last executing test programs: 3.167698639s ago: executing program 2 (id=5093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x88, 0x2b, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) (async) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 2.136707213s ago: executing program 2 (id=5114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\n\x00'/20, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r13, &(0x7f0000000240), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33ff, 0x0, 0x0, 0x0, 0xfffff857}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x71}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xc5, &(0x7f0000000280)=""/197, 0x41100, 0x14, '\x00', r3, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r10, 0x1, r12, r13], 0x0, 0x10, 0x6}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000000780)={&(0x7f0000000900)=""/224, 0xe0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4, r14}, 0x20) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000a00)={r14, 0x8, 0x2, 0x4, 0xd3, 0x1000, 0x8, 0x5a7, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8001, 0x6d8, 0x9, 0xbd4, 0x864}}, &(0x7f00000007c0)=0xb0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r16, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r15], 0x38}}, 0x10) 2.020997898s ago: executing program 0 (id=5117): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r3 = socket(0x23, 0x2, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f00000000c0)=""/41, &(0x7f0000000140)=0x29) 2.016100914s ago: executing program 4 (id=5118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async) select(0xe, &(0x7f0000000000)={0x7}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) write$tun(r1, &(0x7f0000000280)={@void, @val={0x0, 0x80, 0x4, 0x3, 0x800, 0x3}, @ipv6=@generic={0x0, 0x6, "514984", 0x226, 0x0, 0x1, @local, @private1, {[@fragment={0x3a, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x64}, @fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x8, 0x65}, @hopopts={0x32, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x0, [0x40, 0x7fffffff]}}, @jumbo={0xc2, 0x4, 0x4}]}, @routing={0x2b, 0x6, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}]}, @dstopts={0x84, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x57, "46a94e3805d32cb198ab62dc00e4e1511efbef1e824899ffc6e037be2d9bedbf27ab0405436fdd1f7affb9a49592d7a857fb540f66a5548275944f778554c3e3ec8b35933104f9a39afd7571efcb1c49c37e375c4a125c"}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0xe, [0x8, 0xffffffffffffffff]}}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @dstopts={0x3b, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x48}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x4, [0x5e, 0x4, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x62, 0xc, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x31}, @rand_addr=' \x01\x00', @private2, @loopback, @remote]}], "8fd8964579886fe9dfb833a689ac3753c6ddb6a8af502e63fa6c05797ab07487401ead71dad52a940fcd0d1c95fa65260d6c8c27f6c6b30645bc3de206256a185eb3fa25dbbdef2634f3191c31d9356e076396ecb6e0"}}}, 0x258) socket(0x400000000010, 0x2, 0x0) (async) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000010000305000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f00000001c0)=[{0x2, 0x4, 0x66, 0x1fea}, {0x1bba, 0x2, 0xf7, 0x200000}, {0x3830, 0x4, 0xf2, 0xb}, {0x80, 0x10, 0x7, 0x80}, {0xd8c, 0x7, 0x12, 0x4}, {0x8, 0x0, 0x7f, 0x5}, {0x4, 0xfa, 0x8, 0x1}, {0x3, 0x1, 0x7, 0xfffffff8}, {0x2, 0xa6, 0x7f, 0xa9d}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f00000001c0)=[{0x2, 0x4, 0x66, 0x1fea}, {0x1bba, 0x2, 0xf7, 0x200000}, {0x3830, 0x4, 0xf2, 0xb}, {0x80, 0x10, 0x7, 0x80}, {0xd8c, 0x7, 0x12, 0x4}, {0x8, 0x0, 0x7f, 0x5}, {0x4, 0xfa, 0x8, 0x1}, {0x3, 0x1, 0x7, 0xfffffff8}, {0x2, 0xa6, 0x7f, 0xa9d}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x0, 0xe}, {0x8, 0xfffd}}}, 0x24}}, 0x0) 1.991789304s ago: executing program 1 (id=5119): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0x200}, &(0x7f0000000400)=0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000200)={0x7, 'nr0\x00', {0x9}, 0x7fc}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd23, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@getqdisc={0x4c, 0x26, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffff}, {0x4, 0xb}, {0x4, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40440d4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r16}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="a80300001f00000225bd7000fddbdf25ffffffff000000000000000000000000000004d202006c0000000000000000000000ffffac1414aa02000000033500000c001c00", @ANYRES32=r11, @ANYBLOB="0100000008001e00000000000800160005000000ac000700ac1e0001000000000000000000000000ffffffff0000000000000000000000004e24003c00fe00ff000060a087000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="819c000000000000faffffffffffffff03000000000000000500000000000000000400000000000000000000000000008fd500000000000007000000000000000d0000000000000002000000000000000000000000000000f7ffffffffffffff01000000b16b6e0002010002000000000c0015005907350006000000e400060000000000000000000000ffffe00000017f0000010000000000000000000000004e2100004e200006050000202f000000", @ANYRES32=r13, @ANYRES32=r16, @ANYBLOB="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"/600], 0x3a8}, 0x1, 0x0, 0x0, 0x4008011}, 0x44040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x82f00000) 1.873060084s ago: executing program 2 (id=5120): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f0000003600)) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) sendmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800800180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.767783709s ago: executing program 0 (id=5122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='-7f'], 0x9) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (rerun: 64) 1.617916704s ago: executing program 4 (id=5124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000c00000000000000000002000002ef00", @ANYRES32=0x0, @ANYBLOB="2e200200000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) 1.615841446s ago: executing program 1 (id=5125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x323, 0xeb, 0x8, 0xe, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x54, &(0x7f0000000100), 0x4) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x2, 0x4}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xa, 0x0, 0x5, 0x0, 0x4], 0x5, 0x1}, {0xffffffffffffffff, [0x2, 0x4, 0x2, 0x4, 0x1, 0x4], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x3, 0x194c, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async, rerun: 64) bind(r3, &(0x7f00000005c0)=@sco={0x1f, @none}, 0x80) (rerun: 64) 1.583958466s ago: executing program 3 (id=5126): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x800) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @empty}}, [0x7fffffff, 0x4958, 0x1, 0x0, 0x1, 0x8c, 0x3, 0x7ff, 0x6, 0x2, 0x4, 0x6, 0xfffffffffffff3a0, 0xfffffffffffffff8, 0x8]}, &(0x7f0000000180)=0x100) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0xbd25}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r3, 0x0) openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb1746b8509c31d4ca9bae7ca283170100080000000000e59e"], 0x0, 0x1a, 0x0, 0x1}, 0x28) 1.537031828s ago: executing program 2 (id=5127): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) 1.373720494s ago: executing program 0 (id=5128): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000ea1b9e94aa506030600000000000000010000060900020073797a00"], 0x20}, 0x1, 0x0, 0x0, 0x24848}, 0xc001) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) 1.357337108s ago: executing program 4 (id=5129): syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000400)=""/208, 0xd0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) (async) pipe(&(0x7f0000000240)) (async) recvmsg$can_j1939(r1, &(0x7f00000005c0)={&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000400)=""/208, 0xd0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) 1.180954067s ago: executing program 3 (id=5130): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000f00)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000940)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd4b, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x1a7, "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"}]}}}}}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) 1.105619776s ago: executing program 4 (id=5131): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.000913996s ago: executing program 1 (id=5132): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x4c041) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r4, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000009d7412e5848c24506715d00000000000000000000a340000080a010100000000000000000100000008000940000000000900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x5c}}, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@delqdisc={0x1d0, 0x25, 0x4, 0x470bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {0x2, 0xa}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x77, 0x50, 0x81, 0x6, 0x2, 0x9, 0x9, 0x2}}, {0x8, 0x2, [0x2, 0x401]}}, {{0x1c, 0x1, {0x6, 0x6, 0x0, 0x3, 0x2, 0x707, 0x200, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x7, 0x2, 0x7ff, 0x9, 0x0, 0xd2, 0x2, 0x1}}, {0x6, 0x2, [0x766]}}, {{0x1c, 0x1, {0x8, 0x3, 0x9, 0x7ff, 0x1, 0x5, 0xfa6, 0x8}}, {0x14, 0x2, [0x8, 0xb, 0x4, 0x7, 0x3, 0x6, 0x83, 0x2]}}, {{0x1c, 0x1, {0x1, 0x9, 0x4734, 0x44, 0x1, 0x10, 0x569d, 0x4}}, {0xc, 0x2, [0xfff7, 0x662, 0x24, 0xfffa]}}, {{0x1c, 0x1, {0x10, 0x81, 0xa, 0x1, 0x1, 0x8, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x4, 0x29]}}, {{0x1c, 0x1, {0x4, 0x0, 0xc2e4, 0x5, 0x1, 0x0, 0x328f, 0x2}}, {0x8, 0x2, [0xa2e8, 0x7]}}, {{0x1c, 0x1, {0x4, 0x45, 0x2, 0xfffffffc, 0x1, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x0, 0xfff, 0x0, 0x6}}, {0x10, 0x2, [0x1ff, 0xf4e6, 0x1ba, 0xc, 0x7fff, 0x1]}}, {{0x1c, 0x1, {0xfe, 0x2, 0x8, 0x6, 0x1, 0x5, 0x4, 0x7}}, {0x12, 0x2, [0x914, 0x400, 0x7, 0x7f, 0x3ff, 0x9, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="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", @ANYBLOB="01032cbd7000fedbdf25d1a2c2a13bfaeb7877673100"/34], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040090) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 837.005971ms ago: executing program 0 (id=5133): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x80800) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r3], 0x12) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x7fffffff, @private2, 0x10001}}, 0x9}, &(0x7f0000000080)=0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}}}) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) 784.372255ms ago: executing program 4 (id=5134): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000}]}, 0x48}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) accept4(r0, 0x0, &(0x7f00000000c0), 0x800) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x818661b2c22a1488}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x40, 0x18, 0x2, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x20, 0x2, 0xfc, 0x4, 0xc8, 0x5}, [@RTA_DST={0x8, 0x1, @multicast2}, @RTA_FLOW={0x8, 0xb, 0x94aa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @RTA_TABLE={0x8, 0xf, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000081) 659.905457ms ago: executing program 0 (id=5135): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'bond_slave_0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x589, 0x76, "52046a10a2c41771d9e58f8f6d4ce1b40dbb40bf353fc9f5d461e3af4d0a58bb300c933526c8b4f280f4b68dd78d749fb8c564f546a7d03137a4b8bd3ba20df5131145e5935a2128503b95febf66294c7f0688913d519ba294338366c86b3c7d82f66222a265f8092698820d8be33410f50f09d75b59"}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x2, 0x4, 0xfffffffffffffff7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x81}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r4, 0x8}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x6c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001, 0x100000}}]}, 0x40}}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000300)={r4, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0xc}, 0x90) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) 609.058579ms ago: executing program 1 (id=5136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x480200, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) 608.391355ms ago: executing program 3 (id=5137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x4, 0x5, {{0x1c, 0x4, 0x0, 0x16, 0x70, 0x64, 0x0, 0xe2, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_prespec={0x44, 0x54, 0xc5, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x6}, {@private=0xa010102, 0xfffffffa}, {@loopback}, {@local, 0x8d}, {@private=0xa010103, 0x2}, {@multicast2, 0x1}, {@empty, 0x4}, {@loopback, 0x7fff}, {@private=0xa010101}, {@empty, 0x7fff}]}, @lsrr={0x83, 0x7, 0x69, [@rand_addr=0x64010104]}]}}}}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x80000001, 0x0}, 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000600)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001700)={r10, @in={{0x2, 0x4e24, @multicast1}}, 0x10, 0xffa8, 0x0, 0xfa4f, 0x21, 0xfff}, &(0x7f00000017c0)=0x9c) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)={[{0x2d, 'cpu'}]}, 0x5) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xb62e, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x6, 0x4, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x63fbcaf7bcbd3f15}}], &(0x7f0000000200)='GPL\x00', 0xfff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x45, '\x00', r3, @cgroup_skb, r5, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r8, r14], &(0x7f0000000500)=[{0x4, 0x2, 0x2, 0x5}, {0x4, 0x5, 0x9, 0x4}], 0x10, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000018c0)={&(0x7f0000001800), 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@newtclass={0x30, 0x28, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {0x8, 0xfff2}, {0xc, 0xfff1}}, [@tclass_kind_options=@c_mqprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) 428.559136ms ago: executing program 4 (id=5138): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000003f80)={0x0, 0x7ff}, &(0x7f0000004240)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000004280)=r2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008a40)={'ip6_vti0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000009100)=[{{&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000240)=""/243, 0xf3}], 0x2, &(0x7f0000000340)=""/8, 0x8}, 0x1}, {{&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/54, 0x36}, {&(0x7f0000001440)=""/198, 0xc6}, {&(0x7f0000001540)=""/127, 0x7f}, {&(0x7f00000015c0)=""/201, 0xc9}, {&(0x7f00000016c0)=""/232, 0xe8}], 0x6, &(0x7f0000001840)=""/198, 0xc6}, 0xe0}, {{&(0x7f0000001940)=@caif=@rfm, 0x80, &(0x7f0000001c00)=[{&(0x7f00000019c0)=""/111, 0x6f}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/70, 0x46}], 0x4, &(0x7f0000008a00)=""/58, 0x3a}, 0x7}, {{&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/164, 0xa4}, {&(0x7f0000001dc0)=""/180, 0xb4}], 0x2, &(0x7f0000001ec0)=""/2, 0x2}, 0x1}, {{&(0x7f0000001f00)=@tipc=@id, 0x80, &(0x7f00000093c0)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/63, 0x3f}], 0x3}, 0x4}, {{&(0x7f0000003fc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004040)=""/28, 0x1c}, {&(0x7f0000004080)=""/209, 0xd1}, {&(0x7f0000004180)=""/65, 0x41}, {&(0x7f0000004200)=""/25, 0x19}, {&(0x7f0000009400)=""/92, 0x5c}, {&(0x7f00000042c0)=""/70, 0x46}, {&(0x7f0000004340)=""/13, 0xd}, {&(0x7f0000004380)=""/161, 0xa1}], 0x8, &(0x7f00000044c0)=""/193, 0xc1}, 0x10000}, {{&(0x7f00000045c0)=@phonet, 0x80, &(0x7f0000004700)=[{&(0x7f0000004640)=""/94, 0x5e}, {&(0x7f00000046c0)=""/17, 0x11}], 0x2, &(0x7f0000004740)=""/4096, 0x1000}, 0xfffffff5}, {{&(0x7f0000005740)=@caif, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)=""/99, 0x63}], 0x1, &(0x7f0000005880)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006880)=@nfc, 0x80, &(0x7f0000008940)=[{&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/1, 0x1}], 0x3}, 0xa}, {{&(0x7f0000008980)=@rc={0x1f, @none}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000008a00)}, {&(0x7f0000009480)=""/146, 0x92}, {&(0x7f0000008b00)=""/43, 0x2b}, {&(0x7f0000008b40)=""/178, 0xb2}, {&(0x7f0000008c00)=""/12, 0xc}, {&(0x7f0000008c40)=""/31, 0x1f}, {&(0x7f0000008c80)=""/132, 0x84}, {&(0x7f0000008d40)=""/96, 0x60}, {&(0x7f0000008dc0)=""/233, 0xe9}, {&(0x7f0000008ec0)=""/162, 0xa2}], 0xa, &(0x7f0000009040)=""/137, 0x89}}], 0xa, 0x10000, &(0x7f0000009380)={0x77359400}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)="b8b2821400000081000000", 0xb}, {&(0x7f0000000500)="eb8588fb", 0x4}], 0x2}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 427.701982ms ago: executing program 1 (id=5139): unshare(0x20000400) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000100000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001608000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) r9 