871': attribute type 1 has an invalid length. [ 1056.891213][T16586] IPVS: Scheduler module ip_vs_ not found [ 1057.019547][T16598] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1057.089160][T16602] vlan4: entered promiscuous mode [ 1057.094222][T16602] bond5: entered promiscuous mode [ 1057.126275][T16602] vlan4: entered allmulticast mode [ 1057.131432][T16602] bond5: entered allmulticast mode [ 1057.257377][T16614] netlink: 'syz.2.8874': attribute type 1 has an invalid length. [ 1057.474635][T16615] bond1 (unregistering): Released all slaves [ 1057.595609][T16602] bond5: (slave bridge4): making interface the new active one [ 1057.623272][T16602] bridge4: entered promiscuous mode [ 1057.629411][T16602] bridge4: entered allmulticast mode [ 1057.637130][T16602] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1057.856044][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5440 ms [ 1057.864124][ C1] lec:lec_tx_timeout: lec0 [ 1057.869351][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1060.254829][T16674] xt_hashlimit: max too large, truncated to 1048576 [ 1060.514927][T16739] __nla_validate_parse: 9 callbacks suppressed [ 1060.514949][T16739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8894'. [ 1060.716772][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1060.729634][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1060.863445][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1060.882158][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1060.897863][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1060.915798][T16763] netlink: 'syz.3.8898': attribute type 1 has an invalid length. [ 1060.924591][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1060.932940][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1060.977899][T16761] wlan1 speed is unknown, defaulting to 1000 [ 1060.989048][T16761] lo speed is unknown, defaulting to 1000 [ 1061.474171][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1061.485319][T16779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8903'. [ 1061.682371][T16730] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.705726][T16730] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.735802][T16730] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.757349][T16730] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.806864][T16740] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.806955][T16788] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8907'. [ 1061.824656][T16740] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.824719][T16740] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.824749][T16740] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.923531][T16796] bridge8: entered promiscuous mode [ 1061.930579][T16796] bridge8: entered allmulticast mode [ 1061.950175][T16796] team0: Port device bridge8 added [ 1062.150461][T16797] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1062.182510][T16797] bond13 (unregistering): Released all slaves [ 1062.244058][T16796] bridge0: port 3(team0) entered blocking state [ 1062.250638][T16796] bridge0: port 3(team0) entered disabled state [ 1062.262899][T16796] team0: entered allmulticast mode [ 1062.268246][T16796] team_slave_0: entered allmulticast mode [ 1062.274244][T16796] team_slave_1: entered allmulticast mode [ 1062.371830][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8912'. [ 1062.485649][T16822] netlink: 388 bytes leftover after parsing attributes in process `syz.2.8915'. [ 1062.561571][T16761] chnl_net:caif_netlink_parms(): no params data found [ 1062.610664][T16822] netlink: 'syz.2.8915': attribute type 4 has an invalid length. [ 1062.885955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1062.894038][ C1] lec:lec_tx_timeout: lec0 [ 1062.928711][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.956204][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.966202][T16761] bridge_slave_0: entered allmulticast mode [ 1062.974047][T16761] bridge_slave_0: entered promiscuous mode [ 1062.980782][T10537] Bluetooth: hci2: command tx timeout [ 1062.991194][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.999601][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.007005][T16761] bridge_slave_1: entered allmulticast mode [ 1063.014779][T16761] bridge_slave_1: entered promiscuous mode [ 1063.029910][T16854] netlink: 'syz.0.8917': attribute type 13 has an invalid length. [ 1063.049309][T16844] wlan1 speed is unknown, defaulting to 1000 [ 1063.058337][T16844] lo speed is unknown, defaulting to 1000 [ 1063.207738][T16761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.236712][T16761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.455556][T16761] team0: Port device team_slave_0 added [ 1063.482056][T16870] netlink: 'syz.0.8920': attribute type 11 has an invalid length. [ 1063.497617][T16761] team0: Port device team_slave_1 added [ 1063.513418][T16735] veth7: left allmulticast mode [ 1063.526954][T16735] veth7: left promiscuous mode [ 1063.533138][T16735] bridge2: port 3(veth7) entered disabled state [ 1063.563023][T16735] veth0_to_bond: left allmulticast mode [ 1063.569609][T16735] veth0_to_bond: left promiscuous mode [ 1063.582456][T16735] bridge2: port 2(veth0_to_bond) entered disabled state [ 1063.602166][T16735] veth5: left allmulticast mode [ 1063.607230][T16735] veth5: left promiscuous mode [ 1063.614183][T16735] bridge2: port 1(veth5) entered disabled state [ 1063.655594][T16735] tipc: Resetting bearer [ 1063.827481][T16735] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 1064.021514][T16735] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1064.298769][T16735] tipc: Disabling bearer [ 1064.480454][T16735] bond3 (unregistering): (slave bridge8): Releasing active interface [ 1064.744698][T16735] bond4 (unregistering): (slave .`): Releasing active interface [ 1064.758286][T16735] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.769455][T16735] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.780662][T16735] .` (unregistering): Released all slaves [ 1064.793260][T16735] bond1 (unregistering): Released all slaves [ 1064.811475][T16735] bond2 (unregistering): Released all slaves [ 1064.831953][T16735] bond3 (unregistering): Released all slaves [ 1064.854329][T16735] bond4 (unregistering): Released all slaves [ 1064.879959][T16735] bond0 (unregistering): Released all slaves [ 1064.892841][T16735] bond5 (unregistering): Released all slaves [ 1065.056166][T10537] Bluetooth: hci2: command tx timeout [ 1065.172306][T16735] !: left promiscuous mode [ 1065.239408][T16909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8925'. [ 1065.259419][T16761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.269500][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.297103][T16761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.326666][T16735] tipc: Disabling bearer [ 1065.333037][T16735] tipc: Left network mode [ 1065.333803][T16761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.356414][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.389549][T16761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.525367][T16761] hsr_slave_0: entered promiscuous mode [ 1065.532539][T16761] hsr_slave_1: entered promiscuous mode [ 1065.542526][T16761] debugfs: 'hsr0' already exists in 'hsr' [ 1065.551632][T16761] Cannot create hsr debugfs directory [ 1065.564512][T16919] tipc: Enabling of bearer rejected, failed to enable media [ 1065.640783][T16919] tipc: Enabling of bearer rejected, failed to enable media [ 1065.655107][T16926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1065.684223][T16926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1065.709659][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1065.746894][T16929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1065.773608][T16929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8929'. [ 