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r8, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f00000000c0)=0xb, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 422.822837ms ago: executing program 3 (id=5140): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x400c095, 0x0, 0x0) 181.067485ms ago: executing program 3 (id=5141): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x170, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x15c, 0x1, [@m_pedit={0x158, 0x16, 0x0, 0x0, {{0xa}, {0xa4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xbd9fa04fd362e41f}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd30, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xe5f19a3ce10f354f}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xad4f094453a29cd4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE]}]}]}, {0x8b, 0x6, "4f9263f8771fa3a94a24793edee1ce61e60263c8c4778858bf4a2da1fbc5fc84e2e391c926129a0905c4e9d306107e4b429c6be54a6b34cf415dbdb592d0cc5361f4acc936cc77f5cbe842a651c9a61e24dab06cdd3bd93cbaaa1a27b56b56b79847150685f094747b25c7e35c0967b31d225e923f5320551f84f168a79a14389ab5b9760738b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x24044085}, 0x0) 179.225069ms ago: executing program 2 (id=5142): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x400000c5) socket$kcm(0x29, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 82.458471ms ago: executing program 3 (id=5143): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x28) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) 65.441316ms ago: executing program 1 (id=5144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) unshare(0x24020400) listen(r0, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r1, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r1, 0x0, 0x0, 0x2022, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073080000000000000012385b4a797a300000000034000000080a01010000000000000000010000000800094000000000090002003000000000140000001100010000000000000000000000000a00"/168], 0xa8}}, 0x0) 979.335µs ago: executing program 0 (id=5145): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(r1, &(0x7f0000000400), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x80000001, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) 0s ago: executing program 2 (id=5146): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4}, 0x20) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 52kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.643757][T16466] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.680974][T16586] Node 0 [ 372.694187][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.710841][T16586] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.714610][T16466] bridge_slave_1: entered allmulticast mode [ 372.721755][T16586] lowmem_reserve[]: [ 372.729403][T16466] bridge_slave_1: entered promiscuous mode [ 373.050541][T16586] 0 2505 2505 2505 2505 [ 373.056916][T16586] Node 0 DMA32 free:1152416kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20460kB inactive_anon:0kB active_file:11536kB inactive_file:159720kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:56436kB local_pcp:18224kB free_cma:0kB [ 373.063954][T16598] bond0: entered promiscuous mode [ 373.098703][T16586] lowmem_reserve[]: 0 0 0 0 0 [ 373.103705][T16586] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.114770][T16598] bond5: entered promiscuous mode [ 373.141314][T16586] lowmem_reserve[]: 0 0 0 0 0 [ 373.146688][T16586] Node 1 Normal free:3900864kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12544kB local_pcp:5120kB free_cma:0kB [ 373.181424][T16586] lowmem_reserve[]: 0 0 0 0 [ 373.183939][T16598] bond0: left promiscuous mode [ 373.185215][T16586] 0 [ 373.188906][T16598] bond5: left promiscuous mode [ 373.203475][T16586] [ 373.206992][T16586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.221750][T16586] Node 0 DMA32: 589*4kB (UME) 381*8kB (UME) 32*16kB (UM) 796*32kB (UM) 339*64kB (UME) 219*128kB (UME) 121*256kB (UME) 47*512kB (UM) 12*1024kB (UME) 5*2048kB (UME) 243*4096kB (UM) = 1154012kB [ 373.243183][T16586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.256685][T16586] Node 1 Normal: 178*4kB (UME) 51*8kB (UME) 32*16kB (UME) 143*32kB (UME) 54*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (ME) 2*1024kB (ME) 1*2048kB (U) 948*4096kB (M) = 3900864kB [ 373.276111][T16586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.286441][T16586] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.296282][T16586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.306765][T16586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.317843][T16586] 44226 total pagecache pages [ 373.322708][T16586] 0 pages in swap cache [ 373.328884][T16586] Free swap = 124996kB [ 373.333277][T16586] Total swap = 124996kB [ 373.335787][T16466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.338084][T16586] 2097051 pages RAM [ 373.351381][T16586] 0 pages HighMem/MovableOnly [ 373.367452][T16586] 424122 pages reserved [ 373.380687][T16586] 0 pages cma reserved [ 373.391513][T16466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.551659][T16466] team0: Port device team_slave_0 added [ 373.568948][T16615] erspan0: entered allmulticast mode [ 373.605560][T16466] team0: Port device team_slave_1 added [ 373.680603][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'. [ 373.742852][T16621] tap0: tun_chr_ioctl cmd 2148553947 [ 373.866746][T16466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.894586][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.009995][T16466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.069432][T16466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.094957][T16466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.133582][T16466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.325471][T16643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.349813][T16646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.391004][T16466] hsr_slave_0: entered promiscuous mode [ 374.402267][T16466] hsr_slave_1: entered promiscuous mode [ 374.409783][T16466] debugfs: 'hsr0' already exists in 'hsr' [ 374.418427][T16466] Cannot create hsr debugfs directory [ 374.448794][T16645] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2997'. [ 374.477003][ T5834] Bluetooth: hci2: command tx timeout [ 374.849734][T16669] netlink: 'syz.0.3004': attribute type 5 has an invalid length. [ 375.001965][T16679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3007'. [ 375.328366][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3012'. [ 375.362499][T16699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3012'. [ 375.379753][T16466] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.412405][T16466] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.442201][T16466] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.472888][T16466] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.708968][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 375.729326][T16466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.784066][T16466] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.855598][ T7451] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.863245][ T7451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.893373][T16730] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3021'. [ 375.920898][ T7451] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.929192][ T7451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.020629][T16733] bridge_slave_0: entered promiscuous mode [ 376.551758][T16466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.554787][ T5834] Bluetooth: hci2: command tx timeout [ 376.578896][T16725] wlan0 speed is unknown, defaulting to 1000 [ 376.641282][T16466] veth0_vlan: entered promiscuous mode [ 376.673560][T16466] veth1_vlan: entered promiscuous mode [ 376.935127][T16466] veth0_macvtap: entered promiscuous mode [ 377.123465][T16466] veth1_macvtap: entered promiscuous mode [ 377.147627][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 377.269707][T16466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.348236][T16466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.461464][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.483911][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.542115][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.665845][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.931734][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3037'. [ 377.955175][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.967739][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.009783][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.013938][T16785] dummy0: Caught tx_queue_len zero misconfig [ 378.019719][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.635086][ T5834] Bluetooth: hci2: command tx timeout [ 378.839388][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3044'. [ 378.882159][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.893151][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.122139][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.135010][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.155455][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.224993][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.304692][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.009124][T16815] wlan0 speed is unknown, defaulting to 1000 [ 380.246668][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3058'. [ 380.306489][T16861] netlink: 'syz.4.3056': attribute type 21 has an invalid length. [ 380.344811][T16861] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3056'. [ 380.398317][T16866] netlink: 'syz.4.3056': attribute type 24 has an invalid length. [ 380.556557][T16815] chnl_net:caif_netlink_parms(): no params data found [ 380.622696][T16869] syzkaller0: entered allmulticast mode [ 380.766976][T16874] netlink: 'syz.4.3060': attribute type 39 has an invalid length. [ 381.154086][T16877] ip6gre2: entered promiscuous mode [ 381.166589][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.174283][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.183294][T16815] bridge_slave_0: entered allmulticast mode [ 381.189768][T16877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3061'. [ 381.205904][T16815] bridge_slave_0: entered promiscuous mode [ 381.224672][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.232060][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.249951][T16815] bridge_slave_1: entered allmulticast mode [ 381.267945][T16815] bridge_slave_1: entered promiscuous mode [ 381.289230][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'. [ 381.340687][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.369089][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.465246][T16815] team0: Port device team_slave_0 added [ 381.475387][T16882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.485956][T16815] team0: Port device team_slave_1 added [ 381.514656][ T5834] Bluetooth: hci5: command tx timeout [ 381.583281][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.603639][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.632532][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.648438][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.657015][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.685283][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.798108][T16815] hsr_slave_0: entered promiscuous mode [ 381.808312][T16815] hsr_slave_1: entered promiscuous mode [ 381.818759][T16815] debugfs: 'hsr0' already exists in 'hsr' [ 381.825898][T16815] Cannot create hsr debugfs directory [ 381.831563][T16888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3065'. [ 381.845991][T16888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3065'. [ 381.865739][T16888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3065'. [ 382.002335][T16862] Cannot find del_set index 0 as target [ 382.074726][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 180 seconds [ 382.219389][T16815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.240190][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3069'. [ 382.385690][T16815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.572172][T16815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.604724][ T5198] udevd[5198]: worker [8140] /devices/virtual/block/nbd0 timeout; kill it [ 382.614940][ T5198] udevd[5198]: seq 13595 '/devices/virtual/block/nbd0' killed [ 382.652383][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3071'. [ 382.683571][T16750] Set syz1 is full, maxelem 65536 reached [ 382.693888][T16815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.760765][T16913] macvtap1: entered promiscuous mode [ 382.787854][T16913] macvtap1: entered allmulticast mode [ 383.153219][T16815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.194093][T16927] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 383.202848][T16815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.237851][T16815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.260584][T16932] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3076'. [ 383.272655][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 383.282003][T16815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.594600][ T5834] Bluetooth: hci5: command tx timeout [ 383.612723][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 383.628055][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.714310][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.748107][T16964] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 383.756948][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.764970][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.798357][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.805870][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.379664][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.403122][ T9687] IPVS: starting estimator thread 0... [ 384.504594][T16992] IPVS: using max 25 ests per chain, 60000 per kthread [ 384.546535][T16815] veth0_vlan: entered promiscuous mode [ 384.579140][T16815] veth1_vlan: entered promiscuous mode [ 385.135074][T17017] atomic_op ffff8880263ea198 conn xmit_atomic 0000000000000000 [ 385.676088][ T5834] Bluetooth: hci5: command tx timeout [ 386.511655][T17005] ip6tnl5: entered promiscuous mode [ 386.627716][T16815] veth0_macvtap: entered promiscuous mode [ 386.649004][T16815] veth1_macvtap: entered promiscuous mode [ 386.734920][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.792570][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.828986][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.867756][T17036] bridge9: entered promiscuous mode [ 386.873434][T17036] bridge9: entered allmulticast mode [ 386.887056][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.906266][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.936113][T17038] __nla_validate_parse: 6 callbacks suppressed [ 386.936135][T17038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'. [ 386.979791][T17038] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3104'. [ 387.035744][T17041] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 387.088395][T17044] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.157586][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.194046][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 387.416648][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.431781][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.621194][ T7441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.637792][ T7441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.754594][ T5834] Bluetooth: hci5: command tx timeout [ 388.069652][T17088] netlink: 'syz.3.3117': attribute type 3 has an invalid length. [ 388.100147][T17088] tipc: Failed to obtain node identity [ 388.114929][T17088] tipc: Enabling of bearer rejected, failed to enable media [ 388.727631][T17106] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3123'. [ 388.761501][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.796214][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.807941][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.817258][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.831898][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.292992][T17109] wlan0 speed is unknown, defaulting to 1000 [ 389.493351][T17109] chnl_net:caif_netlink_parms(): no params data found [ 389.582204][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.589671][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.598290][T17109] bridge_slave_0: entered allmulticast mode [ 389.606308][T17109] bridge_slave_0: entered promiscuous mode [ 389.617103][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.625383][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.633151][T17109] bridge_slave_1: entered allmulticast mode [ 389.641224][T17109] bridge_slave_1: entered promiscuous mode [ 389.679825][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.694568][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.731587][T17109] team0: Port device team_slave_0 added [ 389.740501][T17109] team0: Port device team_slave_1 added [ 389.782437][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.789834][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.816919][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.830747][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.856458][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.929321][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.053974][T17109] hsr_slave_0: entered promiscuous mode [ 390.065211][T17109] hsr_slave_1: entered promiscuous mode [ 390.083436][T17109] debugfs: 'hsr0' already exists in 'hsr' [ 390.106472][T17109] Cannot create hsr debugfs directory [ 390.112754][T17157] netlink: 'syz.2.3136': attribute type 12 has an invalid length. [ 390.123198][T17157] netlink: 'syz.2.3136': attribute type 29 has an invalid length. [ 390.131259][T17157] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3136'. [ 390.165473][T17157] netlink: 'syz.2.3136': attribute type 2 has an invalid length. [ 390.187285][T17157] netlink: 'syz.2.3136': attribute type 3 has an invalid length. [ 390.196032][T17157] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3136'. [ 390.262462][T17160] dvmrp0: entered allmulticast mode [ 390.349652][T17169] syzkaller0: entered promiscuous mode [ 390.363537][T17169] syzkaller0: entered allmulticast mode [ 390.440324][T17177] veth1_to_bond: entered allmulticast mode [ 390.447731][T17177] bridge0: port 3(veth0_to_bridge) entered blocking state [ 390.457329][T17177] bridge0: port 3(veth0_to_bridge) entered disabled state [ 390.466919][T17177] veth0_to_bridge: entered allmulticast mode [ 390.476903][T17177] veth0_to_bridge: entered promiscuous mode [ 390.509419][T17175] netlink: 'syz.3.3143': attribute type 1 has an invalid length. [ 390.522910][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 390.588791][T17177] bond0: (slave bond_slave_1): Releasing backup interface [ 390.648907][T17177] veth1_to_bond (unregistering): left allmulticast mode [ 390.876414][ T5836] Bluetooth: hci1: command tx timeout [ 390.914105][T17109] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.927334][T17109] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.017257][T17203] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3152'. [ 391.040981][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 391.060804][T17109] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.084786][T17205] netlink: 'syz.2.3152': attribute type 83 has an invalid length. [ 391.093042][T17109] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.210107][T17109] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.226866][T17109] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.276814][T17218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3156'. [ 391.576083][T17109] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.608409][T17109] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.985919][T17253] netlink: 'syz.1.3164': attribute type 3 has an invalid length. [ 391.992148][T17109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.993937][T17253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3164'. [ 392.070558][T17109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.108323][T17109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.137476][T17109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.378823][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.439304][T17270] gtp0: entered promiscuous mode [ 392.469624][T17270] gtp0: entered allmulticast mode [ 392.491737][T17109] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.511398][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.518756][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.530875][T17270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.562875][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.570336][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.601114][T17276] netlink: 'syz.4.3170': attribute type 3 has an invalid length. [ 392.954620][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.970354][ T5836] Bluetooth: hci1: command tx timeout [ 393.535151][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.556421][T17315] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3178'. [ 393.732994][T17109] veth0_vlan: entered promiscuous mode [ 393.779965][T17109] veth1_vlan: entered promiscuous mode [ 393.825877][T17333] xt_bpf: check failed: parse error [ 393.935862][T17109] veth0_macvtap: entered promiscuous mode [ 393.960051][T17109] veth1_macvtap: entered promiscuous mode [ 394.043720][T17109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.068174][T17109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.158555][T14951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.176400][T14951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.198079][T17351] tipc: Enabled bearer , priority 0 [ 394.218658][T14951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.255367][ T7429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.276313][T17341] tipc: Resetting bearer [ 394.285216][T17341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3185'. [ 394.362271][T17340] tipc: Disabling bearer [ 394.505751][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.524486][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.598357][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.613296][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.831153][T17373] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3114'. [ 394.839852][T17376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3197'. [ 394.870912][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3197'. [ 395.036944][ T5836] Bluetooth: hci1: command tx timeout [ 395.451230][T17393] tipc: Started in network mode [ 395.476172][T17393] tipc: Node identity fadf67a51f28, cluster identity 4711 [ 395.483649][T17393] tipc: Enabled bearer , priority 0 [ 395.533213][T17392] syzkaller0: entered promiscuous mode [ 395.539488][T17392] syzkaller0: entered allmulticast mode [ 395.565918][T17398] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 395.609606][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 395.620388][T17393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 395.664101][T17392] tipc: Resetting bearer [ 395.709959][T17390] tipc: Resetting bearer [ 395.772444][T17403] Bluetooth: MGMT ver 1.23 [ 395.783231][T17390] tipc: Disabling bearer [ 395.791053][T17403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3207'. [ 396.077589][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.116090][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.125080][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.139686][T17418] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.3211'. [ 396.139739][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.166699][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.294089][T14962] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.308009][T14962] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.371459][T14962] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.390483][T14962] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.422382][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'. [ 396.721418][T17414] wlan0 speed is unknown, defaulting to 1000 [ 396.728636][T17445] netlink: 'syz.1.3219': attribute type 4 has an invalid length. [ 396.919753][T17450] syzkaller1: entered promiscuous mode [ 396.925923][T17450] syzkaller1: entered allmulticast mode [ 396.992392][T17414] chnl_net:caif_netlink_parms(): no params data found [ 397.115306][ T5834] Bluetooth: hci1: command tx timeout [ 397.178397][T17414] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.189444][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.198613][T17414] bridge_slave_0: entered allmulticast mode [ 397.207326][T17414] bridge_slave_0: entered promiscuous mode [ 397.230758][T17414] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.238950][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.250520][T17414] bridge_slave_1: entered allmulticast mode [ 397.259997][T17414] bridge_slave_1: entered promiscuous mode [ 397.390071][T17414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.419401][T17414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.568784][T17469] bond1: entered allmulticast mode [ 397.574968][T17469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.583879][T17469] bridge0: port 3(bond1) entered blocking state [ 397.591111][T17477] __nla_validate_parse: 1 callbacks suppressed [ 397.591131][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 397.604812][T17469] bridge0: port 3(bond1) entered disabled state [ 397.700550][T17469] bond1: entered promiscuous mode [ 397.722765][T17469] bridge0: port 3(bond1) entered blocking state [ 397.729651][T17469] bridge0: port 3(bond1) entered forwarding state [ 397.781868][T17414] team0: Port device team_slave_0 added [ 397.807017][T17414] team0: Port device team_slave_1 added [ 397.913235][T17414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.921868][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.950656][T17414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.101999][T14955] bridge0: port 3(bond1) entered disabled state [ 398.161750][T17414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.185007][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.223615][T17414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.236367][ T5834] Bluetooth: hci3: command tx timeout [ 398.259332][T17488] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 398.293350][T17492] syzkaller0: entered promiscuous mode [ 398.324808][T17492] syzkaller0: entered allmulticast mode [ 398.429531][T17516] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 398.441337][T17516] Cannot find set identified by id 65534 to match [ 398.456442][T17414] hsr_slave_0: entered promiscuous mode [ 398.464111][T17414] hsr_slave_1: entered promiscuous mode [ 398.471368][T17414] debugfs: 'hsr0' already exists in 'hsr' [ 398.480360][T17414] Cannot create hsr debugfs directory [ 398.839573][T17529] xt_l2tp: missing protocol rule (udp|l2tpip) [ 398.850603][T17531] : entered promiscuous mode [ 398.967203][T17542] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 399.097792][T17414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.167904][T17546] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 399.192121][T17550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3250'. [ 399.203204][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'. [ 399.252359][T17414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.308059][T17552] syzkaller0: entered promiscuous mode [ 399.313784][T17552] syzkaller0: entered allmulticast mode [ 399.371004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.396442][T17414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.462264][T17552] tipc: Enabled bearer , priority 0 [ 399.494030][T17561] Bluetooth: MGMT ver 1.23 [ 399.494504][T17414] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.523428][T17551] tipc: Resetting bearer [ 399.566789][T17551] tipc: Disabling bearer [ 399.806165][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 399.857182][T17578] netlink: 'syz.1.3261': attribute type 4 has an invalid length. [ 399.882382][T17572] pimreg: entered allmulticast mode [ 399.971614][T17414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.989731][T17572] pimreg: left allmulticast mode [ 400.072891][T17414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.104113][T17414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.157053][T17414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.317272][ T5834] Bluetooth: hci3: command tx timeout [ 400.412189][T17608] netlink: 'syz.0.3268': attribute type 21 has an invalid length. [ 400.432392][T17414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.462666][T17608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3268'. [ 400.514093][T17414] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.551578][T14954] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.559071][T14954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.619617][T14954] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.627139][T14954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.688756][T17617] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 400.879796][T17625] netlink: 'syz.2.3275': attribute type 8 has an invalid length. [ 400.996279][T17632] openvswitch: netlink: Unknown key attributes 2 [ 401.258212][T17414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.259199][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 401.318274][T17643] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 401.369220][T17643] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3281'. [ 401.431689][T17648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3282'. [ 401.597254][T17661] netlink: 'syz.0.3285': attribute type 10 has an invalid length. [ 401.614857][T17661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3285'. [ 401.652775][T17666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3287'. [ 401.662038][T17661] team0: Port device geneve0 added [ 402.090022][T17414] veth0_vlan: entered promiscuous mode [ 402.111100][T17690] netlink: 'syz.1.3293': attribute type 12 has an invalid length. [ 402.133375][T17690] netlink: 'syz.1.3293': attribute type 12 has an invalid length. [ 402.144216][T17414] veth1_vlan: entered promiscuous mode [ 402.232036][T17414] veth0_macvtap: entered promiscuous mode [ 402.266553][T17414] veth1_macvtap: entered promiscuous mode [ 402.311775][T17414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.358900][T17414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.383179][ T7434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.395250][ T5834] Bluetooth: hci3: command tx timeout [ 402.425586][ T7434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.467206][ T7434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.555495][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.559776][ T7434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.798138][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.826790][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.916314][T14954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.935998][T14954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.078738][T17736] __nla_validate_parse: 4 callbacks suppressed [ 403.078757][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 403.290132][T17744] netlink: 'syz.2.3307': attribute type 29 has an invalid length. [ 403.313633][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 403.402685][T17744] netlink: 'syz.2.3307': attribute type 12 has an invalid length. [ 403.932561][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 403.986218][T17767] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 404.129848][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3314'. [ 404.328676][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.349127][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.358471][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.377403][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.393098][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.476432][ T5836] Bluetooth: hci3: command tx timeout [ 404.503025][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 405.294903][T17782] wlan0 speed is unknown, defaulting to 1000 [ 405.400187][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 405.422508][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'. [ 405.926038][T17782] chnl_net:caif_netlink_parms(): no params data found [ 406.158764][T17842] netlink: 'syz.2.3336': attribute type 12 has an invalid length. [ 406.169423][T17842] netlink: 'syz.2.3336': attribute type 29 has an invalid length. [ 406.177996][T17842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3336'. [ 406.190482][T17842] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3336'. [ 406.443930][T17782] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.463378][T17782] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.475960][ T5836] Bluetooth: hci0: command tx timeout [ 406.484603][T17782] bridge_slave_0: entered allmulticast mode [ 406.513308][T17782] bridge_slave_0: entered promiscuous mode [ 406.537673][T17782] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.563938][T17782] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.586568][T17782] bridge_slave_1: entered allmulticast mode [ 406.605776][T17782] bridge_slave_1: entered promiscuous mode [ 406.741817][T17782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.781171][T17782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.851176][T17782] team0: Port device team_slave_0 added [ 406.866099][T17782] team0: Port device team_slave_1 added [ 406.937862][T17782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.948618][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.978220][T17782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.007424][T17782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.025571][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.118957][T17782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.215566][T17782] hsr_slave_0: entered promiscuous mode [ 407.222934][T17782] hsr_slave_1: entered promiscuous mode [ 407.229510][T17782] debugfs: 'hsr0' already exists in 'hsr' [ 407.236116][T17782] Cannot create hsr debugfs directory [ 407.498686][T17908] syzkaller0: entered promiscuous mode [ 407.518106][T17908] syzkaller0: entered allmulticast mode [ 407.598756][T17908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 407.857055][T17782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.945303][T17930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3362'. [ 407.982985][T17782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.171728][T17782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.344976][T17782] bond0: (slave netdevsim0): Releasing backup interface [ 408.366905][T17782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.390729][T17952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3368'. [ 408.452284][T17958] openvswitch: netlink: IP tunnel dst address not specified [ 408.554788][ T5836] Bluetooth: hci0: command tx timeout [ 408.638122][T17782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.661459][T17782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.682970][T17782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.710628][T17782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.898520][T17979] Cannot find add_set index 0 as target [ 408.992551][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'. [ 409.004175][T17782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.046160][T17782] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.065288][T14954] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.072857][T14954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.098742][T14954] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.106550][T14954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.136801][T17987] netlink: 'syz.0.3380': attribute type 13 has an invalid length. [ 409.165573][T17987] gretap0: refused to change device tx_queue_len [ 409.172963][T17987] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 409.547279][T17782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.687453][T17782] veth0_vlan: entered promiscuous mode [ 409.699970][T18010] openvswitch: netlink: IP tunnel dst address not specified [ 409.750118][T17782] veth1_vlan: entered promiscuous mode [ 409.862592][T17782] veth0_macvtap: entered promiscuous mode [ 409.908782][T17782] veth1_macvtap: entered promiscuous mode [ 409.970985][T18024] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3391'. [ 409.972391][T17782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.990254][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'. [ 410.028818][T17782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.073819][T14962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.108662][T14962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.170656][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'. [ 410.171609][T14962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.207340][T14962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.258104][T18035] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 410.270232][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3396'. [ 410.285389][T18035] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 410.293561][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3396'. [ 410.402313][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.434009][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.525000][ T7434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.533773][ T7434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.636045][ T5836] Bluetooth: hci0: command tx timeout [ 410.881766][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.948004][T18060] bond1: option miimon: invalid value (18446744073709551585) [ 410.957401][T18060] bond1: option miimon: allowed values 0 - 2147483647 [ 410.968185][T18060] bond1 (unregistering): Released all slaves [ 411.011490][T18065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.253034][T18076] tipc: Started in network mode [ 411.262790][T18076] tipc: Node identity ac1414aa, cluster identity 4711 [ 411.277975][T18079] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.287894][T18076] tipc: Enabled bearer , priority 10 [ 411.443980][T18083] Cannot find add_set index 0 as target [ 411.587512][T18091] : entered promiscuous mode [ 411.618382][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 411.632385][T18091] netlink: 'syz.3.3416': attribute type 9 has an invalid length. [ 411.911037][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3421'. [ 412.001051][ T5836] block nbd6: Receive control failed (result -1) [ 412.001774][T18122] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3422'. [ 412.138318][T18126] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 412.155938][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 210 seconds [ 412.249866][T18126] team0: No ports can be present during mode change [ 412.487359][T14095] tipc: Node number set to 2886997162 [ 412.715811][ T5836] Bluetooth: hci0: command tx timeout [ 413.421370][T18171] netlink: 'syz.1.3434': attribute type 11 has an invalid length. [ 413.446959][T18171] __nla_validate_parse: 2 callbacks suppressed [ 413.446983][T18171] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3434'. [ 413.635486][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 413.676571][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3437'. [ 413.697708][T18194] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3440'. [ 413.854703][T18199] netlink: 'syz.3.3437': attribute type 2 has an invalid length. [ 414.027859][T18204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3444'. [ 414.040736][T18212] syzkaller0: entered promiscuous mode [ 414.047378][T18212] syzkaller0: entered allmulticast mode [ 414.082476][T18212] tipc: Started in network mode [ 414.088082][T18212] tipc: Node identity ca967d31239e, cluster identity 4711 [ 414.104133][T18212] tipc: Enabled bearer , priority 0 [ 414.119288][T18205] tipc: Resetting bearer [ 414.128119][T18215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3444'. [ 414.177331][T18217] netlink: 'syz.2.3449': attribute type 29 has an invalid length. [ 414.193243][T18205] tipc: Disabling bearer [ 414.245806][T18219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3450'. [ 414.270013][T18221] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 414.427875][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.435885][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.445000][T18227] bridge0: entered allmulticast mode [ 414.518403][T18227] bond1: left promiscuous mode [ 414.530644][T18227] bridge0: port 3(bond1) entered disabled state [ 414.688425][T18243] netlink: 'syz.2.3460': attribute type 10 has an invalid length. [ 414.696982][T18243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3460'. [ 414.748918][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 414.760883][T18248] netlink: zone id is out of range [ 414.771097][T18248] netlink: zone id is out of range [ 414.771535][T18227] bridge_slave_1: left allmulticast mode [ 414.783181][T18248] netlink: zone id is out of range [ 414.783326][T18227] bridge_slave_1: left promiscuous mode [ 414.789118][T18248] netlink: zone id is out of range [ 414.789139][T18248] netlink: zone id is out of range [ 414.789150][T18248] netlink: zone id is out of range [ 414.789159][T18248] netlink: zone id is out of range [ 414.789169][T18248] netlink: zone id is out of range [ 414.789178][T18248] netlink: zone id is out of range [ 414.789189][T18248] netlink: zone id is out of range [ 414.838547][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.854836][T18227] bridge_slave_0: left allmulticast mode [ 414.860935][T18227] bridge_slave_0: left promiscuous mode [ 414.871836][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.977653][T18243] team0: Port device geneve0 added [ 415.196000][T14954] wlan0: Trigger new scan to find an IBSS to join [ 415.412906][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3471'. [ 415.453929][T18277] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 415.637319][T18286] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 415.706482][T18253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.745088][T18253] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 415.873708][T18253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 415.880823][T18253] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 415.902922][T18293] team0: Device gtp0 is of different type [ 416.096052][T18253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.102128][T18253] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 416.270482][T18253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.304561][T18253] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 416.557887][T18322] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.565931][T18322] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.645753][T18334] netlink: 'syz.4.3487': attribute type 10 has an invalid length. [ 416.740198][T18322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.758578][T18322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.895793][T18334] team0: Port device dummy0 added [ 416.924438][ T7449] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.933703][ T7449] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.034068][ T7449] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.116351][ T7449] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.140851][T18253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 417.156886][T18253] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 417.784675][T18371] bridge0: entered promiscuous mode [ 417.790269][T18371] bridge0: entered allmulticast mode [ 417.807380][T18371] team0: Port device bridge0 added [ 417.837032][T18372] bridge2: entered promiscuous mode [ 417.842846][T18372] bridge2: entered allmulticast mode [ 417.859014][T18372] team0: Port device bridge2 added [ 417.873428][T18379] bridge0: port 1(team0) entered blocking state [ 417.896715][T18379] bridge0: port 1(team0) entered disabled state [ 417.910655][T18379] team0: entered allmulticast mode [ 417.948571][T18379] team_slave_0: entered allmulticast mode [ 417.955250][T18379] team_slave_1: entered allmulticast mode [ 417.976494][T18379] team0: left allmulticast mode [ 417.986303][T18379] team_slave_0: left allmulticast mode [ 417.991843][T18379] team_slave_1: left allmulticast mode [ 418.015155][T18371] bridge0: port 1(team0) entered blocking state [ 418.021737][T18371] bridge0: port 1(team0) entered disabled state [ 418.056922][T18371] team0: entered allmulticast mode [ 418.062113][T18371] team_slave_0: entered allmulticast mode [ 418.073596][T18371] team_slave_1: entered allmulticast mode [ 418.097617][T18371] team0: left allmulticast mode [ 418.105542][T18371] team_slave_0: left allmulticast mode [ 418.112809][T18371] team_slave_1: left allmulticast mode [ 418.126374][T18394] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 418.159478][T18399] IPVS: set_ctl: invalid protocol: 137 172.30.1.5:20004 [ 418.554043][T18421] __nla_validate_parse: 6 callbacks suppressed [ 418.554063][T18421] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3514'. [ 418.960712][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 419.021050][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3522'. [ 419.036324][T18455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.053974][T18448] ipt_ECN: cannot use operation on non-tcp rule [ 419.158362][T18466] netlink: 'syz.4.3528': attribute type 1 has an invalid length. [ 419.213602][T18466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.422162][T18478] netlink: 'syz.4.3532': attribute type 23 has an invalid length. [ 419.547956][T18487] Unsupported ieee802154 address type: 0 [ 419.923740][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 419.939727][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.012113][T18503] 8021q: VLANs not supported on lo [ 420.027719][T18503] netlink: 'syz.4.3541': attribute type 29 has an invalid length. [ 420.043136][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.060537][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.093957][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 420.328325][T18522] netlink: 'syz.3.3548': attribute type 1 has an invalid length. [ 420.485139][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 420.714119][T18538] geneve2: entered promiscuous mode [ 420.723912][T18538] geneve2: entered allmulticast mode [ 420.730552][T18547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 420.755208][T18541] veth0: entered promiscuous mode [ 420.760904][T14962] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.794997][T18536] veth0: left promiscuous mode [ 420.803450][T14962] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.820500][T14962] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 420.838939][T14962] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 421.016801][T18559] Unknown options in mask b7f2 [ 421.410343][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 421.477383][T18583] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.514766][T18585] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 421.531171][T18583] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.560144][T18583] gretap1: entered promiscuous mode [ 421.565678][T18583] gretap1: entered allmulticast mode [ 421.720017][T18598] netlink: 'syz.4.3572': attribute type 4 has an invalid length. [ 421.729597][T18601] netlink: 'syz.4.3572': attribute type 4 has an invalid length. [ 422.273190][T18601] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.281143][T18601] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.399736][T18626] xt_hashlimit: size too large, truncated to 1048576 [ 422.496821][T18630] netlink: 'syz.0.3576': attribute type 5 has an invalid length. [ 422.896328][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.916335][T18601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.365182][T18621] syzkaller0: entered promiscuous mode [ 423.373299][T18621] syzkaller0: entered allmulticast mode [ 423.387501][T14962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.405293][T14962] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.591094][T18659] __nla_validate_parse: 5 callbacks suppressed [ 423.591115][T18659] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3583'. [ 425.247465][T14962] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.257049][T14962] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.440634][T18673] netlink: 'syz.3.3585': attribute type 25 has an invalid length. [ 425.458929][T18674] netlink: 'syz.3.3585': attribute type 25 has an invalid length. [ 425.486536][T18676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3587'. [ 425.655183][ T5869] IPVS: starting estimator thread 0... [ 425.670360][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 425.685559][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 425.701755][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'. [ 425.702911][T18662] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.719401][T18662] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.769433][T18687] IPVS: using max 26 ests per chain, 62400 per kthread [ 425.983561][T18662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.006050][T18662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.272158][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 426.288944][ T7434] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.303097][ T7434] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.320269][ T7434] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.348410][ T7434] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.392089][ T7434] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.424372][ T7434] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.455872][ T7434] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.456124][T18699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3592'. [ 426.467380][ T7434] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 426.529384][T18711] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 426.582910][T18715] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3597'. [ 426.660515][T18719] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 426.842806][T18729] netlink: 'syz.1.3605': attribute type 1 has an invalid length. [ 426.889901][T18729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.900877][T18729] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 426.911787][T18734] lo: entered allmulticast mode [ 426.999716][T18742] delete_channel: no stack [ 427.027135][T18731] lo: left allmulticast mode [ 427.076844][T18738] bond1: (slave ip6gretap1): making interface the new active