1066.148616][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8933'. [ 1066.250926][T16951] IPVS: Scheduler module ip_vs_ not found [ 1066.380938][T16948] bond6: option arp_interval: invalid value (18446744073709551615) [ 1066.414835][T16948] bond6: option arp_interval: allowed values 0 - 2147483647 [ 1066.434674][T16948] bond6 (unregistering): Released all slaves [ 1066.551873][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8938'. [ 1067.136496][T10537] Bluetooth: hci2: command tx timeout [ 1067.173315][T16735] hsr_slave_0: left promiscuous mode [ 1067.242709][T16735] hsr_slave_1: left promiscuous mode [ 1067.278434][T16994] net_ratelimit: 8 callbacks suppressed [ 1067.278456][T16994] openvswitch: netlink: Key 19 has unexpected len 6 expected 4 [ 1067.421822][T16735] pim6reg99999999 (unregistering): left allmulticast mode [ 1067.584968][T17017] netlink: 'syz.4.8948': attribute type 1 has an invalid length. [ 1067.609536][T17017] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1068.275184][T17029] syzkaller0: entered promiscuous mode [ 1068.284473][T17029] syzkaller0: entered allmulticast mode [ 1068.359791][T17040] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8949'. [ 1068.641320][T16761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1068.690955][T16761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1068.727699][T17053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8954'. [ 1068.759067][T17054] netlink: 'syz.0.8953': attribute type 1 has an invalid length. [ 1068.782333][T16761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1068.902716][T17066] netlink: 'syz.3.8956': attribute type 49 has an invalid length. [ 1068.925737][T16761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1068.952988][T17066] netlink: 'syz.3.8956': attribute type 4 has an invalid length. [ 1069.001099][T16735] IPVS: stop unused estimator thread 0... [ 1069.011743][T17066] netlink: 'syz.3.8956': attribute type 25 has an invalid length. [ 1069.217173][T10537] Bluetooth: hci2: command tx timeout [ 1069.327026][T16761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.406941][T17095] wlan1 speed is unknown, defaulting to 1000 [ 1069.418396][T16761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.441080][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.448251][T16738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.545220][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.552429][T16738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.606991][T17096] wlan1 speed is unknown, defaulting to 1000 [ 1070.006905][T17121] wlan1 speed is unknown, defaulting to 1000 [ 1070.388314][T16761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.631766][T16761] veth0_vlan: entered promiscuous mode [ 1070.678861][T16761] veth1_vlan: entered promiscuous mode [ 1070.759325][T16761] veth0_macvtap: entered promiscuous mode [ 1070.793294][T16761] veth1_macvtap: entered promiscuous mode [ 1070.864923][T16761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.904752][T16761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.075274][T16738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.099155][T16738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.145413][T16738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.179547][T16738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.441283][T16737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.477994][T16737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.532253][T16742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.577525][T16742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.779907][T17180] __nla_validate_parse: 4 callbacks suppressed [ 1071.779926][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1071.814422][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1071.913830][T17180] Bluetooth: MGMT ver 1.23 [ 1071.988255][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8974'. [ 1072.321869][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1072.335131][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1072.365125][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1072.663229][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8980'. [ 1072.727379][T17215] pimreg: tun_chr_ioctl cmd 1074025677 [ 1072.750071][T17215] pimreg: linktype set to 1 [ 1072.809377][T17219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8981'. [ 1072.927390][T17223] wlan1 speed is unknown, defaulting to 1000 [ 1072.933728][ T29] audit: type=1800 audit(1772526024.057:25): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8983" name="memory.events" dev="tmpfs" ino=30 res=0 errno=0 [ 1072.958603][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8983'. [ 1072.997102][ T29] audit: type=1804 audit(1772526024.087:26): pid=17226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8983" name="/newroot/2/memory.events" dev="tmpfs" ino=30 res=1 errno=0 [ 1073.016096][T17228] netlink: 876 bytes leftover after parsing attributes in process `syz.1.8983'. [ 1073.197864][T17232] syzkaller1: entered promiscuous mode [ 1073.221751][T17232] syzkaller1: entered allmulticast mode [ 1073.837393][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1073.848866][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1073.872345][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1073.882152][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1073.896396][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1073.963676][T17248] wlan1 speed is unknown, defaulting to 1000 [ 1074.127797][ T3127] bond0: (slave syz_tun): Releasing backup interface [ 1075.117685][T17248] chnl_net:caif_netlink_parms(): no params data found [ 1075.231895][T17248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.239499][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.246930][T17248] bridge_slave_0: entered allmulticast mode [ 1075.254670][T17248] bridge_slave_0: entered promiscuous mode [ 1075.264483][T17248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.272231][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.279751][T17248] bridge_slave_1: entered allmulticast mode [ 1075.287746][T17248] bridge_slave_1: entered promiscuous mode [ 1075.325394][T17248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.342607][T17248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.405816][T17248] team0: Port device team_slave_0 added [ 1075.433239][T17285] vlan2: entered promiscuous mode [ 1075.438650][T17285] geneve1: entered promiscuous mode [ 1075.444149][T17285] vlan2: entered allmulticast mode [ 1075.450502][T17285] geneve1: entered allmulticast mode [ 1075.467279][T17248] team0: Port device team_slave_1 added [ 1075.546861][T17248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.553846][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.616264][T17248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.641745][T17248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.655968][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.716008][T17248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.812745][T17248] hsr_slave_0: entered promiscuous mode [ 1075.820648][T17248] hsr_slave_1: entered promiscuous mode [ 1075.827642][T17248] debugfs: 'hsr0' already exists in 'hsr' [ 1075.833563][T17248] Cannot create hsr debugfs directory [ 1075.847482][T17298] tipc: Enabled bearer , priority 0 [ 1075.874642][T17298] syzkaller0: entered promiscuous mode [ 1075.880337][T17298] syzkaller0: entered allmulticast mode [ 1075.929831][T17298] tipc: Resetting bearer [ 1075.940933][T10537] Bluetooth: hci3: command tx timeout [ 1075.973956][T17297] tipc: Resetting bearer [ 1075.998067][T17297] tipc: Disabling bearer [ 