one [ 427.118000][T18738] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 427.148446][T18745] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3608'. [ 427.204770][T18745] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3608'. [ 427.369544][T18753] netlink: 'syz.0.3611': attribute type 39 has an invalid length. [ 427.514726][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.677720][T18768] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 427.690927][T18768] bond1 (unregistering): Released all slaves [ 427.781669][T18781] netlink: 'syz.0.3619': attribute type 4 has an invalid length. [ 427.832870][T18784] netlink: 'syz.3.3620': attribute type 13 has an invalid length. [ 427.857178][T18784] netlink: 'syz.3.3620': attribute type 17 has an invalid length. [ 428.094168][T18784] net_ratelimit: 4 callbacks suppressed [ 428.094181][T18784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.314721][ T9683] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 428.331624][T18815] syzkaller0: entered promiscuous mode [ 428.338629][T18815] syzkaller0: entered allmulticast mode [ 429.257918][T18877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.335898][T18881] netlink: 'syz.3.3652': attribute type 9 has an invalid length. [ 429.344769][T18873] __nla_validate_parse: 7 callbacks suppressed [ 429.344791][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 429.611845][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 429.733872][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 429.875104][T18910] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3658'. [ 429.930661][T18910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3658'. [ 430.044786][T18922] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 430.056463][T18922] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3661'. [ 430.424649][T18946] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.558293][T18951] Bluetooth: MGMT ver 1.23 [ 430.578005][T18951] syzkaller1: entered promiscuous mode [ 430.602828][T18951] syzkaller1: entered allmulticast mode [ 431.009359][T18977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3676'. [ 431.038551][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 431.092361][T18980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.106271][T18985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3677'. [ 431.209338][T18984] syzkaller0: entered promiscuous mode [ 431.215794][T18984] syzkaller0: entered allmulticast mode [ 431.456498][T19008] validate_nla: 1 callbacks suppressed [ 431.456519][T19008] netlink: 'syz.1.3685': attribute type 21 has an invalid length. [ 431.544918][T19008] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3685'. [ 432.076713][T18991] wlan0 speed is unknown, defaulting to 1000 [ 434.014155][T19045] batman_adv: batadv0: Adding interface: vlan2 [ 434.022016][T19045] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.048619][T19045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.071041][T19045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.088781][T19045] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 434.100924][T19031] syzkaller0: entered promiscuous mode [ 434.107820][T19031] syzkaller0: entered allmulticast mode [ 434.197600][T19068] ip6gretap1: entered allmulticast mode [ 434.363429][T19074] __nla_validate_parse: 4 callbacks suppressed [ 434.363448][T19074] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3700'. [ 434.612945][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 434.692920][T19092] erspan0: entered promiscuous mode [ 434.820314][T19104] x_tables: duplicate underflow at hook 1 [ 435.114042][T19116] x_tables: duplicate underflow at hook 2 [ 435.351405][T19127] tipc: Enabling of bearer rejected, failed to enable media [ 435.439489][T19127] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 435.521183][T19127] bond2 (unregistering): Released all slaves [ 435.551582][T19136] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 435.562720][T19136] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 435.710841][T19147] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3722'. [ 435.722217][T19147] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3722'. [ 435.796905][T19150] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20003 [ 435.866050][T19156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3725'. [ 435.879153][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'. [ 435.888944][T19156] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3725'. [ 435.899022][T19156] netlink: 'syz.2.3725': attribute type 2 has an invalid length. [ 435.908690][T19156] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3725'. [ 436.411514][T19171] : entered promiscuous mode [ 436.567140][T19181] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 436.595893][T19181] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 436.630254][T19189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3738'. [ 436.820647][T19197] veth0: entered promiscuous mode [ 436.839098][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 436.857726][T19200] bridge0: left promiscuous mode [ 436.889068][T19201] sctp: [Deprecated]: syz.0.3742 (pid 19201) Use of int in max_burst socket option deprecated. [ 436.889068][T19201] Use struct sctp_assoc_value instead [ 436.935438][T19204] x_tables: unsorted underflow at hook 4 [ 436.991899][T19197] veth0 (unregistering): left promiscuous mode [ 437.247244][T19218] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 437.258977][T19218] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.417314][T19228] sctp: [Deprecated]: syz.2.3753 (pid 19228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.417314][T19228] Use struct sctp_sack_info instead [ 437.969121][T19263] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 438.197117][T19276] vcan0: entered allmulticast mode [ 438.393568][T19291] netlink: 'syz.3.3772': attribute type 2 has an invalid length. [ 439.015224][T19331] xt_hashlimit: max too large, truncated to 1048576 [ 439.082441][T19334] netlink: 'syz.4.3785': attribute type 83 has an invalid length. [ 439.098053][T19335] netlink: 'syz.4.3785': attribute type 11 has an invalid length. [ 440.003516][T19376] __nla_validate_parse: 13 callbacks suppressed [ 440.003538][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3798'. [ 440.130564][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3801'. [ 440.140235][T19379] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3801'. [ 440.292897][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 440.336289][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.562752][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 440.621192][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3810'. [ 440.966725][T19428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.140634][ T7448] tipc: Subscription rejected, illegal request [ 441.245046][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 441.278511][T19447] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 441.496422][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'. [ 441.593016][T19461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3828'. [ 442.142586][T19491] IPVS: set_ctl: invalid protocol: 27 100.1.1.0:20003 [ 442.239638][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 240 seconds [ 442.355058][T19503] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 442.364520][ T9686] IPVS: starting estimator thread 0... [ 442.481661][T19504] IPVS: using max 22 ests per chain, 52800 per kthread [ 442.614167][T19512] netlink: 'syz.1.3844': attribute type 11 has an invalid length. [ 442.642555][T19512] netlink: 'syz.1.3844': attribute type 5 has an invalid length. [ 442.861985][T19487] wlan0 speed is unknown, defaulting to 1000 [ 442.870145][T19523] pimreg3: entered allmulticast mode [ 443.237971][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3850'. [ 443.279798][T19538] geneve3: entered promiscuous mode [ 443.294639][T19538] geneve3: entered allmulticast mode [ 443.380989][T19539] vxcan2: entered allmulticast mode [ 443.466882][ T7434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.525824][ T7434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.571470][ T7434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.692903][T19549] netlink: 'syz.4.3854': attribute type 2 has an invalid length. [ 444.025758][T19567] dvmrp0: entered allmulticast mode [ 444.038268][T19570] netlink: 'syz.1.3859': attribute type 1 has an invalid length. [ 444.066157][T19570] netlink: 'syz.1.3859': attribute type 3 has an invalid length. [ 444.073946][T19570] netlink: 'syz.1.3859': attribute type 7 has an invalid length. [ 444.082215][T19570] netlink: 'syz.1.3859': attribute type 8 has an invalid length. [ 444.091198][T19570] NCSI netlink: No device for ifindex 131092 [ 444.221378][T19581] x_tables: duplicate underflow at hook 2 [ 444.429245][T19600] netlink: 'syz.1.3864': attribute type 10 has an invalid length. [ 444.429578][T19592] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 444.451012][T19592] bond2 (unregistering): Released all slaves [ 444.506386][T19595] ip6gre0: entered promiscuous mode [ 444.519233][T19595] ip6gre0: entered allmulticast mode [ 445.249507][T19637] __nla_validate_parse: 6 callbacks suppressed [ 445.249531][T19637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3881'. [ 445.283709][T19636] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3880'. [ 445.465188][T19642] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3884'. [ 445.504889][T19642] netem: invalid attributes len -24 [ 445.512107][T19642] netem: change failed [ 445.542980][T19642] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3884'. [ 445.801057][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'. [ 445.814217][T19658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3889'. [ 445.836941][T19633] wlan0 speed is unknown, defaulting to 1000 [ 445.955318][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 445.965730][T19663] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3892'. [ 446.007638][T19663] syzkaller0: entered promiscuous mode [ 446.013250][T19663] syzkaller0: entered allmulticast mode [ 446.339511][T19690] netlink: 'syz.0.3899': attribute type 11 has an invalid length. [ 446.352446][T19690] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3899'. [ 446.417600][T19694] netlink: 'syz.4.3900': attribute type 12 has an invalid length. [ 446.462459][T19694] netlink: 'syz.4.3900': attribute type 29 has an invalid length. [ 446.491510][T19694] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3900'. [ 446.532053][T19694] netlink: 'syz.4.3900': attribute type 1 has an invalid length. [ 446.557993][T19631] wlan0 speed is unknown, defaulting to 1000 [ 446.873233][T19720] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000 [ 447.007932][T19723] openvswitch: netlink: Duplicate or invalid key (type 0). [ 447.023716][T19723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.456789][T19740] tipc: Enabled bearer , priority 0 [ 447.477783][T19740] syzkaller0: entered promiscuous mode [ 447.490105][T19740] syzkaller0: entered allmulticast mode [ 447.594706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.603725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.630244][T19740] tipc: Resetting bearer [ 447.640897][T19740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.649592][T19740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.674243][T19738] tipc: Resetting bearer [ 447.743010][T19738] tipc: Disabling bearer [ 447.793867][T19758] netlink: 'syz.1.3919': attribute type 4 has an invalid length. [ 447.898402][T19762] netlink: 'syz.3.3920': attribute type 1 has an invalid length. [ 448.128955][T19772] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.382793][T19790] sctp: [Deprecated]: syz.1.3930 (pid 19790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.382793][T19790] Use struct sctp_sack_info instead [ 448.591595][T19797] netlink: 'syz.0.3933': attribute type 1 has an invalid length. [ 448.660304][T19801] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 449.223163][T19838] team0: Device gtp0 is of different type [ 449.269994][T19837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.369604][T19845] netlink: 'syz.2.3950': attribute type 1 has an invalid length. [ 449.398883][T19848] bridge0: entered allmulticast mode [ 449.728164][T19864] tap0: tun_chr_ioctl cmd 1074025678 [ 449.737705][T19864] tap0: group set to 0 [ 449.877216][T19867] syzkaller0: entered promiscuous mode [ 449.883328][T19867] syzkaller0: entered allmulticast mode [ 449.944904][T19870] netlink: 'syz.0.3960': attribute type 1 has an invalid length. [ 450.260086][T19890] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.316075][T19890] __nla_validate_parse: 13 callbacks suppressed [ 450.316099][T19890] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3963'. [ 450.382139][T19890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3963'. [ 450.429843][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3968'. [ 450.612413][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3969'. [ 450.696585][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3973'. [ 450.806567][T19924] netlink: 'syz.3.3974': attribute type 8 has an invalid length. [ 451.278181][T19954] netlink: 'syz.3.3985': attribute type 4 has an invalid length. [ 451.388354][T19964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3986'. [ 451.453550][T19969] netlink: 'syz.0.3987': attribute type 10 has an invalid length. [ 451.498310][T19969] team0: Port device dummy0 added [ 451.874086][T19986] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 451.903767][T19987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3994'. [ 451.966798][T19957] infiniband !yz!: set active [ 452.000367][T19957] infiniband !yz!: added team_slave_0 [ 452.051982][T19995] sctp: [Deprecated]: syz.3.3996 (pid 19995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.051982][T19995] Use struct sctp_sack_info instead [ 452.112886][T20001] vlan3: entered promiscuous mode [ 452.120806][T20001] gretap0: entered promiscuous mode [ 452.123963][T20003] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3997'. [ 452.143074][T19957] RDS/IB: !yz!: added [ 452.163342][T19957] smc: adding ib device !yz! with port count 1 [ 452.182084][T19957] smc: ib device !yz! port 1 has no pnetid [ 452.234968][T20005] netlink: 'syz.0.3999': attribute type 1 has an invalid length. [ 452.417006][T20016] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4003'. [ 452.456694][T20016] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 452.550562][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4004'. [ 452.840832][T20034] IPv6: sit2: Disabled Multicast RS [ 454.252235][T20092] validate_nla: 2 callbacks suppressed [ 454.252256][T20092] netlink: 'syz.3.4025': attribute type 1 has an invalid length. [ 454.263142][T20087] bond3: option min_links: invalid value (18446744073709551614) [ 454.273982][T20087] bond3: option min_links: allowed values 0 - 2147483647 [ 454.317046][T20087] bond3 (unregistering): Released all slaves [ 454.533725][T20104] netlink: 'syz.0.4027': attribute type 2 has an invalid length. [ 454.570569][T20104] : entered promiscuous mode [ 454.618410][T20092] nbd: nbd64 already in use [ 454.920234][ T8769] udevd[8769]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 455.022496][T20121] syzkaller0: entered promiscuous mode [ 455.039892][T20121] syzkaller0: entered allmulticast mode [ 455.046461][T20126] netlink: 'syz.3.4032': attribute type 18 has an invalid length. [ 455.298961][ T7434] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.372030][ T7434] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.437402][ T7434] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.472926][ T7434] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.612375][T20136] IPVS: sed: FWM 3 0x00000003 - no destination available [ 456.789074][T20174] __nla_validate_parse: 11 callbacks suppressed [ 456.789098][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'. [ 457.355663][T20197] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 457.364163][T20197] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 457.712605][T20208] netlink: 'syz.4.4060': attribute type 12 has an invalid length. [ 457.812288][T20208] bond3: option primary_reselect: invalid value (255) [ 457.837477][T20208] bond3 (unregistering): Released all slaves [ 457.949405][T20214] sctp: [Deprecated]: syz.0.4061 (pid 20214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.949405][T20214] Use struct sctp_sack_info instead [ 457.997281][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4061'. [ 458.062731][T20220] team0: Device ipvlan1 failed to register rx_handler [ 458.197456][T20222] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 458.343573][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 458.385455][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4066'. [ 458.591638][T20239] syzkaller0: entered promiscuous mode [ 458.606818][T20239] syzkaller0: entered allmulticast mode [ 458.613268][T20241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.678513][T20244] syzkaller0: entered promiscuous mode [ 458.695633][T20244] syzkaller0: entered allmulticast mode [ 458.835377][T20246] tipc: Enabled bearer , priority 0 [ 458.843611][T20246] syzkaller0: entered promiscuous mode [ 458.854784][T20246] syzkaller0: entered allmulticast mode [ 458.881500][T20246] tipc: Resetting bearer [ 458.894707][T20245] tipc: Resetting bearer [ 458.917591][T20245] tipc: Disabling bearer [ 459.229794][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4078'. [ 459.260718][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4078'. [ 459.337530][T20268] geneve2: entered promiscuous mode [ 459.343241][T20268] geneve2: entered allmulticast mode [ 459.625632][T20288] x_tables: duplicate entry at hook 1 [ 459.643464][T20289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4083'. [ 459.681195][T20289] netlink: 'syz.3.4083': attribute type 21 has an invalid length. [ 459.681195][T20293] netlink: 'syz.3.4083': attribute type 21 has an invalid length. [ 459.681222][T20289] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4083'. [ 459.712180][T20293] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4083'. [ 459.918644][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4089'. [ 459.932168][T20296] bond2: option min_links: invalid value (18446744073709551614) [ 459.945627][T20296] bond2: option min_links: allowed values 0 - 2147483647 [ 459.955873][T20296] bond2 (unregistering): Released all slaves [ 459.975958][T20258] wlan0 speed is unknown, defaulting to 1000 [ 460.076197][T20302] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 460.245460][T20318] syzkaller0: entered promiscuous mode [ 460.271183][T20318] syzkaller0: entered allmulticast mode [ 460.303495][T20318] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 460.545234][T20327] netlink: 'syz.4.4094': attribute type 2 has an invalid length. [ 460.571759][T20327] 9: entered promiscuous mode [ 460.658932][T20333] tipc: Enabled bearer , priority 0 [ 460.677492][T20333] syzkaller0: entered promiscuous mode [ 460.683297][T20333] syzkaller0: entered allmulticast mode [ 460.760848][T20333] tipc: Resetting bearer [ 461.033773][T20332] tipc: Resetting bearer [ 461.070153][T20332] tipc: Disabling bearer [ 461.504809][T20366] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 461.512615][T20367] sctp: [Deprecated]: syz.4.4108 (pid 20367) Use of int in maxseg socket option. [ 461.512615][T20367] Use struct sctp_assoc_value instead [ 461.757767][T20377] netlink: 'syz.3.4113': attribute type 21 has an invalid length. [ 461.897978][T20387] : entered promiscuous mode [ 462.029696][T20388] syzkaller0: entered promiscuous mode [ 462.053165][T20388] syzkaller0: entered allmulticast mode [ 462.068113][T20398] : renamed from bridge_slave_0 (while UP) [ 462.102038][T20398] __nla_validate_parse: 5 callbacks suppressed [ 462.102062][T20398] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4120'. [ 462.139767][T20401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.251369][T20429] batadv_slave_1: entered promiscuous mode [ 464.320278][T20430] batadv_slave_1: left promiscuous mode [ 464.475740][T20443] lo: entered promiscuous mode [ 464.480693][T20443] lo: entered allmulticast mode [ 464.550450][T20450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4134'. [ 464.584076][T20457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4136'. [ 464.594014][T20457] netlink: 'syz.2.4136': attribute type 7 has an invalid length. [ 464.607580][T20457] netlink: 'syz.2.4136': attribute type 8 has an invalid length. [ 464.624107][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4136'. [ 464.651191][T20464] netlink: 'syz.1.4138': attribute type 11 has an invalid length. [ 464.664735][T20457] netlink: 'syz.2.4136': attribute type 1 has an invalid length. [ 464.851169][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 464.891305][T20475] netlink: 'syz.3.4142': attribute type 22 has an invalid length. [ 464.900493][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'. [ 465.348579][ T9687] IPVS: starting estimator thread 0... [ 465.397544][T20507] x_tables: duplicate underflow at hook 2 [ 465.445826][T20509] IPVS: using max 27 ests per chain, 64800 per kthread [ 465.519051][T20514] x_tables: unsorted entry at hook 1 [ 466.127623][T20541] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4163'. [ 466.208663][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4166'. [ 466.296086][T20555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4168'. [ 466.339297][T20557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4169'. [ 466.751596][T20582] xt_l2tp: invalid flags combination: 8 [ 466.759169][T20583] xt_l2tp: invalid flags combination: 8 [ 466.855382][T20585] team0: Device gtp0 is of different type [ 466.971863][T20594] openvswitch: netlink: Flow key attr not present in new flow. [ 466.984488][T20594] TC_ACT_REPEAT abuse ? [ 467.163093][T20606] __nla_validate_parse: 12 callbacks suppressed [ 467.163114][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 467.263430][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4188'. [ 467.627931][T20630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 467.664123][T20630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 467.712615][T20630] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 467.815250][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 467.831177][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4196'. [ 468.045179][T20648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4199'. [ 468.089216][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 468.140800][T20658] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4203'. [ 468.196811][T20663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4204'. [ 468.360295][T20652] team0 (unregistering): Port device team_slave_0 removed [ 468.400647][T20652] team0 (unregistering): Port device team_slave_1 removed [ 468.417851][T20652] team0 (unregistering): Port device geneve0 removed [ 468.446128][T20652] team0 (unregistering): Port device dummy0 removed [ 468.931032][T20693] rdma_op ffff888053bfd1f0 conn xmit_rdma 0000000000000000 [ 469.367501][T20719] syzkaller0: entered promiscuous mode [ 469.373057][T20719] syzkaller0: entered allmulticast mode [ 469.526165][T20723] netlink: 'syz.2.4223': attribute type 1 has an invalid length. [ 469.651591][T20735] netlink: 'syz.4.4226': attribute type 58 has an invalid length. [ 469.988708][T20753] sctp: [Deprecated]: syz.1.4233 (pid 20753) Use of int in maxseg socket option. [ 469.988708][T20753] Use struct sctp_assoc_value instead [ 470.043224][T20753] IPVS: length: 171 != 24 [ 470.048521][T20754] IPVS: length: 171 != 24 [ 470.421222][T20780] 8021q: VLANs not supported on ip6tnl0 [ 470.437424][T20781] 8021q: VLANs not supported on ip6tnl0 [ 470.654619][T20791] x_tables: duplicate underflow at hook 2 [ 470.682383][T20791] : renamed from bridge_slave_0 (while UP) [ 471.034890][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 471.640484][T20838] netlink: 'syz.4.4263': attribute type 11 has an invalid length. [ 471.727901][T20842] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 471.780812][T20846] openvswitch: netlink: IP tunnel dst address not specified [ 471.812158][T20842] bond2: entered promiscuous mode [ 471.828397][T20842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.852390][T20840] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 471.891307][T20852] geneve2: entered promiscuous mode [ 471.909628][T20852] geneve2: entered allmulticast mode [ 471.958718][T20855] syzkaller1: entered promiscuous mode [ 471.964671][T20855] syzkaller1: entered allmulticast mode [ 471.982277][ T7452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 471.992835][ T7452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 472.010835][ T7452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 472.023913][ T7452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 472.315003][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 270 seconds [ 472.439251][T20877] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 472.873864][T20895] __nla_validate_parse: 18 callbacks suppressed [ 472.873886][T20895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4281'. [ 473.228165][ T812] IPVS: starting estimator thread 0... [ 473.247586][T20911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4287'. [ 473.257395][T20912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4286'. [ 473.326048][T20914] IPVS: using max 24 ests per chain, 57600 per kthread [ 473.350383][T20922] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4288'. [ 473.367255][T20922] netlink: 'syz.3.4288': attribute type 10 has an invalid length. [ 473.367767][T20911] bond0: (slave bond_slave_1): Releasing backup interface [ 473.388317][T20922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4288'. [ 473.433241][T20924] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 473.467849][T20922] team0: Port device geneve0 added [ 473.581318][T14954] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.614775][T14954] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.625045][T20929] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4292'. [ 473.654687][T14954] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.663559][T14954] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.726324][T20931] ipt_rpfilter: unknown options [ 473.788481][T20941] tipc: Enabled bearer , priority 0 [ 473.905237][T20941] syzkaller0: entered promiscuous mode [ 473.911153][T20941] syzkaller0: entered allmulticast mode [ 473.919204][T20950] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4295'. [ 473.956200][T20941] tipc: Resetting bearer [ 474.079817][T20963] netlink: 'syz.3.4302': attribute type 64 has an invalid length. [ 474.097798][T20963] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4302'. [ 474.121254][T14954] tipc: Resetting bearer [ 474.125241][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'. [ 474.137423][T20939] tipc: Resetting bearer [ 476.037136][T20939] tipc: Disabling bearer [ 476.046510][T20949] tipc: Enabled bearer , priority 0 [ 476.053818][T20959] syzkaller0: entered promiscuous mode [ 476.059563][T20959] syzkaller0: entered allmulticast mode [ 476.148662][T20980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4305'. [ 476.162531][T20947] tipc: Resetting bearer [ 476.209083][T20947] tipc: Disabling bearer [ 476.216234][T20984] netlink: 'syz.4.4306': attribute type 13 has an invalid length. [ 476.224530][T20984] netlink: 'syz.4.4306': attribute type 58 has an invalid length. [ 476.241601][ T9686] tipc: Node number set to 3909647665 [ 476.269850][T20980] netlink: 'syz.2.4305': attribute type 11 has an invalid length. [ 476.369975][T20990] ip6gretap2: entered allmulticast mode [ 476.390436][T20993] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 476.737552][T21013] netlink: 'syz.1.4316': attribute type 4 has an invalid length. [ 477.126765][T21041] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 477.481157][T21064] syzkaller0: entered promiscuous mode [ 477.494501][T21064] syzkaller0: entered allmulticast mode [ 478.007816][T21097] __nla_validate_parse: 5 callbacks suppressed [ 478.007846][T21097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4343'. [ 478.191620][T21110] bond3: option all_slaves_active: invalid value (222) [ 478.203663][T21110] bond3 (unregistering): Released all slaves [ 478.233232][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'. [ 478.246136][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 478.256849][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 478.286564][T21122] bridge0: port 3(vlan2) entered blocking state [ 478.293374][T21122] bridge0: port 3(vlan2) entered disabled state [ 478.310339][T21122] vlan2: entered allmulticast mode [ 478.339358][T21122] vlan2: left allmulticast mode [ 478.428880][T21135] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4353'. [ 478.595911][T21144] netlink: 'syz.3.4355': attribute type 1 has an invalid length. [ 478.599934][T21145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4357'. [ 478.680482][T21144] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 478.694589][T21144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4355'. [ 478.706100][T21144] netlink: 'syz.3.4355': attribute type 1 has an invalid length. [ 478.928110][T21160] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 478.985399][T21163] netlink: 'syz.4.4362': attribute type 24 has an invalid length. [ 479.102287][T21172] netlink: 'syz.3.4364': attribute type 4 has an invalid length. [ 479.581761][T21200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4372'. [ 479.610481][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 479.648808][T21205] bond0: entered promiscuous mode [ 479.653929][T21205] bond_slave_0: entered promiscuous mode [ 479.685646][T21205] bond_slave_1: entered promiscuous mode [ 479.700281][T21205] bond0: left promiscuous mode [ 479.714605][T21205] bond_slave_0: left promiscuous mode [ 479.725719][T21205] bond_slave_1: left promiscuous mode [ 480.155190][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 480.222032][T21241] sctp: [Deprecated]: syz.1.4382 (pid 21241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.222032][T21241] Use struct sctp_sack_info instead [ 480.699677][T21261] netlink: 'syz.3.4390': attribute type 8 has an invalid length. [ 480.788987][T21264] vlan2: entered allmulticast mode [ 480.824487][T21264] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 480.963658][ T5836] Bluetooth: hci0: command tx timeout [ 482.537329][T21362] gre1: entered promiscuous mode [ 482.544604][T21362] gre1: entered allmulticast mode [ 482.918450][T21379] netlink: 'syz.0.4422': attribute type 7 has an invalid length. [ 482.927309][T21379] netlink: 'syz.0.4422': attribute type 8 has an invalid length. [ 483.004953][T21386] vlan0: entered promiscuous mode [ 483.612176][T21420] bridge_slave_0: left allmulticast mode [ 483.628747][T21420] bridge_slave_0: left promiscuous mode [ 483.654837][T21420] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.679117][T21420] bridge_slave_1: left allmulticast mode [ 483.698374][T21420] bridge_slave_1: left promiscuous mode [ 483.705361][T21420] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.724183][T21420] bond0: (slave bond_slave_0): Releasing backup interface [ 483.748856][T21420] bond0: (slave bond_slave_1): Releasing backup interface [ 483.763709][T21420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.774107][T21420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.786731][T21420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.878007][T21446] netlink: 'syz.4.4444': attribute type 28 has an invalid length. [ 483.886347][T21446] netlink: 'syz.4.4444': attribute type 3 has an invalid length. [ 483.894731][T21446] __nla_validate_parse: 22 callbacks suppressed [ 483.894755][T21446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4444'. [ 484.003763][T21433] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4439'. [ 484.039345][T21443] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4443'. [ 484.051254][T21443] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4443'. [ 484.168716][T21452] netlink: 'syz.0.4446': attribute type 10 has an invalid length. [ 484.282764][T21459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4448'. [ 484.324864][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4448'. [ 484.353147][T21459] !: renamed from bond_slave_0 (while UP) [ 484.699496][T21478] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4452'. [ 485.373870][T21508] veth5: entered allmulticast mode [ 485.520223][T21522] team0: Device ipvlan1 failed to register rx_handler [ 485.556886][T21525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 485.608634][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4465'. [ 485.761584][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4467'. [ 485.862050][T21540] 8021q: VLANs not supported on ip6tnl0 [ 486.342017][T21561] tipc: Enabling of bearer rejected, failed to enable media [ 486.417135][T21566] netlink: 'syz.0.4475': attribute type 7 has an invalid length. [ 486.441350][T21566] netlink: 'syz.0.4475': attribute type 8 has an invalid length. [ 486.912862][T21572] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002 [ 487.007374][T21587] netlink: 'syz.1.4481': attribute type 5 has an invalid length. [ 487.105202][T21589] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 487.202822][T21589] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 487.215513][T21597] netlink: 'syz.2.4485': attribute type 2 has an invalid length. [ 487.247982][T21597] 9: entered promiscuous mode [ 487.367246][T21610] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 487.459334][T21613] netlink: 'syz.3.4490': attribute type 8 has an invalid length. [ 488.143570][T21650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.151142][T21650] IPv6: NLM_F_CREATE should be set when creating new route [ 488.158635][T21650] IPv6: NLM_F_CREATE