1076.674865][T17248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1076.724192][T17248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1076.741857][T17248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1076.760845][T17248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1076.828996][T17317] __nla_validate_parse: 4 callbacks suppressed [ 1076.829015][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1076.859994][T17248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.899262][T17248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.915864][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.924022][T16732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.943271][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.950512][T16730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.022491][T17333] netlink: 364 bytes leftover after parsing attributes in process `syz.4.9012'. [ 1077.093041][T17334] wlan1 speed is unknown, defaulting to 1000 [ 1077.229523][T17330] wlan1 speed is unknown, defaulting to 1000 [ 1077.293486][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1077.394074][T17355] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9016'. [ 1077.484791][T17362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9018'. [ 1077.638875][T17366] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1077.648130][T17248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.771064][T17248] veth0_vlan: entered promiscuous mode [ 1077.807506][T17248] veth1_vlan: entered promiscuous mode [ 1077.814426][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9022'. [ 1077.893522][T17248] veth0_macvtap: entered promiscuous mode [ 1077.912748][T17374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9022'. [ 1077.919226][T17248] veth1_macvtap: entered promiscuous mode [ 1077.957937][T17376] xt_hashlimit: size too large, truncated to 1048576 [ 1077.982359][T17248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.011195][T17248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.026386][T10537] Bluetooth: hci3: command tx timeout [ 1078.148752][T16735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.209729][T16736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.229920][T16736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.289663][T16736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.469605][T17393] netlink: 'syz.4.9028': attribute type 1 has an invalid length. [ 1078.478678][T17393] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9028'. [ 1078.595180][T17400] tunl0: Caught tx_queue_len zero misconfig [ 1078.610639][T17400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9030'. [ 1078.754513][T17413] Cannot find set identified by id 65534 to match [ 1078.955242][T16742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.974847][T16742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.980009][T17418] dvmrp0: entered allmulticast mode [ 1079.065248][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9036'. [ 1079.085846][T17426] syz.0.9036: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1079.135910][T17426] CPU: 0 UID: 0 PID: 17426 Comm: syz.0.9036 Not tainted syzkaller #0 PREEMPT(full) [ 1079.135936][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.135949][T17426] Call Trace: [ 1079.135958][T17426] [ 1079.135968][T17426] dump_stack_lvl+0xe8/0x150 [ 1079.136045][T17426] warn_alloc+0x249/0x340 [ 1079.136090][T17426] ? stack_trace_save+0xa9/0x100 [ 1079.136130][T17426] ? __pfx_warn_alloc+0x10/0x10 [ 1079.136158][T17426] ? kasan_save_track+0x4f/0x80 [ 1079.136184][T17426] ? kasan_save_track+0x3e/0x80 [ 1079.136202][T17426] ? __kasan_kmalloc+0x93/0xb0 [ 1079.136231][T17426] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1079.136251][T17426] ? xskq_create+0x56/0x170 [ 1079.136362][T17426] ? xsk_setsockopt+0x54c/0x990 [ 1079.136384][T17426] ? do_sock_setsockopt+0x17c/0x1b0 [ 1079.136415][T17426] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1079.136442][T17426] ? do_syscall_64+0x14d/0xf80 [ 1079.136475][T17426] __vmalloc_node_range_noprof+0x132/0x1730 [ 1079.136528][T17426] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1079.136557][T17426] ? __kasan_kmalloc+0x93/0xb0 [ 1079.136584][T17426] vmalloc_user_noprof+0xad/0xe0 [ 1079.136605][T17426] ? xskq_create+0xbf/0x170 [ 1079.136632][T17426] xskq_create+0xbf/0x170 [ 1079.136661][T17426] xsk_init_queue+0x8a/0xe0 [ 1079.136688][T17426] xsk_setsockopt+0x54c/0x990 [ 1079.136712][T17426] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1079.136736][T17426] ? __pfx_aa_sk_perm+0x10/0x10 [ 1079.136785][T17426] ? aa_sock_opt_perm+0xff/0x1a0 [ 1079.136813][T17426] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1079.136843][T17426] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1079.136869][T17426] do_sock_setsockopt+0x17c/0x1b0 [ 1079.136903][T17426] __x64_sys_setsockopt+0x13d/0x1b0 [ 1079.136938][T17426] do_syscall_64+0x14d/0xf80 [ 1079.136966][T17426] ? trace_irq_disable+0x3b/0x150 [ 1079.137008][T17426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.137041][T17426] ? clear_bhb_loop+0x40/0x90 [ 1079.137067][T17426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.137087][T17426] RIP: 0033:0x7f5042f9c799 [ 1079.137108][T17426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.137126][T17426] RSP: 002b:00007f5043e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1079.137147][T17426] RAX: ffffffffffffffda RBX: 00007f5043215fa0 RCX: 00007f5042f9c799 [ 1079.137161][T17426] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1079.137172][T17426] RBP: 00007f5043032bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1079.137184][T17426] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.137198][T17426] R13: 00007f5043216038 R14: 00007f5043215fa0 R15: 00007ffd7d34aed8 [ 1079.137232][T17426] [ 1079.407435][T17426] Mem-Info: [ 1079.410589][T17426] active_anon:10676 inactive_anon:0 isolated_anon:0 [ 1079.410589][T17426] active_file:3127 inactive_file:40769 isolated_file:0 [ 1079.410589][T17426] unevictable:768 dirty:178 writeback:0 [ 1079.410589][T17426] slab_reclaimable:13774 slab_unreclaimable:127887 [ 1079.410589][T17426] mapped:32851 shmem:1411 pagetables:1487 [ 1079.410589][T17426] sec_pagetables:0 bounce:0 [ 1079.410589][T17426] kernel_misc_reclaimable:0 [ 1079.410589][T17426] free:1268691 free_pcp:24705 free_cma:0 [ 1079.480330][T17426] Node 0 active_anon:42804kB inactive_anon:0kB active_file:12508kB inactive_file:162876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:45388kB dirty:712kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16944kB pagetables:5808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1079.525037][T17426] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86016kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1079.556285][T17426] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1079.588626][T17426] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1079.594417][T17426] Node 0 DMA32 free:1349032kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42804kB inactive_anon:0kB active_file:12508kB inactive_file:162876kB unevictable:1536kB writepending:712kB zspages:0kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:37032kB local_pcp:19128kB free_cma:0kB [ 1079.638090][T17426] lowmem_reserve[]: 0 0 0 0 0 [ 1079.642893][T17426] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1079.672455][T17426] lowmem_reserve[]: 0 0 0 0 0 [ 1079.678179][T17426] Node 1 Normal free:3714236kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61548kB local_pcp:34292kB free_cma:0kB [ 1079.712297][T17426] lowmem_reserve[]: 0 0 0 0 0 [ 1079.717114][T17426] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 1079.732489][T17426] Node 0 DMA32: 9284*4kB (UME) 9217*8kB (UME) 6177*16kB (UME) 1205*32kB (UME) 781*64kB (UME) 304*128kB (UME) 510*256kB (UM) 467*512kB (UM) 341*1024kB (UM) 143*2048kB (UM) 0*4096kB = 