should be set when creating new route [ 488.166300][T21650] IPv6: NLM_F_CREATE should be set when creating new route [ 488.176828][T21651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.214650][T21651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.235521][T21652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.404607][T21661] chnl_net:caif_netlink_parms(): no params data found [ 489.215942][T21709] __nla_validate_parse: 22 callbacks suppressed [ 489.215963][T21709] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4517'. [ 489.264252][T21709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4517'. [ 489.289994][ T7434] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.298526][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4520'. [ 489.305912][ T7434] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.314384][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4520'. [ 489.366293][ T7434] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.099206][T21772] Unknown options in mask b7f2 [ 490.276590][T21784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4536'. [ 490.292580][T21789] xt_TCPMSS: Only works on TCP SYN packets [ 490.350963][T21784] bond5: (slave gre0): Device is not bonding slave [ 490.357911][T21784] bond5: option active_slave: invalid value (gre0) [ 490.369374][T21784] bond5 (unregistering): Released all slaves [ 490.422202][T21792] 8021q: VLANs not supported on wg1 [ 490.540343][T21804] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4541'. [ 490.853416][T21824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 490.936788][T21829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4547'. [ 491.195631][T21842] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 492.215018][T21888] validate_nla: 1 callbacks suppressed [ 492.215039][T21888] netlink: 'syz.2.4566': attribute type 4 has an invalid length. [ 492.252690][T21889] netlink: 'syz.2.4566': attribute type 4 has an invalid length. [ 492.319534][T21892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4569'. [ 492.391681][T21895] dvmrp8: entered allmulticast mode [ 492.401196][T21900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4568'. [ 492.981730][T21928] ip6gretap0: entered promiscuous mode [ 492.989309][T21928] syz_tun: entered promiscuous mode [ 493.006169][T21928] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 493.026132][T21928] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 493.248724][T21946] veth7: entered allmulticast mode [ 493.538425][T21957] syzkaller0: entered promiscuous mode [ 493.544225][T21957] syzkaller0: entered allmulticast mode [ 493.673268][T21967] netlink: 'syz.4.4590': attribute type 2 has an invalid length. [ 493.715635][T21966] netlink: 'syz.4.4590': attribute type 2 has an invalid length. [ 493.898250][T21978] netlink: 'syz.0.4595': attribute type 5 has an invalid length. [ 494.025580][T21985] netlink: 'syz.2.4598': attribute type 1 has an invalid length. [ 494.604619][T22003] : renamed from syz_tun [ 494.711285][T22009] netlink: 'syz.1.4605': attribute type 7 has an invalid length. [ 494.792002][T22013] pim6reg527: entered allmulticast mode [ 494.921310][T22021] __nla_validate_parse: 14 callbacks suppressed [ 494.921331][T22021] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4608'. [ 494.973702][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 494.983401][T22022] netlink: 'syz.1.4608': attribute type 21 has an invalid length. [ 494.993446][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 495.017473][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 495.022088][T22027] netlink: 'syz.4.4610': attribute type 13 has an invalid length. [ 495.029703][T22022] netlink: 'syz.1.4608': attribute type 21 has an invalid length. [ 495.044756][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4608'. [ 495.065641][T22026] IPVS: Error connecting to the multicast addr [ 495.286621][T22043] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 495.299450][T22043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4614'. [ 495.382039][T22045] dvmrp0: entered allmulticast mode [ 495.389054][T22045] dvmrp0: left allmulticast mode [ 495.395302][T22047] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4616'. [ 495.742942][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4621'. [ 495.914104][T22074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4627'. [ 495.920062][T22073] : left promiscuous mode [ 496.136709][T22087] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 496.184588][T22087] netdevsim netdevsim4 v: renamed from netdevsim0 [ 496.343201][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4632'. [ 496.395164][T22098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.773602][T22129] pim6reg1: entered promiscuous mode [ 496.785579][T22129] pim6reg1: entered allmulticast mode [ 497.502269][T22182] validate_nla: 4 callbacks suppressed [ 497.502304][T22182] netlink: 'syz.2.4658': attribute type 1 has an invalid length. [ 497.508646][T22184] netlink: 'syz.1.4660': attribute type 4 has an invalid length. [ 497.602584][T22188] sctp: [Deprecated]: syz.4.4662 (pid 22188) Use of int in maxseg socket option. [ 497.602584][T22188] Use struct sctp_assoc_value instead [ 497.646660][T22185] bond2: (slave geneve3): making interface the new active one [ 497.657612][T22185] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 497.682488][T14955] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 497.703185][T14955] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 497.712943][T14955] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 497.744983][T14955] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.132780][T22209] netlink: 'syz.1.4669': attribute type 2 has an invalid length. [ 498.359999][T22218] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 498.397403][T22218] team1: entered promiscuous mode [ 498.403842][T22218] team1: entered allmulticast mode [ 498.481134][T22220] x_tables: duplicate entry at hook 2 [ 498.813029][T22238] xfrm1: entered promiscuous mode [ 498.818930][T22238] xfrm1: entered allmulticast mode [ 499.793824][T22310] netlink: zone id is out of range [ 499.800989][T22310] netlink: zone id is out of range [ 499.814236][T22310] netlink: set zone limit has 8 unknown bytes [ 499.927252][T22317] __nla_validate_parse: 16 callbacks suppressed [ 499.927276][T22317] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4704'. [ 500.099836][T22322] syzkaller0: entered promiscuous mode [ 500.109893][T22322] syzkaller0: entered allmulticast mode [ 500.211411][T22330] netlink: 'syz.1.4709': attribute type 1 has an invalid length. [ 500.282639][T22330] bond3: entered promiscuous mode [ 500.299735][T22330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.369637][T22330] bond3: (slave bridge7): making interface the new active one [ 500.383230][T22330] bridge7: entered promiscuous mode [ 500.390745][T22330] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 500.435979][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'. [ 500.591901][T22347] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 500.599626][T22347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.771998][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 500.831507][T22368] Cannot find del_set index 16 as target [ 500.932996][T22375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4721'. [ 501.252021][T22390] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4724'. [ 501.271702][T22393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 501.355585][T22390] xt_policy: neither incoming nor outgoing policy selected [ 501.445445][T22405] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 501.497348][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4729'. [ 501.527226][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4729'. [ 501.755890][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.767177][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.872375][T22429] sit1: entered promiscuous mode [ 501.876683][T22433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4737'. [ 501.877748][T22429] sit1: entered allmulticast mode [ 501.887690][T22433] openvswitch: netlink: Flow key attr not present in new flow. [ 502.006292][T22435] netlink: 'syz.4.4738': attribute type 4 has an invalid length. [ 502.064170][T22439] syzkaller0: entered promiscuous mode [ 502.084034][T22439] syzkaller0: entered allmulticast mode [ 502.114817][T22442] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 502.257899][T22445] sctp: [Deprecated]: syz.1.4741 (pid 22445) Use of int in maxseg socket option. [ 502.257899][T22445] Use struct sctp_assoc_value instead [ 502.295413][T22446] sctp: [Deprecated]: syz.1.4741 (pid 22446) Use of int in maxseg socket option. [ 502.295413][T22446] Use struct sctp_assoc_value instead [ 502.392717][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'. [ 502.395140][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 300 seconds [ 502.490793][T22452] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 502.507250][T22452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.693308][T22472] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 502.929884][T22479] : renamed from bridge_slave_0 [ 503.165927][T22495] can: request_module (can-proto-0) failed. [ 503.316686][T22505] x_tables: duplicate entry at hook 2 [ 503.348372][T22505] x_tables: duplicate entry at hook 2 [ 503.396263][T22513] netlink: 'syz.4.4760': attribute type 1 has an invalid length. [ 503.504197][T22517] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 503.552145][T22517] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 503.576974][T22517] bond3: (slave xfrm1): making interface the new active one [ 503.586582][T22517] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 503.633418][T22513] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 503.646312][T22513] bond3 (unregistering): Released all slaves [ 503.876389][T22536] netlink: 'syz.3.4766': attribute type 12 has an invalid length. [ 503.922125][T22536] bond5: option primary_reselect: invalid value (255) [ 503.933953][T22536] bond5 (unregistering): Released all slaves [ 504.923179][T22590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.961324][T22590] bond0: (slave rose0): Enslaving as an active interface with an up link [ 505.121294][T22600] __nla_validate_parse: 7 callbacks suppressed [ 505.121315][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4782'. [ 505.189915][T22600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4782'. [ 505.243507][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4782'. [ 505.321163][T22611] syzkaller1: entered promiscuous mode [ 505.328963][T22611] syzkaller1: entered allmulticast mode [ 505.441650][T22614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 505.449304][T22614] syzkaller1: linktype set to 823 [ 505.457371][T22613] sctp: [Deprecated]: syz.1.4785 (pid 22613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.457371][T22613] Use struct sctp_sack_info instead [ 505.833228][T22632] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4790'. [ 505.958309][T22637] syzkaller0: entered promiscuous mode [ 505.964043][T22637] syzkaller0: entered allmulticast mode [ 505.993750][T22644] netlink: 'syz.2.4794': attribute type 4 has an invalid length. [ 506.023574][T22646] ip6t_srh: unknown srh match flags 5F28 [ 506.057804][T22650] netlink: 'syz.2.4794': attribute type 4 has an invalid length. [ 506.064890][T22649] netlink: 'syz.3.4797': attribute type 1 has an invalid length. [ 506.139518][T22649] bond5: entered promiscuous mode [ 506.147452][T22649] bond5: entered allmulticast mode [ 506.153296][T22649] 8021q: adding VLAN 0 to HW filter on device bond5 [ 506.213966][T22657] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 506.308455][T22644] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.316388][T22644] bridge0: port 1() entered disabled state [ 506.483346][T22644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.505361][T22644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.741420][ T7448] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.768574][ T7448] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 506.798661][ T7448] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.816778][ T7448] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 506.861950][ T7448] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.895942][ T7448] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 506.925101][ T7448] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.944646][ T7448] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 507.032284][T22660] tipc: Started in network mode [ 507.038868][T22660] tipc: Node identity 527a6e76b104, cluster identity 4711 [ 507.060132][T22660] tipc: Enabled bearer , priority 0 [ 507.093310][T22660] syzkaller0: entered promiscuous mode [ 507.110006][T22660] syzkaller0: entered allmulticast mode [ 507.130938][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 507.130948][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4802'. [ 507.284126][T22681] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4806'. [ 507.305334][T22660] tipc: Resetting bearer [ 507.341465][T22658] tipc: Resetting bearer [ 507.411073][T22658] tipc: Disabling bearer [ 507.602052][T22694] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.632583][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4812'. [ 507.762616][T22711] netlink: 'syz.1.4814': attribute type 4 has an invalid length. [ 507.774946][T22711] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4814'. [ 507.871721][T22721] 8021q: VLANs not supported on caif0 [ 508.133679][T22739] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4823'. [ 508.326793][T22747] can: request_module (can-proto-0) failed. [ 508.356383][T22750] can: request_module (can-proto-0) failed. [ 508.798484][T22778] netlink: 'syz.0.4838': attribute type 26 has an invalid length. [ 508.905236][T22783] veth3: entered promiscuous mode [ 509.106778][T22797] x_tables: duplicate underflow at hook 2 [ 509.114120][T22799] netlink: 'syz.2.4843': attribute type 1 has an invalid length. [ 509.249632][T22794] netlink: 'syz.4.4845': attribute type 4 has an invalid length. [ 509.417421][T22814] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 509.444947][T22814] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 509.456129][T22819] ip6gre0: Master is either lo or non-ether device [ 509.463424][T22814] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 509.592564][T22828] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 510.299820][T22867] veth0_macvtap: mtu less than device minimum [ 510.455394][T22875] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 510.764241][T22890] __nla_validate_parse: 9 callbacks suppressed [ 510.801157][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4868'. [ 511.038149][T22900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4872'. [ 511.153359][T22907] lo: left promiscuous mode [ 511.163045][T22907] lo: left allmulticast mode [ 511.173364][T22907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.233804][T22913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.311702][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4879'. [ 511.324240][T22920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4879'. [ 512.034872][T22960] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4888'. [ 512.074127][T22960] vlan0: entered allmulticast mode [ 512.092067][T22960] erspan0: entered allmulticast mode [ 512.136150][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4888'. [ 512.145742][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4888'. [ 512.146157][T22963] block nbd7: Unsupported socket: should be TCP or UNIX. [ 512.205788][T22971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4892'. [ 512.325641][T22969] ipt_REJECT: TCP_RESET invalid for non-tcp [ 512.404767][T22978] netlink: 'syz.1.4894': attribute type 1 has an invalid length. [ 512.414529][T22978] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4894'. [ 512.549257][T22989] bond0: entered promiscuous mode [ 512.567272][T22994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4899'. [ 512.567542][T22989] bond_slave_0: entered promiscuous mode [ 512.607552][T22989] batadv0: entered promiscuous mode [ 512.631226][T22989] debugfs: 'hsr1' already exists in 'hsr' [ 512.671184][T22989] Cannot create hsr debugfs directory [ 512.671245][T23005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.681155][T22989] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 512.705207][T22989] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 512.719574][T22989] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 512.772793][T23002] tipc: Enabled bearer , priority 0 [ 512.781006][T23002] syzkaller0: entered promiscuous mode [ 512.786819][T23002] syzkaller0: entered allmulticast mode [ 512.838573][T23001] tipc: Resetting bearer [ 512.930984][T23001] tipc: Disabling bearer [ 513.848079][T23067] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 513.865174][T23067] bond4: entered promiscuous mode [ 