1348872kB [ 1079.753613][T17426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1079.765443][T17426] Node 1 Normal: 5*4kB (UM) 3*8kB (UM) 17*16kB (UME) 10*32kB (UME) 13*64kB (UME) 6*128kB (UM) 8*256kB (UME) 10*512kB (UME) 6*1024kB (UM) 6*2048kB (UE) 900*4096kB (UM) = 3714236kB [ 1079.784066][T17426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1079.793767][T17426] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1079.803205][T17426] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1079.812892][T17426] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1079.822867][T17426] 45303 total pagecache pages [ 1079.827827][T17426] 0 pages in swap cache [ 1079.831981][T17426] Free swap = 124996kB [ 1079.836222][T17426] Total swap = 124996kB [ 1079.840408][T17426] 2097051 pages RAM [ 1079.844206][T17426] 0 pages HighMem/MovableOnly [ 1079.849030][T17426] 427004 pages reserved [ 1079.853194][T17426] 0 pages cma reserved [ 1079.859719][T16736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.875288][T16736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.064279][T17453] netlink: 'syz.3.8985': attribute type 1 has an invalid length. [ 1080.074912][T17453] netlink: 'syz.3.8985': attribute type 2 has an invalid length. [ 1080.096761][T10537] Bluetooth: hci3: command tx timeout [ 1080.110241][T17447] macsec1: entered promiscuous mode [ 1080.732963][ T29] audit: type=1107 audit(1772526031.857:27): pid=17477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ǟsc%Wtg]oM"}4msp &pi=g^jS, @`7Saں%qg8kSr>S2)VӯQM0}o7Ni,9ݠQ=%Dp &T@PZ|TEOt, priority 0 [ 1089.120622][T17774] syzkaller0: entered promiscuous mode [ 1089.128389][T17774] syzkaller0: entered allmulticast mode [ 1089.138061][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1089.166180][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1089.238717][T17766] tipc: Resetting bearer [ 1089.264677][T17766] tipc: Disabling bearer [ 1089.301735][T17779] bridge0: entered promiscuous mode [ 1089.315045][T17779] macvtap1: entered promiscuous mode [ 1089.324302][T17779] macvtap1: entered allmulticast mode [ 1089.336088][T17779] bridge0: entered allmulticast mode [ 1089.344326][T17779] bridge0: port 3(macvtap1) entered blocking state [ 1089.376273][T17779] bridge0: port 3(macvtap1) entered disabled state [ 1089.388657][T17779] bridge0: left allmulticast mode [ 1089.397054][T17779] bridge0: left promiscuous mode [ 1089.526255][T17790] netlink: 332 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1089.538967][T17790] netlink: 'syz.2.9139': attribute type 9 has an invalid length. [ 1089.549200][T17790] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1089.558821][T17790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1089.686170][T17800] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 1090.055127][T17831] team0 (unregistering): Port device C removed [ 1090.074605][T17829] Bluetooth: MGMT ver 1.23 [ 1090.084759][T17831] team0 (unregistering): Port device team_slave_1 removed [ 1090.253609][T17843] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1090.320043][T17843] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 1090.387893][T17853] syzkaller0: entered promiscuous mode [ 1090.393409][T17853] syzkaller0: entered allmulticast mode [ 1090.553261][T17860] xt_CT: No such helper "pptp" [ 1090.699005][T17870] syz_tun: entered allmulticast mode [ 1090.802969][T17871] syz_tun: left allmulticast mode [ 1090.922804][T17888] netlink: 'syz.3.9168': attribute type 11 has an invalid length. [ 1090.944944][T17888] netlink: 'syz.3.9168': attribute type 23 has an invalid length. [ 1091.120170][T17902] netlink: 'syz.0.9172': attribute type 3 has an invalid length. [ 1091.147749][T17902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1091.156407][T17903] xt_CT: No such helper "pptp" [ 1091.230860][T17909] netlink: 'syz.0.9175': attribute type 11 has an invalid length. [ 1091.249627][T17909] netlink: 'syz.0.9175': attribute type 11 has an invalid length. [ 1091.320781][T17919] pimreg: tun_chr_ioctl cmd 2147767520 [ 1091.401837][T17925] netlink: 'syz.0.9178': attribute type 21 has an invalid length. [ 1091.411113][T17925] netlink: 'syz.0.9178': attribute type 4 has an invalid length. [ 1091.421441][T17925] netlink: 'syz.0.9178': attribute type 5 has an invalid length. [ 1091.458206][T17929] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1091.467951][T17929] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1091.488033][T17929] veth0_to_team: entered promiscuous mode [ 1091.493996][T17930] xt_CONNSECMARK: invalid mode: 0 [ 1091.506085][T17929] veth0_to_team: left promiscuous mode [ 1091.558982][T17934] veth0_to_team: entered promiscuous mode [ 1091.589126][T17934] veth0_to_team: left promiscuous mode [ 1091.785455][T17950] xt_hashlimit: size too large, truncated to 1048576 [ 1092.777260][T17998] wlan1 speed is unknown, defaulting to 1000 [ 1092.805706][T18009] wlan1 speed is unknown, defaulting to 1000 [ 1093.231876][T18024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.291510][T18022] xt_CT: No such helper "pptp" [ 1093.831624][T18044] __nla_validate_parse: 21 callbacks suppressed [ 1093.831648][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1094.230858][T18067] validate_nla: 1 callbacks suppressed [ 1094.230877][T18067] netlink: 'syz.0.9214': attribute type 10 has an invalid length. [ 1094.317538][T18067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.325782][T18067] team0: Port device bond0 added [ 1094.335363][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9216'. [ 1094.346089][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9216'. [ 1094.355279][T18071] netlink: 'syz.4.9216': attribute type 18 has an invalid length. [ 1094.605184][T18076] xt_CT: No such helper "pptp" [ 1094.666261][T18081] netlink: 'syz.3.9218': attribute type 1 has an invalid length. [ 1094.687406][T18081] netlink: 'syz.3.9218': attribute type 1 has an invalid length. [ 1094.818159][T18087] syzkaller1: entered promiscuous mode [ 1094.823701][T18087] syzkaller1: entered allmulticast mode [ 1094.852765][T18087] netlink: 'syz.1.9220': attribute type 1 has an invalid length. [ 1094.900044][T18087] syzkaller0: entered promiscuous mode [ 1095.039495][T18088] syzkaller0: entered promiscuous mode [ 1095.045095][T18088] syzkaller0: entered allmulticast mode [ 1095.066656][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.298816][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9224'. [ 1095.395494][T18115] netlink: 'syz.3.9227': attribute type 15 has an invalid length. [ 1095.418613][T18120] netlink: 'syz.3.9227': attribute type 15 has an invalid length. [ 1097.339524][T18128] ip6tnl0: Caught tx_queue_len zero misconfig [ 1097.350027][T18118] wlan1 speed is unknown, defaulting to 1000 [ 1097.359471][T18117] wlan1 speed is unknown, defaulting to 1000 [ 1097.381228][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9230'. [ 1097.406568][T18133] openvswitch: netlink: Flow actions attr not present in new flow. [ 1097.422482][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1097.440025][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9231'. [ 1097.503724][T18139] netlink: 'syz.0.9232': attribute type 21 has an invalid length. [ 1097.515077][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9232'. [ 1097.554398][T18139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9232'. [ 1097.699294][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9230'. [ 1097.739558][T18150] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1098.039214][T18164] netlink: 'syz.4.9240': attribute type 1 has an invalid length. [ 1098.167099][T18166] netlink: 'syz.1.9242': attribute type 5 has an invalid length. [ 1098.854989][T18185] IPVS: Error connecting to the multicast addr [ 1099.112456][T18200] __nla_validate_parse: 2 callbacks suppressed [ 1099.112477][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1099.155371][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1099.355066][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9255'. [ 1099.507294][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9261'. [ 1099.744135][T18231] xt_CT: No such helper "pptp" [ 1099.807288][T18235] netlink: 'syz.2.9264': attribute type 13 has an invalid length. [ 1100.286497][T18270] netlink: 'syz.4.9275': attribute type 13 has an invalid length. [ 1100.296772][T18270] netlink: 'syz.4.9275': attribute type 27 has an invalid length. [ 1100.316084][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1100.372328][T18263] wlan1 speed is unknown, defaulting to 1000 [ 1100.403249][T18274] xt_CT: No such helper "pptp" [ 1100.500144][T18268] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.9273'. [ 1100.799988][T18290] netlink: 428 bytes leftover after parsing attributes in process `syz.1.9281'. [ 1100.873673][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9281'. [ 1100.942544][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1101.043631][T18305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9283'. [ 1103.081971][T18345] bridge_slave_1: left allmulticast mode [ 1103.099379][T18345] bridge_slave_1: left promiscuous mode [ 1103.106711][T18348] xt_l2tp: unknown flags: 51 [ 1103.112137][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.167556][T18345] bridge_slave_0: left allmulticast mode [ 1103.175037][T18345] bridge_slave_0: left promiscuous mode [ 1103.181339][T18345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.199169][T18355] netlink: 'syz.0.9295': attribute type 21 has an invalid length. [ 1103.230983][T18355] netlink: 'syz.0.9295': attribute type 22 has an invalid length. [ 1103.247348][T18355] netlink: 'syz.0.9295': attribute type 23 has an invalid length. [ 1103.286164][T18355] netlink: 'syz.0.9295': attribute type 25 has an invalid length. [ 1103.294050][T18355] netlink: 'syz.0.9295': attribute type 26 has an invalid length. [ 1103.462580][T18365] xt_hashlimit: size too large, truncated to 1048576 [ 1103.785650][T18373] netlink: 'syz.1.9300': attribute type 1 has an invalid length. [ 1103.861567][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1103.874775][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1103.886739][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1103.895718][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1103.905269][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1104.077720][ T4885] syz_tun (unregistering): left allmulticast mode [ 1104.148934][T18391] bond9: option updelay: invalid value (18446744072924056005) [ 1104.160070][T18391] bond9: option updelay: allowed values 0 - 2147483647 [ 1104.170422][T18391] bond9 (unregistering): Released all slaves [ 1104.194387][T18378] wlan1 speed is unknown, defaulting to 1000 [ 1104.265269][T18393] __nla_validate_parse: 5 callbacks suppressed [ 1104.265291][T18393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9305'. [ 1104.548843][T18411] netlink: 'syz.4.9309': attribute type 10 has an invalid length. [ 1104.653135][T18411] bond0: (slave wlan1): Opening slave failed [ 1104.784210][T18420] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9314'. [ 1104.930526][T18427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1104.954314][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9317'. [ 1105.056792][T18437] geneve2: entered promiscuous mode [ 1105.214822][T16742] tipc: Resetting bearer [ 1105.340678][ T980] IPVS: starting estimator thread 0... [ 1105.397256][T18449] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 1105.438740][T16742] tipc: Disabling bearer [ 1105.457192][T18461] IPVS: using max 56 ests per chain, 134400 per kthread [ 1105.731924][T16742] batman_adv: batadv0: Removing interface: macvlan2 [ 1106.016257][T10537] Bluetooth: hci5: command tx timeout [ 1106.043651][T16742] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1106.055469][T16742] bridge4 (unregistering): left promiscuous mode [ 1106.062065][T16742] bridge4 (unregistering): left allmulticast mode [ 1106.102221][T16742] team0: Port device bond0 removed [ 1106.112756][T16742] bond0 (unregistering): Released all slaves [ 1106.122804][T16742] bond1 (unregistering): Released all slaves [ 1106.136426][T16742] bond2 (unregistering): Released all slaves [ 1106.150325][T16742] bond3 (unregistering): Released all slaves [ 1106.173249][T16742] bond4 (unregistering): Released all slaves [ 1106.189311][T16742] bond5 (unregistering): Released all slaves [ 1106.201922][T16742] bond6 (unregistering): Released all slaves [ 1106.223858][T16742] bond7 (unregistering): Released all slaves [ 1106.237100][T18378] chnl_net:caif_netlink_parms(): no params data found [ 1106.280601][T18479] syzkaller1: entered allmulticast mode [ 1106.361271][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9329'. [ 1106.421860][T16742] hmac(sha224): left promiscuous mode [ 1106.470867][T16732] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.530587][T16742] tipc: Left network mode [ 1106.563151][T18378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.610658][T18378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.635459][T18378] bridge_slave_0: entered allmulticast mode [ 1106.648878][T18378] bridge_slave_0: entered promiscuous mode [ 1106.678068][T18378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.690794][T18378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.698341][T18378] bridge_slave_1: entered allmulticast mode [ 1106.706784][T18378] bridge_slave_1: entered promiscuous mode [ 1106.715721][T18513] netlink: zone id is out of range [ 1106.721983][T18513] netlink: zone id is out of range [ 1106.727489][T18513] netlink: zone id is out of range [ 1106.738559][T18513] netlink: zone id is out of range [ 1106.743907][T18511] xt_CT: No such helper "pptp" [ 1106.748629][T18513] netlink: zone id is out of range [ 1106.753786][T18513] netlink: zone id is out of range [ 1106.764941][T18513] netlink: zone id is out of range [ 1106.805222][T18513] netlink: zone id is out of range [ 1106.812438][T18513] netlink: zone id is out of range [ 1106.831845][T18378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.859414][T18378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.901490][T18508] wlan1 speed is unknown, defaulting to 1000 [ 1107.011843][T18378] team0: Port device team_slave_0 added [ 1107.118455][T18378] team0: Port device team_slave_1 added [ 1107.213190][T18378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.221518][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.304714][T18378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.372083][T18517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1107.386858][T18378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.399724][T18378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.436368][T18378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.453379][T18505] delete_channel: no stack [ 1107.700607][T18378] hsr_slave_0: entered promiscuous mode [ 1107.732738][T18378] hsr_slave_1: entered promiscuous mode [ 1107.750840][T18378] debugfs: 'hsr0' already exists in 'hsr' [ 1107.766123][T18378] Cannot create hsr debugfs directory [ 1108.098318][T10537] Bluetooth: hci5: command tx timeout [ 1108.113433][T16742] pimreg (unregistering): left allmulticast mode [ 1109.007898][T18565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9345'. [ 1109.614568][T18595] Bluetooth: MGMT ver 1.23 [ 1109.734144][T16742] IPVS: stop unused estimator thread 0... [ 1109.912257][T18609] pim6reg99999999: entered allmulticast mode [ 1110.048619][T18615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9355'. [ 1110.176186][T10537] Bluetooth: hci5: command tx timeout [ 1110.363495][T18638] ip6tnl0: Caught