513.870812][T23067] bond4: entered allmulticast mode [ 513.877956][T23067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.954549][T23066] IPVS: set_ctl: invalid protocol: 9 172.20.20.187:20001 [ 514.207863][T23090] xt_recent: Unsupported userspace flags (000000b1) [ 514.529183][T23105] openvswitch: netlink: IP tunnel dst address not specified [ 514.877450][T23119] xt_CT: No such helper "snmp_trap" [ 516.165430][T23179] __nla_validate_parse: 12 callbacks suppressed [ 516.165455][T23179] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4957'. [ 516.372061][T23151] wlan0 speed is unknown, defaulting to 1000 [ 516.416922][T23198] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4961'. [ 516.445841][T23198] IPVS: set_ctl: invalid protocol: 186 0.0.0.0:20000 [ 516.666673][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4950'. [ 516.709110][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4950'. [ 516.917477][T23210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4964'. [ 516.975989][T23210] netem: change failed [ 517.067689][T23183] wlan0 speed is unknown, defaulting to 1000 [ 517.644613][T23225] netlink: 'syz.3.4966': attribute type 2 has an invalid length. [ 517.986216][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4972'. [ 518.722414][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4977'. [ 518.816525][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.824784][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.832811][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.840959][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.849096][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.857510][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.866165][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.874322][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.882691][T23259] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 518.895902][T23253] : renamed from macvlan0 [ 519.293530][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4980'. [ 519.311516][T23273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4982'. [ 519.324163][T23274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4982'. [ 519.368443][T23276] ip6gre0: left promiscuous mode [ 519.386147][T23276] ip6gre0: left allmulticast mode [ 519.883743][T23263] wlan0 speed is unknown, defaulting to 1000 [ 519.924020][T23302] netlink: 'syz.4.4990': attribute type 11 has an invalid length. [ 519.924038][T23303] netlink: 'syz.4.4990': attribute type 11 has an invalid length. [ 520.010490][T23307] nbd: must specify an index to disconnect [ 520.151078][T23315] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 520.253630][T23318] ksmbd: Unknown IPC event: 3, ignore. [ 520.590317][T23338] xt_l2tp: missing protocol rule (udp|l2tpip) [ 520.643272][T23338] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 520.658668][T23338] bond3: entered promiscuous mode [ 520.664050][T23338] bond3: entered allmulticast mode [ 520.669886][T23338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.280038][T23369] __nla_validate_parse: 7 callbacks suppressed [ 521.280059][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'. [ 521.468661][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5011'. [ 521.497331][T23377] syzkaller0: entered promiscuous mode [ 521.504693][T23377] syzkaller0: entered allmulticast mode [ 521.808283][T23390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5015'. [ 522.440090][T23428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5026'. [ 522.911196][T23455] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5033'. [ 523.183525][T23465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5037'. [ 523.388487][T23482] netlink: 'syz.0.5042': attribute type 1 has an invalid length. [ 523.568406][T23492] bond5: (slave gretap1): making interface the new active one [ 523.588872][T23492] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 523.716431][T23496] syzkaller1: entered promiscuous mode [ 523.727526][T23496] syzkaller1: entered allmulticast mode [ 523.781861][T23500] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 523.813621][T23500] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 524.134784][T23489] wlan0 speed is unknown, defaulting to 1000 [ 524.182869][T23523] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 524.760279][T23557] bond6 (unregistering): Released all slaves [ 524.833330][T23566] netlink: 'syz.0.5063': attribute type 10 has an invalid length. [ 525.196973][T23588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5068'. [ 525.358618][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5070'. [ 525.487195][T23599] nbd: must specify at least one socket [ 525.985276][T23625] bridge: RTM_NEWNEIGH with unconfigured vlan 5 on bridge0 [ 525.986660][T23623] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 526.140748][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 526.244970][T23638] tun0: tun_chr_ioctl cmd 1074025675 [ 526.256458][T23638] tun0: persist disabled [ 526.332828][T23644] syzkaller0: entered promiscuous mode [ 526.365983][T23644] syzkaller0: entered allmulticast mode [ 526.459677][T23652] IPv6: sit1: Disabled Multicast RS [ 526.488547][T23658] netlink: 'syz.2.5088': attribute type 1 has an invalid length. [ 526.489190][T23652] sit1: entered allmulticast mode [ 526.501687][T23658] net_ratelimit: 46 callbacks suppressed [ 526.501706][T23658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.536183][T23640] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5085'. [ 526.662259][T23664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5090'. [ 527.179344][T23696] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5102'. [ 527.217968][T23696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5102'. [ 527.274180][T23696] bond0: entered promiscuous mode [ 527.288519][T23696] bond_slave_0: entered promiscuous mode [ 527.299237][T23696] bond_slave_1: entered promiscuous mode [ 527.307904][T23696] bond0: left promiscuous mode [ 527.312810][T23696] bond_slave_0: left promiscuous mode [ 527.319688][T23696] bond_slave_1: left promiscuous mode [ 527.429717][T23708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5107'. [ 527.960207][T23751] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5118'. [ 528.010508][T23751] bond4 (unregistering): Released all slaves [ 528.021170][T23759] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5120'. [ 528.034727][T23754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5118'. [ 528.394702][T23777] SET target dimension over the limit! [ 528.429327][T23777] x_tables: duplicate underflow at hook 4 [ 528.436003][T23777] x_tables: duplicate underflow at hook 4 [ 528.524581][T23777] x_tables: duplicate underflow at hook 4 [ 528.533194][T23777] x_tables: duplicate underflow at hook 4 [ 528.550952][T23777] x_tables: duplicate underflow at hook 4 [ 528.571276][T23777] x_tables: duplicate underflow at hook 4 [ 528.588202][T23777] x_tables: duplicate underflow at hook 4 [ 528.620587][T23777] x_tables: duplicate underflow at hook 4 [ 528.648349][T23777] x_tables: duplicate underflow at hook 4 [ 528.664557][T23777] x_tables: duplicate underflow at hook 4 [ 528.791757][T23795] sock: sock_set_timeout: `syz.3.5130' (pid 23795) tries to set negative timeout [ 528.848915][T23798] netlink: 'syz.0.5128': attribute type 3 has an invalid length. [ 529.237358][T23808] netlink: 'syz.4.5134': attribute type 1 has an invalid length. [ 529.374062][T23816] sch_fq: defrate 0 ignored. [ 529.592074][T23825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5139'. [ 529.878834][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5144'. [ 529.918459][ T31] INFO: task udevd:8140 blocked for more than 143 seconds. [ 529.932196][ T31] Not tainted syzkaller #0 [ 529.947745][ T31] Blocked by coredump. [ 529.958087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.969443][ T31] task:udevd state:D stack:23592 pid:8140 tgid:8140 ppid:5198 task_flags:0x40054c flags:0x00080003 [ 529.982070][ T31] Call Trace: [ 529.985756][ T31] [ 529.988820][ T31] __schedule+0x1798/0x4cc0 [ 529.993634][ T31] ? __pfx___schedule+0x10/0x10 [ 529.999251][ T31] ? schedule+0x91/0x360 [ 530.004241][ T31] schedule+0x165/0x360 [ 530.008594][ T31] io_schedule+0x80/0xd0 [ 530.012944][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 530.018561][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 530.024654][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 530.030250][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 530.036020][ T31] ? __filemap_fdatawait_range+0x1d2/0x230 [ 530.042295][ T31] __filemap_get_folio+0x139/0xaf0 [ 530.047769][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 530.053613][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 530.060497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.066043][ T31] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 530.071750][ T31] ? smp_call_function_many_cond+0xe38/0x12d0 [ 530.078571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.083752][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 530.089354][ T31] blkdev_flush_mapping+0x108/0x270 [ 530.094900][ T31] ? bdev_release+0x40f/0x650 [ 530.100118][ T31] bdev_release+0x417/0x650 [ 530.105063][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 530.110304][ T31] blkdev_release+0x15/0x20 [ 530.115151][ T31] __fput+0x44c/0xa70 [ 530.119186][ T31] task_work_run+0x1d4/0x260 [ 530.123788][ T31] ? __pfx_task_work_run+0x10/0x10 [ 530.129093][ T31] do_exit+0x6b5/0x2300 [ 530.133473][ T31] ? do_raw_spin_lock+0x121/0x290 [ 530.139018][ T31] ? __pfx_do_exit+0x10/0x10 [ 530.144137][ T31] ? cgroup_freezing+0x20/0x350 [ 530.149227][ T31] do_group_exit+0x21c/0x2d0 [ 530.153829][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.159703][ T31] get_signal+0x1285/0x1340 [ 530.164942][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 530.170792][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 530.177391][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 530.182894][ T31] exit_to_user_mode_loop+0x72/0x130 [ 530.188259][ T31] do_syscall_64+0x2bd/0xfa0 [ 530.192995][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.199253][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.205890][ T31] ? clear_bhb_loop+0x60/0xb0 [ 530.210599][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.216640][ T31] RIP: 0033:0x7f035a4a7407 [ 530.221156][ T31] RSP: 002b:00007ffdddcdccb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 530.230054][ T31] RAX: fffffffffffffffc RBX: 00007f035ab43880 RCX: 00007f035a4a7407 [ 530.238599][ T31] RDX: 0000000000000200 RSI: 00007f035ab42000 RDI: 0000000000000009 [ 530.246986][ T31] RBP: 0000558ce779e050 R08: 0000000000000000 R09: 0000000000000000 [ 530.255066][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 530.263139][ T31] R13: 0000000000000000 R14: 0000558ce77a0888 R15: 00007f035ac0839c [ 530.271582][ T31] [ 530.275076][ T31] [ 530.275076][ T31] Showing all locks held in the system: [ 530.282837][ T31] 1 lock held by khungtaskd/31: [ 530.288517][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 530.298741][ T31] 2 locks held by kworker/0:2/812: [ 530.304020][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 530.314857][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 530.324164][ T31] 2 locks held by getty/5592: [ 530.329167][ T31] #0: ffff88814d63a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 530.340108][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 530.350724][ T31] 7 locks held by kworker/u8:20/7444: [ 530.356567][ T31] 1 lock held by udevd/8140: [ 530.361387][ T31] #0: ffff888143303358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 530.371206][ T31] 3 locks held by syz.4.5138/23820: [ 530.376847][ T31] #0: ffff888055963008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 530.387385][ T31] #1: ffff88801e28c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x798/0xd00 [ 530.397752][ T31] #2: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 530.409271][ T31] 2 locks held by syz.0.5145/23843: [ 530.414784][ T31] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 530.424176][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 530.435595][ T31] [ 530.437993][ T31] ============================================= [ 530.437993][ T31] [ 530.455377][ T31] NMI backtrace for cpu 0 [ 530.455402][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 530.455424][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.455435][ T31] Call Trace: [ 530.455443][ T31] [ 530.455452][ T31] dump_stack_lvl+0x189/0x250 [ 530.455488][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.455515][ T31] ? __pfx__printk+0x10/0x10 [ 530.455549][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 530.455576][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 530.455602][ T31] ? __pfx__printk+0x10/0x10 [ 530.455627][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 530.455661][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 530.455687][ T31] watchdog+0xf60/0xfa0 [ 530.455713][ T31] ? watchdog+0x1e2/0xfa0 [ 530.455740][ T31] kthread+0x711/0x8a0 [ 530.455770][ T31] ? __pfx_watchdog+0x10/0x10 [ 530.455788][ T31] ? __pfx_kthread+0x10/0x10 [ 530.455816][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.455842][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.455876][ T31] ? __pfx_kthread+0x10/0x10 [ 530.455903][ T31] ret_from_fork+0x4bc/0x870 [ 530.455926][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 530.455955][ T31] ? __switch_to_asm+0x39/0x70 [ 530.455970][ T31] ? __switch_to_asm+0x33/0x70 [ 530.455985][ T31] ? __pfx_kthread+0x10/0x10 [ 530.456012][ T31] ret_from_fork_asm+0x1a/0x30 [ 530.456048][ T31] [ 530.456055][ T31] Sending NMI from CPU 0 to CPUs 1: [ 530.609958][ C1] NMI backtrace for cpu 1 [ 530.609978][ C1] CPU: 1 UID: 0 PID: 7434 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 530.609997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.610008][ C1] Workqueue: events_unbound toggle_allocation_gate [ 530.610030][ C1] RIP: 0010:use_temporary_mm+0xca/0x220 [ 530.610055][ C1] Code: 8b 05 6a d7 f8 10 a9 ff ff ff 7f 75 0f 65 8b 05 24 14 f9 10 85 c0 0f 85 2b 01 00 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 <4c> 8b 6c 24 40 fa 41 f7 c5 00 02 00 00 74 05 e8 32 4b 52 00 65 8a [ 530.610069][ C1] RSP: 0018:ffffc90003ddf5e0 EFLAGS: 00000002 [ 530.610082][ C1] RAX: 0000000080000001 RBX: ffff88801a058000 RCX: ffff888050d58000 [ 530.610095][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88801a058000 [ 530.610105][ C1] RBP: ffffc90003ddf690 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 530.610117][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: 1ffff920007bbebc [ 530.610128][ C1] R13: 1ffff1100340caab R14: 8000000000000063 R15: dffffc0000000000 [ 530.610148][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 530.610161][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.610172][ C1] CR2: 00007ffa799b42f8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 530.610189][ C1] Call Trace: [ 530.610197][ C1] [ 530.610206][ C1] ? __pfx_use_temporary_mm+0x10/0x10 [ 530.610231][ C1] ? __page_table_check_ptes_set+0x277/0x2f0 [ 530.610256][ C1] __text_poke+0x60f/0xa10 [ 530.610280][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 530.610300][ C1] ? kmem_cache_alloc_node_noprof+0x8b/0x710 [ 530.610322][ C1] ? __pfx___text_poke+0x10/0x10 [ 530.610340][ C1] ? rcu_is_watching+0x15/0xb0 [ 530.610360][ C1] ? trace_contention_end+0x39/0x120 [ 530.610385][ C1] smp_text_poke_batch_finish+0x90a/0x1130 [ 530.610413][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 530.610437][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 530.610465][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 530.610488][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 530.610511][ C1] static_key_enable+0x1a/0x20 [ 530.610531][ C1] toggle_allocation_gate+0xad/0x240 [ 530.610546][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 530.610568][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 530.610590][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 530.610607][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 530.610624][ C1] process_scheduled_works+0xae1/0x17b0 [ 530.610656][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.610681][ C1] worker_thread+0x8a0/0xda0 [ 530.610712][ C1] kthread+0x711/0x8a0 [ 530.610734][ C1] ? __pfx_worker_thread+0x10/0x10 [ 530.610751][ C1] ? __pfx_kthread+0x10/0x10 [ 530.610771][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.610792][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.610812][ C1] ? __pfx_kthread+0x10/0x10 [ 530.610832][ C1] ret_from_fork+0x4bc/0x870 [ 530.610849][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 530.610870][ C1] ? __switch_to_asm+0x39/0x70 [ 530.610883][ C1] ? __switch_to_asm+0x33/0x70 [ 530.610895][ C1] ? __pfx_kthread+0x10/0x10 [ 530.610916][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.610940][ C1] [ 532.474836][ T56] block nbd0: Possible stuck request ffff888024cee1c0: control (read@0,4096B). Runtime 330 seconds