tx_queue_len zero misconfig [ 1110.379015][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9359'. [ 1110.615202][T18651] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1110.637134][T18378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1110.675581][T18378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1110.699783][T18378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1110.723293][T18657] netlink: 'syz.3.9367': attribute type 1 has an invalid length. [ 1110.757709][T18378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1110.806859][T18657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.850364][T18657] vlan3: entered promiscuous mode [ 1110.855643][T18657] bond1: entered promiscuous mode [ 1110.861117][T18657] vlan3: entered allmulticast mode [ 1110.867416][T18657] bond1: entered allmulticast mode [ 1111.013267][T18657] bond1: (slave bridge1): making interface the new active one [ 1111.022124][T18657] bridge1: entered promiscuous mode [ 1111.045416][T18657] bridge1: entered allmulticast mode [ 1111.053825][T18657] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1111.179686][T18687] netlink: 'syz.4.9371': attribute type 2 has an invalid length. [ 1111.220410][T18687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9371'. [ 1111.305326][T18697] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9373'. [ 1111.333650][T18699] netlink: 'syz.2.9374': attribute type 1 has an invalid length. [ 1111.336566][T18701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9373'. [ 1111.368809][T18702] netlink: 'syz.2.9374': attribute type 1 has an invalid length. [ 1111.380354][T18378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.427513][T18699] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1111.428676][T18702] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1111.491674][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.514090][T18717] netlink: 'syz.1.9377': attribute type 1 has an invalid length. [ 1111.550635][T18717] netlink: 'syz.1.9377': attribute type 2 has an invalid length. [ 1111.560462][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.567663][T16742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.597036][T18717] netlink: 'syz.1.9377': attribute type 1 has an invalid length. [ 1111.604803][T18717] netlink: 'syz.1.9377': attribute type 3 has an invalid length. [ 1111.690201][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.697388][T16737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.698553][T18723] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1111.717022][T18723] netlink: 'syz.3.9378': attribute type 1 has an invalid length. [ 1111.758094][T18730] netlink: 'syz.3.9378': attribute type 1 has an invalid length. [ 1111.815884][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1111.846802][T18733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1111.867283][T18723] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1111.878035][T18733] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1111.915879][T18736] bond0: option arp_validate: invalid value (55553) [ 1111.917071][T16736] bond0: (slave bond_slave_0): interface is now down [ 1111.937421][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.944862][T18733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.963352][T16736] bond0: (slave bond_slave_1): interface is now down [ 1111.981970][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.004568][T18733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.017509][T16736] bond0: (slave bond_slave_0): interface is now down [ 1112.025754][T16736] bond0: (slave bond_slave_1): interface is now down [ 1112.033444][T18740] can: request_module (can-proto-0) failed. [ 1112.056940][T16735] bond0: (slave bond_slave_0): interface is now down [ 1112.069759][T16735] bond0: (slave bond_slave_1): interface is now down [ 1112.106085][T16732] bond0: (slave bond_slave_0): interface is now down [ 1112.125559][T16732] bond0: (slave bond_slave_1): interface is now down [ 1112.173932][T16732] bond0: now running without any active interface! [ 1112.250872][T18746] xt_CT: No such helper "pptp" [ 1112.257098][T10537] Bluetooth: hci5: command tx timeout [ 1112.457120][T18378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.544651][T18773] xt_hashlimit: size too large, truncated to 1048576 [ 1112.617900][T18772] geneve2: entered promiscuous mode [ 1112.643728][T18772] geneve2: entered allmulticast mode [ 1112.732866][T18378] veth0_vlan: entered promiscuous mode [ 1112.783750][T18787] block nbd0: reconnected socket [ 1112.789855][T10537] block nbd0: Receive control failed (result -107) [ 1112.827217][T10537] block nbd0: Receive control failed (result -32) [ 1112.833862][T18787] block nbd0: reconnected socket [ 1112.840190][T18378] veth1_vlan: entered promiscuous mode [ 1113.080115][ T5928] IPVS: starting estimator thread 0... [ 1113.178800][T18811] IPVS: using max 30 ests per chain, 72000 per kthread [ 1113.224786][T18810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.361285][T18378] veth0_macvtap: entered promiscuous mode [ 1113.374901][T18824] wlan1 speed is unknown, defaulting to 1000 [ 1113.385202][T18378] veth1_macvtap: entered promiscuous mode [ 1113.425041][T18822] xt_CT: No such helper "pptp" [ 1113.460758][T18378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.488471][T18378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.552174][T16738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.563330][T16738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.591194][T16738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.614173][T16738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.658212][T18838] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1114.278610][T16736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.297264][T16736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.512874][T16736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.527169][T16736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.767697][T18880] Cannot find del_set index 4 as target [ 1114.849465][T18884] TCP: TCP_TX_DELAY enabled [ 1114.999655][T18891] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1115.179168][T18903] __nla_validate_parse: 15 callbacks suppressed [ 1115.179187][T18903] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1115.222003][T18903] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1115.234765][T18904] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1115.242019][T18907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9418'. [ 1115.245519][T18904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9417'. [ 1115.332742][T18912] pimreg: entered allmulticast mode [ 1115.346838][T18911] pimreg: left allmulticast mode [ 1115.461983][T18917] netlink: 276 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1115.650752][T18931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1115.662972][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9425'. [ 1115.764323][T18933] wlan1 speed is unknown, defaulting to 1000 [ 1115.870715][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1115.877785][ T1300] net_ratelimit: 48 callbacks suppressed [ 1115.877803][ T1300] aoe: packet could not be sent on bridge0. consider increasing tx_queue_len [ 1116.018827][T18945] validate_nla: 4 callbacks suppressed [ 1116.018846][T18945] netlink: 'syz.2.9429': attribute type 4 has an invalid length. [ 1116.034923][T18945] netlink: 'syz.2.9429': attribute type 4 has an invalid length. [ 1116.082805][T18949] netlink: 'syz.2.9429': attribute type 4 has an invalid length. [ 1116.360782][T18964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1116.831475][T18982] netlink: zone id is out of range [ 1116.846587][T18982] netlink: zone id is out of range [ 1116.852326][T18982] netlink: zone id is out of range [ 1116.914376][T18982] netlink: zone id is out of range [ 1116.934019][T18982] netlink: zone id is out of range [ 1116.966079][T18982] netlink: zone id is out of range [ 1117.003395][T18982] netlink: zone id is out of range [ 1117.029248][T18982] netlink: zone id is out of range [ 1117.042518][T18982] netlink: zone id is out of range [ 1117.234601][T18993] netlink: 'syz.0.9442': attribute type 32 has an invalid length. [ 1117.252500][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9443'. [ 1117.435434][T19001] sch_tbf: peakrate 6 is lower than or equals to rate 3765700255276667882 ! [ 1117.688521][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1117.703896][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1117.716198][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1117.736274][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1117.743959][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1117.887820][T19018] wlan1 speed is unknown, defaulting to 1000 [ 1118.122365][T19035] syzkaller1: entered promiscuous mode [ 1118.142490][T19035] syzkaller1: entered allmulticast mode [ 1118.157372][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1118.714172][T19018] chnl_net:caif_netlink_parms(): no params data found [ 1118.910448][T19069] xt_CT: No such helper "pptp" [ 1118.971949][T19018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.984547][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.996508][T19018] bridge_slave_0: entered allmulticast mode [ 1119.007474][T19018] bridge_slave_0: entered promiscuous mode [ 1119.016892][T19018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.024474][T19018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.032210][T19018] bridge_slave_1: entered allmulticast mode [ 1119.041081][T19018] bridge_slave_1: entered promiscuous mode [ 1119.099647][T19018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.112767][T19018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.172849][T19018] team0: Port device team_slave_0 added [ 1119.188622][T19018] team0: Port device team_slave_1 added [ 1119.229562][T19018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.247731][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.309843][T19018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.352413][T19018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.359727][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.386734][T19018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.405380][T19089] tipc: Started in network mode [ 1119.410845][T19089] tipc: Node identity 2e92dc68ee68, cluster identity 4711 [ 1119.418397][T19089] tipc: Enabled bearer , priority 0 [ 1119.431772][T19091] : entered promiscuous mode [ 1119.437648][T19089] syzkaller0: entered promiscuous mode [ 1119.443999][T19089] syzkaller0: entered allmulticast mode [ 1119.514862][T19018] hsr_slave_0: entered promiscuous mode [ 1119.521442][T19018] hsr_slave_1: entered promiscuous mode [ 1119.527949][T19018] debugfs: 'hsr0' already exists in 'hsr' [ 1119.533696][T19018] Cannot create hsr debugfs directory [ 1119.540484][T19089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.551541][T19089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.560517][T19089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.568471][T19089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.660484][T19097] netlink: 'syz.1.9470': attribute type 11 has an invalid length. [ 1119.671779][T19097] netlink: 'syz.1.9470': attribute type 23 has an invalid length. [ 1119.682353][T19088] tipc: Resetting bearer [ 1119.705800][T19088] tipc: Disabling bearer [ 1119.711298][T19094] netlink: 'syz.1.9470': attribute type 11 has an invalid length. [ 1119.723051][T19094] netlink: 'syz.1.9470': attribute type 23 has an invalid length. [ 1119.777846][T10537] Bluetooth: hci1: command tx timeout [ 1119.841585][T19100] tipc: Failed to remove unknown binding: 66,1,1/0:3617597964/3617597966 [ 1119.861265][T19100] tipc: Failed to remove unknown binding: 66,1,1/0:3617597964/3617597966 [ 1119.887440][T19100] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1120.139282][T19110] netlink: 'syz.3.9475': attribute type 2 has an invalid length. [ 1120.202728][T19110] !: entered promiscuous mode [ 1120.302053][T19124] netlink: 'syz.1.9480': attribute type 1 has an invalid length. [ 1120.371492][T19127] __nla_validate_parse: 5 callbacks suppressed [ 1120.371512][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1120.376964][T19134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1120.381819][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9481'. [ 1120.435494][T19124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1120.525609][T19124] bond2: (slave ip6gretap1): making interface the new active one [ 1120.549181][T19124] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1120.575129][T19142] sctp: [Deprecated]: syz.0.9484 (pid 19142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1120.575129][T19142] Use struct sctp_sack_info instead [ 1120.669802][T19018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1120.712605][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9485'. [ 1120.722588][T19018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1120.747136][T19018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1120.771248][T19018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1120.820722][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1120.886371][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1120.894457][ C1] lec:lec_tx_timeout: lec0 [ 1120.918613][T19163] netlink: 277 bytes leftover after parsing attributes in process `syz.0.9488'. [ 1120.973244][T19018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.998841][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1121.030020][T19018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.042344][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.049538][T16730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.078238][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.085480][T16738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.333697][T19180] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9493'. [ 1121.451423][T19188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9494'. [ 1121.503624][T19186] wlan1 speed is unknown, defaulting to 1000 [ 1121.533633][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9495'. [ 1121.554973][T19018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.831943][T19211] lo: Caught tx_queue_len zero misconfig [ 1121.862050][T10537] Bluetooth: hci1: command tx timeout [ 1121.923973][T19209] macvlan2: entered promiscuous mode [ 1122.315242][T19018] veth0_vlan: entered promiscuous mode [ 1122.402687][T19018] veth1_vlan: entered promiscuous mode [ 1122.496874][T19241] xt_hashlimit: max too large, truncated to 1048576 [ 1122.649741][T19018] veth0_macvtap: entered promiscuous mode [ 1122.661845][T19018] veth1_macvtap: entered promiscuous mode [ 1122.722428][T19018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.781950][T19018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.878116][T16736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.889352][T19266] sit0: Caught tx_queue_len zero misconfig [ 1123.082924][T16736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.098269][T16736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.144416][T16736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.275497][T19284] pim6reg: entered allmulticast mode [ 1123.331079][T16737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.360225][T16737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.380330][T19283] pim6reg: left allmulticast mode [ 1123.489934][T16738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.509881][T16738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.610231][T16738] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.638701][T16738] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.697719][T19299] netlink: 'syz.0.9522': attribute type 6 has an invalid length. [ 1123.705576][T19295] tipc: Started in network mode [ 1123.710879][T19295] tipc: Node identity 7ac69363e8ed, cluster identity 4711 [ 1123.719852][T19295] tipc: Enabled bearer , priority 0 [ 1123.728676][T16738] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.737685][T16738] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1123.789445][T19293] syzkaller0: entered promiscuous mode [ 1123.794975][T19293] syzkaller0: entered allmulticast mode [ 1123.803584][T19309] net_ratelimit: 8 callbacks suppressed [ 1123.803612][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.874742][T19293] tipc: Resetting bearer [ 1123.936751][T10537] Bluetooth: hci1: command tx timeout [ 1123.987961][T19293] tipc: Disabling bearer [ 1124.333253][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1124.452400][T19342] dummy0: Caught tx_queue_len zero misconfig [ 1124.600098][T19359] [ 1124.602465][T19359] ====================================================== [ 1124.609483][T19359] WARNING: possible circular locking dependency detected [ 1124.616509][T19359] syzkaller #0 Not tainted [ 1124.620916][T19359] ------------------------------------------------------ [ 1124.627914][T19359] syz.2.9537/19359 is trying to acquire lock: [ 1124.633960][T19359] ffffffff8fd48618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1124.643218][T19359] [ 1124.643218][T19359] but task is already holding lock: [ 1124.650571][T19359] ffff888031a71270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1124.659800][T19359] [ 1124.659800][T19359] which lock already depends on the new lock. [ 1124.659800][T19359] [ 1124.670222][T19359] [ 1124.670222][T19359] the existing dependency chain (in reverse order) is: [ 1124.679228][T19359] [ 1124.679228][T19359] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1124.687216][T19359] _raw_spin_lock_bh+0x36/0x50 [ 1124.692570][T19359] nr_rt_device_down+0x153/0x860 [ 1124.698061][T19359] nr_device_event+0x137/0x150 [ 1124.703337][T19359] notifier_call_chain+0x1be/0x400 [ 1124.708989][T19359] __dev_notify_flags+0x16d/0x310 [ 1124.714593][T19359] netif_change_flags+0xe8/0x1a0 [ 1124.720046][T19359] dev_change_flags+0x130/0x260 [ 1124.725422][T19359] dev_ioctl+0x7b4/0x1150 [ 1124.730316][T19359] sock_do_ioctl+0x23e/0x320 [ 1124.735417][T19359] sock_ioctl+0x5c6/0x7f0 [ 1124.740257][T19359] __se_sys_ioctl+0xfc/0x170 [ 1124.745392][T19359] do_syscall_64+0x14d/0xf80 [ 1124.750497][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.756913][T19359] [ 1124.756913][T19359] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1124.764725][T19359] _raw_spin_lock_bh+0x36/0x50 [ 1124.770007][T19359] nr_rt_device_down+0xbe/0x860 [ 1124.775409][T19359] nr_device_event+0x137/0x150 [ 1124.780703][T19359] notifier_call_chain+0x1be/0x400 [ 1124.786432][T19359] __dev_notify_flags+0x16d/0x310 [ 1124.791980][T19359] netif_change_flags+0xe8/0x1a0 [ 1124.797444][T19359] dev_change_flags+0x130/0x260 [ 1124.802830][T19359] dev_ioctl+0x7b4/0x1150 [ 1124.807674][T19359] sock_do_ioctl+0x23e/0x320 [ 1124.812774][T19359] sock_ioctl+0x5c6/0x7f0 [ 1124.817645][T19359] __se_sys_ioctl+0xfc/0x170 [ 1124.822751][T19359] do_syscall_64+0x14d/0xf80 [ 1124.827868][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.834314][T19359] [ 1124.834314][T19359] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1124.842240][T19359] __lock_acquire+0x15a5/0x2cf0 [ 1124.847609][T19359] lock_acquire+0xf0/0x2e0 [ 1124.852540][T19359] _raw_spin_lock_bh+0x36/0x50 [ 1124.857816][T19359] nr_rt_ioctl+0x40c/0xf90 [ 1124.862747][T19359] sock_do_ioctl+0x101/0x320 [ 1124.867851][T19359] sock_ioctl+0x5c6/0x7f0 [ 1124.872714][T19359] __se_sys_ioctl+0xfc/0x170 [ 1124.877867][T19359] do_syscall_64+0x14d/0xf80 [ 1124.883090][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.889495][T19359] [ 1124.889495][T19359] other info that might help us debug this: [ 1124.889495][T19359] [ 1124.899717][T19359] Chain exists of: [ 1124.899717][T19359] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1124.899717][T19359] [ 1124.913545][T19359] Possible unsafe locking scenario: [ 1124.913545][T19359] [ 1124.920990][T19359] CPU0 CPU1 [ 1124.926349][T19359] ---- ---- [ 1124.931798][T19359] lock(&nr_node->node_lock); [ 1124.936565][T19359] lock(nr_node_list_lock); [ 1124.943665][T19359] lock(&nr_node->node_lock); [ 1124.950938][T19359] lock(nr_neigh_list_lock); [ 1124.955605][T19359] [ 1124.955605][T19359] *** DEADLOCK *** [ 1124.955605][T19359] [ 1124.963729][T19359] 2 locks held by syz.2.9537/19359: [ 1124.968908][T19359] #0: ffffffff8fd48678 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1124.978482][T19359] #1: ffff888031a71270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1124.988177][T19359] [ 1124.988177][T19359] stack backtrace: [ 1124.994053][T19359] CPU: 1 UID: 0 PID: 19359 Comm: syz.2.9537 Not tainted syzkaller #0 PREEMPT(full) [ 1124.994072][T19359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1124.994082][T19359] Call Trace: [ 1124.994089][T19359] [ 1124.994097][T19359] dump_stack_lvl+0xe8/0x150 [ 1124.994121][T19359] print_circular_bug+0x2e1/0x300 [ 1124.994147][T19359] check_noncircular+0x12e/0x150 [ 1124.994172][T19359] __lock_acquire+0x15a5/0x2cf0 [ 1124.994192][T19359] ? kasan_save_track+0x4f/0x80 [ 1124.994214][T19359] lock_acquire+0xf0/0x2e0 [ 1124.994232][T19359] ? nr_rt_ioctl+0x40c/0xf90 [ 1124.994253][T19359] ? nr_rt_ioctl+0x821/0xf90 [ 1124.994275][T19359] ? nr_rt_ioctl+0x40c/0xf90 [ 1124.994295][T19359] _raw_spin_lock_bh+0x36/0x50 [ 1124.994313][T19359] ? nr_rt_ioctl+0x40c/0xf90 [ 1124.994334][T19359] nr_rt_ioctl+0x40c/0xf90 [ 1124.994358][T19359] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1124.994384][T19359] ? apparmor_capable+0x126/0x170 [ 1124.994410][T19359] ? capable+0x88/0xe0 [ 1124.994466][T19359] ? nr_ioctl+0x1b1/0x3b0 [ 1124.994485][T19359] sock_do_ioctl+0x101/0x320 [ 1124.994503][T19359] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1124.994518][T19359] ? do_futex+0x395/0x420 [ 1124.994548][T19359] sock_ioctl+0x5c6/0x7f0 [ 1124.994563][T19359] ? __pfx_sock_ioctl+0x10/0x10 [ 1124.994579][T19359] ? rcu_is_watching+0x15/0xb0 [ 1124.994601][T19359] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1124.994620][T19359] ? __pfx_sock_ioctl+0x10/0x10 [ 1124.994634][T19359] __se_sys_ioctl+0xfc/0x170 [ 1124.994652][T19359] do_syscall_64+0x14d/0xf80 [ 1124.994673][T19359] ? trace_irq_disable+0x3b/0x150 [ 1124.994696][T19359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.994711][T19359] ? clear_bhb_loop+0x40/0x90 [ 1124.994728][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.994743][T19359] RIP: 0033:0x7fef7cf9c799 [ 1124.994759][T19359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.994773][T19359] RSP: 002b:00007fef7def9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.994790][T19359] RAX: ffffffffffffffda RBX: 00007fef7d216090 RCX: 00007fef7cf9c799 [ 1124.994801][T19359] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000a [ 1124.994811][T19359] RBP: 00007fef7d032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1124.994821][T19359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.994831][T19359] R13: 00007fef7d216128 R14: 00007fef7d216090 R15: 00007fff66f28e48 [ 1124.994849][T19359] [ 1125.302195][T19367] wlan1 speed is unknown, defaulting to 1000 [ 1125.582672][ T6518] lec:lec_start_xmit: lec0:No lecd attached [ 1126.026241][T10537] Bluetooth: hci1: command tx timeout [ 1130.815968][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 1130.823985][ C1] lec:lec_tx_timeout: lec0 [ 1132.507141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)